2c5ac69c8a
Implements client support for the basic trusts API operations, note this does not include support for the roles subpath operations, support for those can be added in a subsequent patch. Change-Id: I0c6ba12bad5cc8f3f10697d2a3dcf4f3be8c7ece blueprint: delegation-impersonation-support
104 lines
3.9 KiB
Python
104 lines
3.9 KiB
Python
# vim: tabstop=4 shiftwidth=4 softtabstop=4
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
|
|
# implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
|
|
from keystoneclient import exceptions
|
|
from keystoneclient.openstack.common import timeutils
|
|
from keystoneclient.v3.contrib import trusts
|
|
from tests.v3 import utils
|
|
import uuid
|
|
|
|
|
|
class TrustTests(utils.TestCase, utils.CrudTests):
|
|
def setUp(self):
|
|
super(TrustTests, self).setUp()
|
|
self.additionalSetUp()
|
|
self.key = 'trust'
|
|
self.collection_key = 'trusts'
|
|
self.model = trusts.Trust
|
|
self.manager = self.client.trusts
|
|
self.path_prefix = 'OS-TRUST'
|
|
|
|
def new_ref(self, **kwargs):
|
|
kwargs = super(TrustTests, self).new_ref(**kwargs)
|
|
kwargs.setdefault('project_id', uuid.uuid4().hex)
|
|
return kwargs
|
|
|
|
def test_create(self):
|
|
ref = self.new_ref()
|
|
ref['trustor_user_id'] = uuid.uuid4().hex
|
|
ref['trustee_user_id'] = uuid.uuid4().hex
|
|
ref['impersonation'] = False
|
|
super(TrustTests, self).test_create(ref=ref)
|
|
|
|
def test_create_roles(self):
|
|
ref = self.new_ref()
|
|
ref['trustor_user_id'] = uuid.uuid4().hex
|
|
ref['trustee_user_id'] = uuid.uuid4().hex
|
|
ref['impersonation'] = False
|
|
req_ref = ref.copy()
|
|
|
|
# Note the TrustManager takes a list of role_names, and converts
|
|
# internally to the slightly odd list-of-dict API format, so we
|
|
# have to pass the expected request data to allow correct stubbing
|
|
ref['role_names'] = ['atestrole']
|
|
req_ref['roles'] = [{'name': 'atestrole'}]
|
|
super(TrustTests, self).test_create(ref=ref, req_ref=req_ref)
|
|
|
|
def test_create_expires(self):
|
|
ref = self.new_ref()
|
|
ref['trustor_user_id'] = uuid.uuid4().hex
|
|
ref['trustee_user_id'] = uuid.uuid4().hex
|
|
ref['impersonation'] = False
|
|
ref['expires_at'] = timeutils.parse_isotime(
|
|
'2013-03-04T12:00:01.000000Z')
|
|
req_ref = ref.copy()
|
|
|
|
# Note the TrustManager takes a datetime.datetime object for
|
|
# expires_at, and converts it internally into an iso format datestamp
|
|
req_ref['expires_at'] = '2013-03-04T12:00:01.000000Z'
|
|
super(TrustTests, self).test_create(ref=ref, req_ref=req_ref)
|
|
|
|
def test_create_imp(self):
|
|
ref = self.new_ref()
|
|
ref['trustor_user_id'] = uuid.uuid4().hex
|
|
ref['trustee_user_id'] = uuid.uuid4().hex
|
|
ref['impersonation'] = True
|
|
super(TrustTests, self).test_create(ref=ref)
|
|
|
|
def test_create_roles_imp(self):
|
|
ref = self.new_ref()
|
|
ref['trustor_user_id'] = uuid.uuid4().hex
|
|
ref['trustee_user_id'] = uuid.uuid4().hex
|
|
ref['impersonation'] = True
|
|
req_ref = ref.copy()
|
|
ref['role_names'] = ['atestrole']
|
|
req_ref['roles'] = [{'name': 'atestrole'}]
|
|
super(TrustTests, self).test_create(ref=ref, req_ref=req_ref)
|
|
|
|
def test_list_filter_trustor(self):
|
|
ep = 'v3/OS-TRUST/trusts?trustor_user_id=12345'
|
|
super(TrustTests, self).test_list(expected_path=ep,
|
|
trustor_user='12345')
|
|
|
|
def test_list_filter_trustee(self):
|
|
ep = 'v3/OS-TRUST/trusts?trustee_user_id=12345'
|
|
super(TrustTests, self).test_list(expected_path=ep,
|
|
trustee_user='12345')
|
|
|
|
def test_update(self):
|
|
# Update not supported for the OS-TRUST API
|
|
self.assertRaises(exceptions.HTTPNotImplemented, self.manager.update)
|