8160d31e58
It could be confusing to new comers that the variables cls.os and cls.os_primary or cls.alt_manager and cls.os_alt actually are aliases. Besides we are not consistent in their usage. This patch normalizes the usage around os_admin, os_primary and os_alt. We keep the old aliases for compatibility but we should not use them anymore. This fix a long standing TODO item. Change-Id: I5f7164f7a7ec5d4380ca22885000caa0183a0bf7
51 lines
2.1 KiB
Python
51 lines
2.1 KiB
Python
# Copyright 2015 OpenStack Foundation
|
|
# All Rights Reserved.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
|
|
from tempest.api.identity import base
|
|
from tempest.lib import decorators
|
|
from tempest.lib import exceptions as lib_exc
|
|
|
|
|
|
class IdentityTenantsTest(base.BaseIdentityV2Test):
|
|
|
|
credentials = ['primary', 'alt']
|
|
|
|
@decorators.idempotent_id('ecae2459-243d-4ba1-ad02-65f15dc82b78')
|
|
def test_list_tenants_returns_only_authorized_tenants(self):
|
|
alt_tenant_name = self.os_alt.credentials.tenant_name
|
|
resp = self.non_admin_tenants_client.list_tenants()
|
|
|
|
# check that user can see only that tenants that he presents in so user
|
|
# can successfully authenticate using his credentials and tenant name
|
|
# from received tenants list
|
|
for tenant in resp['tenants']:
|
|
body = self.non_admin_token_client.auth(
|
|
self.os_primary.credentials.username,
|
|
self.os_primary.credentials.password,
|
|
tenant['name'])
|
|
self.assertNotEmpty(body['token']['id'])
|
|
self.assertEqual(body['token']['tenant']['id'], tenant['id'])
|
|
self.assertEqual(body['token']['tenant']['name'], tenant['name'])
|
|
self.assertEqual(
|
|
body['user']['id'], self.os_primary.credentials.user_id)
|
|
|
|
# check that user cannot log in to alt user's tenant
|
|
self.assertRaises(
|
|
lib_exc.Unauthorized,
|
|
self.non_admin_token_client.auth,
|
|
self.os_primary.credentials.username,
|
|
self.os_primary.credentials.password,
|
|
alt_tenant_name)
|