
Depends-On: https://review.opendev.org/c/openstack/openstacksdk/+/929578 Change-Id: I22254604705080095ac852a1e03506b1552a1fd2
172 lines
6.2 KiB
Python
172 lines
6.2 KiB
Python
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
|
|
from openstackclient.tests.functional.identity.v3 import common
|
|
|
|
|
|
class RoleAssignmentTests(common.IdentityTests):
|
|
def test_role_assignment_list_no_filters(self):
|
|
raw_output = self.openstack('role assignment list')
|
|
items = self.parse_listing(raw_output)
|
|
self.assert_table_structure(items, self.ROLE_ASSIGNMENT_LIST_HEADERS)
|
|
|
|
def test_role_assignment_list_user_role_system(self):
|
|
role_name = self._create_dummy_role()
|
|
username = self._create_dummy_user()
|
|
system = 'all'
|
|
raw_output = self.openstack(
|
|
'role add '
|
|
f'--user {username} '
|
|
f'--system {system} '
|
|
f'{role_name}'
|
|
)
|
|
self.addCleanup(
|
|
self.openstack,
|
|
'role remove '
|
|
f'--user {username} '
|
|
f'--system {system} '
|
|
f'{role_name}',
|
|
)
|
|
self.assertEqual(0, len(raw_output))
|
|
|
|
raw_output = self.openstack(
|
|
'role assignment list ' f'--user {username} '
|
|
)
|
|
items = self.parse_listing(raw_output)
|
|
self.assert_table_structure(items, self.ROLE_ASSIGNMENT_LIST_HEADERS)
|
|
|
|
raw_output = self.openstack(
|
|
'role assignment list ' f'--role {role_name} '
|
|
)
|
|
items = self.parse_listing(raw_output)
|
|
self.assert_table_structure(items, self.ROLE_ASSIGNMENT_LIST_HEADERS)
|
|
|
|
raw_output = self.openstack(
|
|
'role assignment list ' f'--system {system} '
|
|
)
|
|
items = self.parse_listing(raw_output)
|
|
self.assert_table_structure(items, self.ROLE_ASSIGNMENT_LIST_HEADERS)
|
|
|
|
def test_role_assignment_list_group(self):
|
|
role_name = self._create_dummy_role()
|
|
group = self._create_dummy_group()
|
|
system = 'all'
|
|
raw_output = self.openstack(
|
|
'role add '
|
|
f'--group {group} '
|
|
f'--system {system} '
|
|
f'{role_name}'
|
|
)
|
|
self.addCleanup(
|
|
self.openstack,
|
|
'role remove '
|
|
f'--group {group} '
|
|
f'--system {system} '
|
|
f'{role_name}',
|
|
)
|
|
self.assertEqual(0, len(raw_output))
|
|
raw_output = self.openstack(
|
|
'role assignment list ' f'--group {group} '
|
|
)
|
|
items = self.parse_listing(raw_output)
|
|
self.assert_table_structure(items, self.ROLE_ASSIGNMENT_LIST_HEADERS)
|
|
|
|
def test_role_assignment_list_domain(self):
|
|
role_name = self._create_dummy_role()
|
|
username = self._create_dummy_user()
|
|
raw_output = self.openstack(
|
|
'role add '
|
|
f'--domain {self.domain_name} '
|
|
f'--user {username} '
|
|
f'{role_name}'
|
|
)
|
|
self.addCleanup(
|
|
self.openstack,
|
|
'role remove '
|
|
f'--domain {self.domain_name} '
|
|
f'--user {username} '
|
|
f'{role_name}',
|
|
)
|
|
self.assertEqual(0, len(raw_output))
|
|
raw_output = self.openstack(
|
|
'role assignment list ' f'--domain {self.domain_name} '
|
|
)
|
|
items = self.parse_listing(raw_output)
|
|
self.assert_table_structure(items, self.ROLE_ASSIGNMENT_LIST_HEADERS)
|
|
|
|
def test_role_assignment_list_project(self):
|
|
role_name = self._create_dummy_role()
|
|
username = self._create_dummy_user()
|
|
raw_output = self.openstack(
|
|
'role add '
|
|
f'--project {self.project_name} '
|
|
f'--user {username} '
|
|
f'{role_name}'
|
|
)
|
|
self.addCleanup(
|
|
self.openstack,
|
|
'role remove '
|
|
f'--project {self.project_name} '
|
|
f'--user {username} '
|
|
f'{role_name}',
|
|
)
|
|
self.assertEqual(0, len(raw_output))
|
|
raw_output = self.openstack(
|
|
'role assignment list ' f'--project {self.project_name} '
|
|
)
|
|
items = self.parse_listing(raw_output)
|
|
self.assert_table_structure(items, self.ROLE_ASSIGNMENT_LIST_HEADERS)
|
|
|
|
def test_role_assignment_list_effective(self):
|
|
raw_output = self.openstack('role assignment list ' '--effective')
|
|
items = self.parse_listing(raw_output)
|
|
self.assert_table_structure(items, self.ROLE_ASSIGNMENT_LIST_HEADERS)
|
|
|
|
def test_role_assignment_list_auth_user(self):
|
|
raw_output = self.openstack('role assignment list ' '--auth-user')
|
|
items = self.parse_listing(raw_output)
|
|
self.assert_table_structure(items, self.ROLE_ASSIGNMENT_LIST_HEADERS)
|
|
|
|
def test_role_assignment_list_auth_project(self):
|
|
raw_output = self.openstack('role assignment list ' '--auth-project')
|
|
items = self.parse_listing(raw_output)
|
|
self.assert_table_structure(items, self.ROLE_ASSIGNMENT_LIST_HEADERS)
|
|
|
|
def test_role_assignment_list_inherited(self):
|
|
role_name = self._create_dummy_role()
|
|
username = self._create_dummy_user()
|
|
raw_output = self.openstack(
|
|
'role add '
|
|
f'--project {self.project_name} '
|
|
f'--user {username} '
|
|
'--inherited '
|
|
f'{role_name}'
|
|
)
|
|
self.addCleanup(
|
|
self.openstack,
|
|
'role remove '
|
|
f'--project {self.project_name} '
|
|
f'--user {username} '
|
|
'--inherited '
|
|
f'{role_name}',
|
|
)
|
|
self.assertEqual(0, len(raw_output))
|
|
|
|
raw_output = self.openstack('role assignment list --inherited')
|
|
items = self.parse_listing(raw_output)
|
|
self.assert_table_structure(items, self.ROLE_ASSIGNMENT_LIST_HEADERS)
|
|
|
|
def test_role_assignment_list_names(self):
|
|
raw_output = self.openstack('role assignment list --names')
|
|
items = self.parse_listing(raw_output)
|
|
self.assert_table_structure(items, self.ROLE_ASSIGNMENT_LIST_HEADERS)
|