# Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. from openstackclient.tests.functional.identity.v3 import common class RoleAssignmentTests(common.IdentityTests): def test_role_assignment_list_no_filters(self): raw_output = self.openstack('role assignment list') items = self.parse_listing(raw_output) self.assert_table_structure(items, self.ROLE_ASSIGNMENT_LIST_HEADERS) def test_role_assignment_list_user_role_system(self): role_name = self._create_dummy_role() username = self._create_dummy_user() system = 'all' raw_output = self.openstack( 'role add ' f'--user {username} ' f'--system {system} ' f'{role_name}' ) self.addCleanup( self.openstack, 'role remove ' f'--user {username} ' f'--system {system} ' f'{role_name}', ) self.assertEqual(0, len(raw_output)) raw_output = self.openstack( 'role assignment list ' f'--user {username} ' ) items = self.parse_listing(raw_output) self.assert_table_structure(items, self.ROLE_ASSIGNMENT_LIST_HEADERS) raw_output = self.openstack( 'role assignment list ' f'--role {role_name} ' ) items = self.parse_listing(raw_output) self.assert_table_structure(items, self.ROLE_ASSIGNMENT_LIST_HEADERS) raw_output = self.openstack( 'role assignment list ' f'--system {system} ' ) items = self.parse_listing(raw_output) self.assert_table_structure(items, self.ROLE_ASSIGNMENT_LIST_HEADERS) def test_role_assignment_list_group(self): role_name = self._create_dummy_role() group = self._create_dummy_group() system = 'all' raw_output = self.openstack( 'role add ' f'--group {group} ' f'--system {system} ' f'{role_name}' ) self.addCleanup( self.openstack, 'role remove ' f'--group {group} ' f'--system {system} ' f'{role_name}', ) self.assertEqual(0, len(raw_output)) raw_output = self.openstack( 'role assignment list ' f'--group {group} ' ) items = self.parse_listing(raw_output) self.assert_table_structure(items, self.ROLE_ASSIGNMENT_LIST_HEADERS) def test_role_assignment_list_domain(self): role_name = self._create_dummy_role() username = self._create_dummy_user() raw_output = self.openstack( 'role add ' f'--domain {self.domain_name} ' f'--user {username} ' f'{role_name}' ) self.addCleanup( self.openstack, 'role remove ' f'--domain {self.domain_name} ' f'--user {username} ' f'{role_name}', ) self.assertEqual(0, len(raw_output)) raw_output = self.openstack( 'role assignment list ' f'--domain {self.domain_name} ' ) items = self.parse_listing(raw_output) self.assert_table_structure(items, self.ROLE_ASSIGNMENT_LIST_HEADERS) def test_role_assignment_list_project(self): role_name = self._create_dummy_role() username = self._create_dummy_user() raw_output = self.openstack( 'role add ' f'--project {self.project_name} ' f'--user {username} ' f'{role_name}' ) self.addCleanup( self.openstack, 'role remove ' f'--project {self.project_name} ' f'--user {username} ' f'{role_name}', ) self.assertEqual(0, len(raw_output)) raw_output = self.openstack( 'role assignment list ' f'--project {self.project_name} ' ) items = self.parse_listing(raw_output) self.assert_table_structure(items, self.ROLE_ASSIGNMENT_LIST_HEADERS) def test_role_assignment_list_effective(self): raw_output = self.openstack('role assignment list ' '--effective') items = self.parse_listing(raw_output) self.assert_table_structure(items, self.ROLE_ASSIGNMENT_LIST_HEADERS) def test_role_assignment_list_auth_user(self): raw_output = self.openstack('role assignment list ' '--auth-user') items = self.parse_listing(raw_output) self.assert_table_structure(items, self.ROLE_ASSIGNMENT_LIST_HEADERS) def test_role_assignment_list_auth_project(self): raw_output = self.openstack('role assignment list ' '--auth-project') items = self.parse_listing(raw_output) self.assert_table_structure(items, self.ROLE_ASSIGNMENT_LIST_HEADERS) def test_role_assignment_list_inherited(self): role_name = self._create_dummy_role() username = self._create_dummy_user() raw_output = self.openstack( 'role add ' f'--project {self.project_name} ' f'--user {username} ' '--inherited ' f'{role_name}' ) self.addCleanup( self.openstack, 'role remove ' f'--project {self.project_name} ' f'--user {username} ' '--inherited ' f'{role_name}', ) self.assertEqual(0, len(raw_output)) raw_output = self.openstack('role assignment list --inherited') items = self.parse_listing(raw_output) self.assert_table_structure(items, self.ROLE_ASSIGNMENT_LIST_HEADERS) def test_role_assignment_list_names(self): raw_output = self.openstack('role assignment list --names') items = self.parse_listing(raw_output) self.assert_table_structure(items, self.ROLE_ASSIGNMENT_LIST_HEADERS)