c28756c48b
Python introduced http.HTTPStatus since version 3.5, and Wallaby has targeted a minimum version of python 3.6. Change-Id: I45f732f0f59b8fae831bb6c07f4fdd98cdd7409a
86 lines
3.2 KiB
Python
86 lines
3.2 KiB
Python
# Copyright 2019 ZTE corporation.
|
|
# All Rights Reserved.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
from unittest import mock
|
|
|
|
from http import HTTPStatus
|
|
from oslo_serialization import jsonutils
|
|
|
|
from watcher.decision_engine import rpcapi as deapi
|
|
from watcher.tests.api import base as api_base
|
|
|
|
|
|
class TestListDataModel(api_base.FunctionalTest):
|
|
|
|
def setUp(self):
|
|
super(TestListDataModel, self).setUp()
|
|
p_dcapi = mock.patch.object(deapi, 'DecisionEngineAPI')
|
|
self.mock_dcapi = p_dcapi.start()
|
|
self.mock_dcapi().get_data_model_info.return_value = \
|
|
'fake_response_value'
|
|
self.addCleanup(p_dcapi.stop)
|
|
|
|
def test_get_all(self):
|
|
response = self.get_json(
|
|
'/data_model/?data_model_type=compute',
|
|
headers={'OpenStack-API-Version': 'infra-optim 1.3'})
|
|
self.assertEqual('fake_response_value', response)
|
|
|
|
def test_get_all_not_acceptable(self):
|
|
response = self.get_json(
|
|
'/data_model/?data_model_type=compute',
|
|
headers={'OpenStack-API-Version': 'infra-optim 1.2'},
|
|
expect_errors=True)
|
|
self.assertEqual(HTTPStatus.NOT_ACCEPTABLE, response.status_int)
|
|
|
|
|
|
class TestDataModelPolicyEnforcement(api_base.FunctionalTest):
|
|
|
|
def setUp(self):
|
|
super(TestDataModelPolicyEnforcement, self).setUp()
|
|
p_dcapi = mock.patch.object(deapi, 'DecisionEngineAPI')
|
|
self.mock_dcapi = p_dcapi.start()
|
|
self.addCleanup(p_dcapi.stop)
|
|
|
|
def _common_policy_check(self, rule, func, *arg, **kwarg):
|
|
self.policy.set_rules({
|
|
"admin_api": "(role:admin or role:administrator)",
|
|
"default": "rule:admin_api",
|
|
rule: "rule:defaut"})
|
|
response = func(*arg, **kwarg)
|
|
self.assertEqual(HTTPStatus.FORBIDDEN, response.status_int)
|
|
self.assertEqual('application/json', response.content_type)
|
|
self.assertTrue(
|
|
"Policy doesn't allow %s to be performed." % rule,
|
|
jsonutils.loads(response.json['error_message'])['faultstring'])
|
|
|
|
def test_policy_disallow_get_all(self):
|
|
self._common_policy_check(
|
|
"data_model:get_all", self.get_json,
|
|
"/data_model/?data_model_type=compute",
|
|
headers={'OpenStack-API-Version': 'infra-optim 1.3'},
|
|
expect_errors=True)
|
|
|
|
|
|
class TestDataModelEnforcementWithAdminContext(
|
|
TestListDataModel, api_base.AdminRoleTest):
|
|
|
|
def setUp(self):
|
|
super(TestDataModelEnforcementWithAdminContext, self).setUp()
|
|
self.policy.set_rules({
|
|
"admin_api": "(role:admin or role:administrator)",
|
|
"default": "rule:admin_api",
|
|
"data_model:get_all": "rule:default"})
|