mirror of
https://github.com/kakwa/ldapcherry
synced 2024-11-25 02:34:31 +01:00
1211ab431b
* adding get_allroles (list all available roles) * adding get_display_name (get display name of a role) * add various unit tests
138 lines
4.2 KiB
Python
138 lines
4.2 KiB
Python
#!/usr/bin/env python
|
|
# -*- coding: utf-8 -*-
|
|
|
|
from __future__ import with_statement
|
|
from __future__ import unicode_literals
|
|
|
|
import pytest
|
|
import sys
|
|
from sets import Set
|
|
from ldapcherry.roles import Roles
|
|
from ldapcherry.exceptions import DumplicateRoleKey, MissingKey, DumplicateRoleContent, MissingRolesFile, MissingRole
|
|
from ldapcherry.pyyamlwrapper import DumplicatedKey, RelationError
|
|
|
|
class TestError(object):
|
|
|
|
def testNominal(self):
|
|
inv = Roles('./tests/cfg/roles.yml')
|
|
print inv.roles
|
|
return True
|
|
|
|
def testMissingDisplayName(self):
|
|
try:
|
|
inv = Roles('./tests/cfg/roles_missing_diplay_name.yml')
|
|
except MissingKey:
|
|
return
|
|
else:
|
|
raise AssertionError("expected an exception")
|
|
|
|
def testMissingBackends(self):
|
|
try:
|
|
inv = Roles('./tests/cfg/roles_missing_backends.yml')
|
|
except MissingKey:
|
|
return
|
|
else:
|
|
raise AssertionError("expected an exception")
|
|
|
|
def testRoleKeyDuplication(self):
|
|
try:
|
|
inv = Roles('./tests/cfg/roles_key_dup.yml')
|
|
except DumplicateRoleKey:
|
|
return
|
|
else:
|
|
raise AssertionError("expected an exception")
|
|
|
|
def testNoFile(self):
|
|
try:
|
|
inv = Roles('./tests/cfg/dontexist')
|
|
except MissingRolesFile:
|
|
return
|
|
else:
|
|
raise AssertionError("expected an exception")
|
|
|
|
def testRoleContentDuplication(self):
|
|
try:
|
|
inv = Roles('./tests/cfg/roles_content_dup.yml')
|
|
except DumplicateRoleContent:
|
|
return
|
|
else:
|
|
raise AssertionError("expected an exception")
|
|
|
|
def testGetGroup(self):
|
|
inv = Roles('./tests/cfg/roles.yml')
|
|
res = inv.get_groups('users')
|
|
expected = {
|
|
'ad': {'groups': ['Domain Users']},
|
|
'ldap': {'groups': ['cn=users,ou=group,dc=example,dc=com']}
|
|
}
|
|
assert res == expected
|
|
|
|
def testGetGroupMissingRole(self):
|
|
inv = Roles('./tests/cfg/roles.yml')
|
|
try:
|
|
res = inv.get_groups('notarole')
|
|
except MissingRole:
|
|
return
|
|
else:
|
|
raise AssertionError("expected an exception")
|
|
|
|
def testGetDisplayNameMissingRole(self):
|
|
inv = Roles('./tests/cfg/roles.yml')
|
|
try:
|
|
res = inv.get_display_name('notarole')
|
|
except MissingRole:
|
|
return
|
|
else:
|
|
raise AssertionError("expected an exception")
|
|
|
|
def testGetDisplayName(self):
|
|
inv = Roles('./tests/cfg/roles.yml')
|
|
res = inv.get_display_name('users')
|
|
expected = 'Simple Users'
|
|
assert res == expected
|
|
|
|
def testGetAllRoles(self):
|
|
inv = Roles('./tests/cfg/roles.yml')
|
|
res = inv.get_allroles()
|
|
expected = ['developpers', 'admin-lv3', 'admin-lv2', 'users']
|
|
assert res == expected
|
|
|
|
def testGetAllRoles(self):
|
|
inv = Roles('./tests/cfg/roles.yml')
|
|
res = inv.get_backends()
|
|
expected = Set(['ad', 'ldap'])
|
|
assert res == expected
|
|
|
|
def testDumpNested(self):
|
|
inv = Roles('./tests/cfg/roles.yml')
|
|
inv.dump_nest()
|
|
|
|
def testAdminRoles(self):
|
|
inv = Roles('./tests/cfg/roles.yml')
|
|
res = inv.get_admin_roles()
|
|
expected = ['admin-lv2', 'admin-lv3']
|
|
assert res == expected
|
|
|
|
def testIsAdmin(self):
|
|
inv = Roles('./tests/cfg/roles.yml')
|
|
res = inv.is_admin(['admin-lv3', 'users'])
|
|
assert res == True
|
|
|
|
def testIsNotAdmin(self):
|
|
inv = Roles('./tests/cfg/roles.yml')
|
|
res = inv.is_admin(['users'])
|
|
assert res == False
|
|
|
|
def testGetRole(self):
|
|
inv = Roles('./tests/cfg/roles.yml')
|
|
groups = {
|
|
'ad' : ['Domain Users', 'Domain Users 2'],
|
|
'ldap': ['cn=users,ou=group,dc=example,dc=com',
|
|
'cn=nagios admins,ou=group,dc=example,dc=com',
|
|
'cn=developpers,ou=group,dc=example,dc=com',
|
|
],
|
|
'toto': ['not a group'],
|
|
}
|
|
expected = {'unusedgroups': {'toto': Set(['not a group']), 'ad': Set(['Domain Users 2'])}, 'roles': Set(['developpers', 'admin-lv2'])}
|
|
assert inv.get_roles(groups) == expected
|