python-openstackclient/openstackclient/tests/functional/identity/v3/test_role_assignment.py

#    Licensed under the Apache License, Version 2.0 (the "License"); you may
#    not use this file except in compliance with the License. You may obtain
#    a copy of the License at
#
#         http://www.apache.org/licenses/LICENSE-2.0
#
#    Unless required by applicable law or agreed to in writing, software
#    distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
#    WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
#    License for the specific language governing permissions and limitations
#    under the License.

from openstackclient.tests.functional.identity.v3 import common


class RoleAssignmentTests(common.IdentityTests):
    def test_role_assignment_list_no_filters(self):
        raw_output = self.openstack('role assignment list')
        items = self.parse_listing(raw_output)
        self.assert_table_structure(items, self.ROLE_ASSIGNMENT_LIST_HEADERS)

    def test_role_assignment_list_user_role_system(self):
        role_name = self._create_dummy_role()
        username = self._create_dummy_user()
        system = 'all'
        raw_output = self.openstack(
            'role add '
            '--user %(user)s '
            '--system %(system)s '
            '%(role)s'
            % {
                'user': username,
                'system': system,
                'role': role_name,
            }
        )
        self.addCleanup(
            self.openstack,
            'role remove '
            '--user %(user)s '
            '--system  %(system)s '
            '%(role)s'
            % {
                'user': username,
                'system': system,
                'role': role_name,
            },
        )
        self.assertEqual(0, len(raw_output))

        raw_output = self.openstack(
            'role assignment list ' '--user %(user)s ' % {'user': username}
        )
        items = self.parse_listing(raw_output)
        self.assert_table_structure(items, self.ROLE_ASSIGNMENT_LIST_HEADERS)

        raw_output = self.openstack(
            'role assignment list ' '--role %(role)s ' % {'role': role_name}
        )
        items = self.parse_listing(raw_output)
        self.assert_table_structure(items, self.ROLE_ASSIGNMENT_LIST_HEADERS)

        raw_output = self.openstack(
            'role assignment list ' '--system %(system)s ' % {'system': system}
        )
        items = self.parse_listing(raw_output)
        self.assert_table_structure(items, self.ROLE_ASSIGNMENT_LIST_HEADERS)

    def test_role_assignment_list_group(self):
        role_name = self._create_dummy_role()
        group = self._create_dummy_group()
        system = 'all'
        raw_output = self.openstack(
            'role add '
            '--group %(group)s '
            '--system %(system)s '
            '%(role)s'
            % {
                'group': group,
                'system': system,
                'role': role_name,
            }
        )
        self.addCleanup(
            self.openstack,
            'role remove '
            '--group %(group)s '
            '--system %(system)s '
            '%(role)s'
            % {
                'group': group,
                'system': system,
                'role': role_name,
            },
        )
        self.assertEqual(0, len(raw_output))
        raw_output = self.openstack(
            'role assignment list ' '--group %(group)s ' % {'group': group}
        )
        items = self.parse_listing(raw_output)
        self.assert_table_structure(items, self.ROLE_ASSIGNMENT_LIST_HEADERS)

    def test_role_assignment_list_domain(self):
        role_name = self._create_dummy_role()
        username = self._create_dummy_user()
        raw_output = self.openstack(
            'role add '
            '--domain %(domain)s '
            '--user %(user)s '
            '%(role)s'
            % {
                'domain': self.domain_name,
                'user': username,
                'role': role_name,
            }
        )
        self.addCleanup(
            self.openstack,
            'role remove '
            '--domain %(domain)s '
            '--user %(user)s '
            '%(role)s'
            % {
                'domain': self.domain_name,
                'user': username,
                'role': role_name,
            },
        )
        self.assertEqual(0, len(raw_output))
        raw_output = self.openstack(
            'role assignment list '
            '--domain %(domain)s ' % {'domain': self.domain_name}
        )
        items = self.parse_listing(raw_output)
        self.assert_table_structure(items, self.ROLE_ASSIGNMENT_LIST_HEADERS)

    def test_role_assignment_list_project(self):
        role_name = self._create_dummy_role()
        username = self._create_dummy_user()
        raw_output = self.openstack(
            'role add '
            '--project %(project)s '
            '--user %(user)s '
            '%(role)s'
            % {
                'project': self.project_name,
                'user': username,
                'role': role_name,
            }
        )
        self.addCleanup(
            self.openstack,
            'role remove '
            '--project %(project)s '
            '--user %(user)s '
            '%(role)s'
            % {
                'project': self.project_name,
                'user': username,
                'role': role_name,
            },
        )
        self.assertEqual(0, len(raw_output))
        raw_output = self.openstack(
            'role assignment list '
            '--project %(project)s ' % {'project': self.project_name}
        )
        items = self.parse_listing(raw_output)
        self.assert_table_structure(items, self.ROLE_ASSIGNMENT_LIST_HEADERS)

    def test_role_assignment_list_effective(self):
        raw_output = self.openstack('role assignment list ' '--effective')
        items = self.parse_listing(raw_output)
        self.assert_table_structure(items, self.ROLE_ASSIGNMENT_LIST_HEADERS)

    def test_role_assignment_list_auth_user(self):
        raw_output = self.openstack('role assignment list ' '--auth-user')
        items = self.parse_listing(raw_output)
        self.assert_table_structure(items, self.ROLE_ASSIGNMENT_LIST_HEADERS)

    def test_role_assignment_list_auth_project(self):
        raw_output = self.openstack('role assignment list ' '--auth-project')
        items = self.parse_listing(raw_output)
        self.assert_table_structure(items, self.ROLE_ASSIGNMENT_LIST_HEADERS)

    def test_role_assignment_list_inherited(self):
        role_name = self._create_dummy_role()
        username = self._create_dummy_user()
        raw_output = self.openstack(
            'role add '
            '--project %(project)s '
            '--user %(user)s '
            '--inherited '
            '%(role)s'
            % {
                'project': self.project_name,
                'user': username,
                'role': role_name,
            }
        )
        self.assertEqual(0, len(raw_output))

        raw_output = self.openstack('role assignment list --inherited')
        items = self.parse_listing(raw_output)
        self.assert_table_structure(items, self.ROLE_ASSIGNMENT_LIST_HEADERS)

    def test_role_assignment_list_names(self):
        raw_output = self.openstack('role assignment list --names')
        items = self.parse_listing(raw_output)
        self.assert_table_structure(items, self.ROLE_ASSIGNMENT_LIST_HEADERS)