diff options
Diffstat (limited to 'python_moondb/tests')
25 files changed, 0 insertions, 3889 deletions
diff --git a/python_moondb/tests/unit_python/conftest.py b/python_moondb/tests/unit_python/conftest.py deleted file mode 100644 index a1057907..00000000 --- a/python_moondb/tests/unit_python/conftest.py +++ /dev/null @@ -1,145 +0,0 @@ -import base64 -import json -import logging -import os -import pytest -import requests_mock -import mock_components -import mock_keystone - -CONF = { - "openstack": { - "keystone": { - "url": "http://keystone:5000/v3", - "user": "admin", - "check_token": False, - "password": "p4ssw0rd", - "domain": "default", - "certificate": False, - "project": "admin" - } - }, - "components": { - "wrapper": { - "bind": "0.0.0.0", - "port": 8080, - "container": "wukongsun/moon_wrapper:v4.3", - "timeout": 5, - "hostname": "wrapper" - }, - "manager": { - "bind": "0.0.0.0", - "port": 8082, - "container": "wukongsun/moon_manager:v4.3", - "hostname": "manager" - }, - "port_start": 31001, - "orchestrator": { - "bind": "0.0.0.0", - "port": 8083, - "container": "wukongsun/moon_orchestrator:v4.3", - "hostname": "interface" - }, - "interface": { - "bind": "0.0.0.0", - "port": 8080, - "container": "wukongsun/moon_interface:v4.3", - "hostname": "interface" - } - }, - "plugins": { - "session": { - "port": 8082, - "container": "asteroide/session:latest" - }, - "authz": { - "port": 8081, - "container": "wukongsun/moon_authz:v4.3" - } - }, - "logging": { - "handlers": { - "file": { - "filename": "/tmp/moon.log", - "class": "logging.handlers.RotatingFileHandler", - "level": "DEBUG", - "formatter": "custom", - "backupCount": 3, - "maxBytes": 1048576 - }, - "console": { - "class": "logging.StreamHandler", - "formatter": "brief", - "level": "INFO", - "stream": "ext://sys.stdout" - } - }, - "formatters": { - "brief": { - "format": "%(levelname)s %(name)s %(message)-30s" - }, - "custom": { - "format": "%(asctime)-15s %(levelname)s %(name)s %(message)s" - } - }, - "root": { - "handlers": [ - "console" - ], - "level": "ERROR" - }, - "version": 1, - "loggers": { - "moon": { - "handlers": [ - "console", - "file" - ], - "propagate": False, - "level": "DEBUG" - } - } - }, - "slave": { - "name": None, - "master": { - "url": None, - "login": None, - "password": None - } - }, - "docker": { - "url": "tcp://172.88.88.1:2376", - "network": "moon" - }, - "database": { - "url": "sqlite:///database.db", - # "url": "mysql+pymysql://moon:p4sswOrd1@db/moon", - "driver": "sql" - }, - "messenger": { - "url": "rabbit://moon:p4sswOrd1@messenger:5672/moon" - } -} - - -@pytest.fixture -def db(): - return CONF['database'] - - -@pytest.fixture(autouse=True) -def set_consul_and_db(monkeypatch): - """ Modify the response from Requests module - """ - with requests_mock.Mocker(real_http=True) as m: - mock_components.register_components(m) - mock_keystone.register_keystone(m) - - from python_moondb.db_manager import init_engine, main - engine = init_engine() - main("upgrade", logging.getLogger("db_manager"), engine) - yield m - os.unlink(CONF['database']['url'].replace("sqlite:///", "")) - - diff --git a/python_moondb/tests/unit_python/helpers/__init__.py b/python_moondb/tests/unit_python/helpers/__init__.py deleted file mode 100644 index e69de29b..00000000 --- a/python_moondb/tests/unit_python/helpers/__init__.py +++ /dev/null diff --git a/python_moondb/tests/unit_python/helpers/assignment_helper.py b/python_moondb/tests/unit_python/helpers/assignment_helper.py deleted file mode 100644 index 22a56e38..00000000 --- a/python_moondb/tests/unit_python/helpers/assignment_helper.py +++ /dev/null @@ -1,49 +0,0 @@ -# Copyright 2015 Open Platform for NFV Project, Inc. and its contributors -# This software is distributed under the terms and conditions of the 'Apache-2.0' -# license which can be found in the file 'LICENSE' in this package distribution -# or at 'http://www.apache.org/licenses/LICENSE-2.0'. - -def get_action_assignments(policy_id, action_id=None, category_id=None): - from python_moondb.core import PolicyManager - return PolicyManager.get_action_assignments("", policy_id, action_id, category_id) - - -def add_action_assignment(policy_id, action_id, category_id, data_id): - from python_moondb.core import PolicyManager - return PolicyManager.add_action_assignment("", policy_id, action_id, category_id, data_id) - - -def delete_action_assignment(policy_id, action_id, category_id, data_id): - from python_moondb.core import PolicyManager - PolicyManager.delete_action_assignment("", policy_id, action_id, category_id, data_id) - - -def get_object_assignments(policy_id, object_id=None, category_id=None): - from python_moondb.core import PolicyManager - return PolicyManager.get_object_assignments("", policy_id, object_id, category_id) - - -def add_object_assignment(policy_id, object_id, category_id, data_id): - from python_moondb.core import PolicyManager - return PolicyManager.add_object_assignment("", policy_id, object_id, category_id, data_id) - - -def delete_object_assignment(policy_id, object_id, category_id, data_id): - from python_moondb.core import PolicyManager - PolicyManager.delete_object_assignment("", policy_id, object_id, category_id, data_id) - - -def get_subject_assignments(policy_id, subject_id=None, category_id=None): - from python_moondb.core import PolicyManager - return PolicyManager.get_subject_assignments("", policy_id, subject_id, category_id) - - -def add_subject_assignment(policy_id, subject_id, category_id, data_id): - from python_moondb.core import PolicyManager - return PolicyManager.add_subject_assignment("", policy_id, subject_id, category_id, data_id) - - -def delete_subject_assignment(policy_id, subject_id, category_id, data_id): - from python_moondb.core import PolicyManager - PolicyManager.delete_subject_assignment("", policy_id, subject_id, category_id, data_id) - diff --git a/python_moondb/tests/unit_python/helpers/category_helper.py b/python_moondb/tests/unit_python/helpers/category_helper.py deleted file mode 100644 index 55e95d91..00000000 --- a/python_moondb/tests/unit_python/helpers/category_helper.py +++ /dev/null @@ -1,54 +0,0 @@ -# Copyright 2015 Open Platform for NFV Project, Inc. and its contributors -# This software is distributed under the terms and conditions of the 'Apache-2.0' -# license which can be found in the file 'LICENSE' in this package distribution -# or at 'http://www.apache.org/licenses/LICENSE-2.0'. - -def add_subject_category(cat_id=None, value=None): - from python_moondb.core import ModelManager - category = ModelManager.add_subject_category(user_id=None, category_id=cat_id, value=value) - return category - - -def get_subject_category(cat_id=None): - from python_moondb.core import ModelManager - category = ModelManager.get_subject_categories(user_id=None, category_id=cat_id) - return category - - -def add_object_category(cat_id=None, value=None): - from python_moondb.core import ModelManager - category = ModelManager.add_object_category(user_id=None, category_id=cat_id, value=value) - return category - - -def get_object_category(cat_id=None): - from python_moondb.core import ModelManager - category = ModelManager.get_object_categories(user_id=None, category_id=cat_id) - return category - - -def add_action_category(cat_id=None, value=None): - from python_moondb.core import ModelManager - category = ModelManager.add_action_category(user_id=None, category_id=cat_id, value=value) - return category - - -def get_action_category(cat_id=None): - from python_moondb.core import ModelManager - category = ModelManager.get_action_categories(user_id=None, category_id=cat_id) - return category - - -def delete_subject_category(category_id=None): - from python_moondb.core import ModelManager - return ModelManager.delete_subject_category("", category_id=category_id) - - -def delete_object_category(category_id=None): - from python_moondb.core import ModelManager - return ModelManager.delete_object_category("", category_id=category_id) - - -def delete_action_category(category_id=None): - from python_moondb.core import ModelManager - return ModelManager.delete_action_category("", category_id=category_id) diff --git a/python_moondb/tests/unit_python/helpers/data_helper.py b/python_moondb/tests/unit_python/helpers/data_helper.py deleted file mode 100644 index 8a8238f5..00000000 --- a/python_moondb/tests/unit_python/helpers/data_helper.py +++ /dev/null @@ -1,98 +0,0 @@ -# Copyright 2015 Open Platform for NFV Project, Inc. and its contributors -# This software is distributed under the terms and conditions of the 'Apache-2.0' -# license which can be found in the file 'LICENSE' in this package distribution -# or at 'http://www.apache.org/licenses/LICENSE-2.0'. - -def get_action_data(policy_id, data_id=None, category_id=None): - from python_moondb.core import PolicyManager - return PolicyManager.get_action_data("", policy_id, data_id, category_id) - - -def add_action_data(policy_id, data_id=None, category_id=None, value=None): - from python_moondb.core import PolicyManager - return PolicyManager.add_action_data("", policy_id, data_id, category_id, value) - - -def delete_action_data(policy_id, data_id): - from python_moondb.core import PolicyManager - PolicyManager.delete_action_data("",policy_id=policy_id, data_id=data_id) - - -def get_object_data(policy_id, data_id=None, category_id=None): - from python_moondb.core import PolicyManager - return PolicyManager.get_object_data("", policy_id, data_id, category_id) - - -def add_object_data(policy_id, data_id=None, category_id=None, value=None): - from python_moondb.core import PolicyManager - return PolicyManager.add_object_data("", policy_id, data_id, category_id, value) - - -def delete_object_data(policy_id, data_id): - from python_moondb.core import PolicyManager - PolicyManager.delete_object_data("", policy_id=policy_id, data_id=data_id) - - -def get_subject_data(policy_id, data_id=None, category_id=None): - from python_moondb.core import PolicyManager - return PolicyManager.get_subject_data("", policy_id, data_id, category_id) - - -def add_subject_data(policy_id, data_id=None, category_id=None, value=None): - from python_moondb.core import PolicyManager - return PolicyManager.set_subject_data("", policy_id, data_id, category_id, value) - - -def delete_subject_data(policy_id, data_id): - from python_moondb.core import PolicyManager - PolicyManager.delete_subject_data("", policy_id=policy_id, data_id=data_id) - - -def get_actions(policy_id, perimeter_id=None): - from python_moondb.core import PolicyManager - return PolicyManager.get_actions("", policy_id, perimeter_id) - - -def add_action(policy_id, perimeter_id=None, value=None): - from python_moondb.core import PolicyManager - return PolicyManager.add_action("", policy_id, perimeter_id, value) - - -def delete_action(policy_id, perimeter_id): - from python_moondb.core import PolicyManager - PolicyManager.delete_action("", policy_id, perimeter_id) - - -def get_objects(policy_id, perimeter_id=None): - from python_moondb.core import PolicyManager - return PolicyManager.get_objects("", policy_id, perimeter_id) - - -def add_object(policy_id, perimeter_id=None, value=None): - from python_moondb.core import PolicyManager - return PolicyManager.add_object("", policy_id, perimeter_id, value) - - -def delete_object(policy_id, perimeter_id): - from python_moondb.core import PolicyManager - PolicyManager.delete_object("", policy_id, perimeter_id) - - -def get_subjects(policy_id, perimeter_id=None): - from python_moondb.core import PolicyManager - return PolicyManager.get_subjects("", policy_id, perimeter_id) - - -def add_subject(policy_id, perimeter_id=None, value=None): - from python_moondb.core import PolicyManager - return PolicyManager.add_subject("", policy_id, perimeter_id, value) - - -def delete_subject(policy_id, perimeter_id): - from python_moondb.core import PolicyManager - PolicyManager.delete_subject("", policy_id, perimeter_id) - - -def get_available_metadata(policy_id): - from python_moondb.core import PolicyManager - return PolicyManager.get_available_metadata("", policy_id) diff --git a/python_moondb/tests/unit_python/helpers/meta_rule_helper.py b/python_moondb/tests/unit_python/helpers/meta_rule_helper.py deleted file mode 100644 index 87af250a..00000000 --- a/python_moondb/tests/unit_python/helpers/meta_rule_helper.py +++ /dev/null @@ -1,48 +0,0 @@ -# Copyright 2015 Open Platform for NFV Project, Inc. and its contributors -# This software is distributed under the terms and conditions of the 'Apache-2.0' -# license which can be found in the file 'LICENSE' in this package distribution -# or at 'http://www.apache.org/licenses/LICENSE-2.0'. - -from helpers import mock_data - - -def update_meta_rule(meta_rule_id, value=None): - from python_moondb.core import ModelManager - if not value: - action_category_id = mock_data.create_action_category("action_category_id1") - subject_category_id = mock_data.create_subject_category("subject_category_id1") - object_category_id = mock_data.create_object_category("object_category_id1") - value = { - "name": "MLS_meta_rule", - "description": "test", - "subject_categories": [subject_category_id], - "object_categories": [object_category_id], - "action_categories": [action_category_id] - } - return ModelManager.update_meta_rule(user_id=None, meta_rule_id=meta_rule_id, value=value) - - -def add_meta_rule(meta_rule_id=None, value=None): - from python_moondb.core import ModelManager - if not value: - action_category_id = mock_data.create_action_category("action_category_id1") - subject_category_id = mock_data.create_subject_category("subject_category_id1") - object_category_id = mock_data.create_object_category("object_category_id1") - value = { - "name": "MLS_meta_rule", - "description": "test", - "subject_categories": [subject_category_id], - "object_categories": [object_category_id], - "action_categories": [action_category_id] - } - return ModelManager.add_meta_rule(user_id=None, meta_rule_id=meta_rule_id, value=value) - - -def get_meta_rules(meta_rule_id=None): - from python_moondb.core import ModelManager - return ModelManager.get_meta_rules(user_id=None, meta_rule_id=meta_rule_id) - - -def delete_meta_rules(meta_rule_id=None): - from python_moondb.core import ModelManager - ModelManager.delete_meta_rule(user_id=None, meta_rule_id=meta_rule_id) diff --git a/python_moondb/tests/unit_python/helpers/mock_data.py b/python_moondb/tests/unit_python/helpers/mock_data.py deleted file mode 100644 index 0d65ea02..00000000 --- a/python_moondb/tests/unit_python/helpers/mock_data.py +++ /dev/null @@ -1,156 +0,0 @@ -# Copyright 2015 Open Platform for NFV Project, Inc. and its contributors -# This software is distributed under the terms and conditions of the 'Apache-2.0' -# license which can be found in the file 'LICENSE' in this package distribution -# or at 'http://www.apache.org/licenses/LICENSE-2.0'. - -from .category_helper import * -from .policy_helper import * -from .data_helper import * -from .model_helper import * -from .meta_rule_helper import * -from uuid import uuid4 - - -def create_subject_category(name): - subject_category = add_subject_category( - value={"name": name, "description": "description 1"}) - return list(subject_category.keys())[0] - - -def create_object_category(name): - object_category = add_object_category( - value={"name": name, "description": "description 1"}) - return list(object_category.keys())[0] - - -def create_action_category(name): - action_category = add_action_category( - value={"name": name, "description": "description 1"}) - return list(action_category.keys())[0] - - -def create_model(meta_rule_id, model_name="test_model"): - value = { - "name": model_name, - "description": "test", - "meta_rules": [meta_rule_id] - - } - return value - - -def create_policy(model_id, policy_name="policy_1"): - value = { - "name": policy_name, - "model_id": model_id, - "genre": "authz", - "description": "test", - } - return value - - -def create_pdp(policies_ids): - value = { - "name": "test_pdp", - "security_pipeline": policies_ids, - "keystone_project_id": "keystone_project_id1", - "description": "...", - } - return value - - -def create_new_policy(subject_category_name="subjectCategory", object_category_name="objectCategory", - action_category_name="actionCategory", - model_name="test_model", policy_name="policy_name", - meta_rule_name="meta_rule_"): - if policy_name == "policy_name": - policy_name = "policy_name_" + uuid4().hex - - subject_category_id, object_category_id, action_category_id, meta_rule_id = create_new_meta_rule( - subject_category_name=subject_category_name + uuid4().hex, - object_category_name=object_category_name + uuid4().hex, - action_category_name=action_category_name + uuid4().hex, - meta_rule_name=meta_rule_name + uuid4().hex - ) - model = add_model(value=create_model(meta_rule_id, model_name)) - model_id = list(model.keys())[0] - value = create_policy(model_id, policy_name) - policy = add_policies(value=value) - assert policy - policy_id = list(policy.keys())[0] - return subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id - - -def create_new_meta_rule(subject_category_name="subject_category" + uuid4().hex, - object_category_name="object_category" + uuid4().hex, - action_category_name="action_category" + uuid4().hex, - meta_rule_name="meta_rule" + uuid4().hex): - from python_moondb.core import ModelManager - - subject_category_id = create_subject_category(subject_category_name) - object_category_id = create_object_category(object_category_name) - action_category_id = create_action_category(action_category_name) - value = {"name": meta_rule_name, - "algorithm": "name of the meta rule algorithm", - "subject_categories": [subject_category_id], - "object_categories": [object_category_id], - "action_categories": [action_category_id] - } - # meta_rule = add_meta_rule(value=value) - meta_rule = ModelManager.add_meta_rule(user_id=None, meta_rule_id=None, value=value) - return subject_category_id, object_category_id, action_category_id, list(meta_rule.keys())[0] - - -def create_subject(policy_id): - value = { - "name": "testuser", - "description": "test", - } - subject = add_subject(policy_id=policy_id, value=value) - return list(subject.keys())[0] - - -def create_object(policy_id): - value = { - "name": "testobject", - "description": "test", - } - object = add_object(policy_id=policy_id, value=value) - return list(object.keys())[0] - - -def create_action(policy_id): - value = { - "name": "testaction", - "description": "test", - } - action = add_action(policy_id=policy_id, value=value) - return list(action.keys())[0] - - -def create_subject_data(policy_id, category_id): - value = { - "name": uuid4().hex, - "description": {uuid4().hex: "", uuid4().hex: "", uuid4().hex: ""}, - } - subject_data = add_subject_data(policy_id=policy_id, category_id=category_id, value=value).get('data') - assert subject_data - return list(subject_data.keys())[0] - - -def create_object_data(policy_id, category_id): - value = { - "name": uuid4().hex, - "description": {uuid4().hex: "", uuid4().hex: "", uuid4().hex: ""}, - } - object_data = add_object_data(policy_id=policy_id, category_id=category_id, value=value).get('data') - return list(object_data.keys())[0] - - -def create_action_data(policy_id, category_id): - value = { - "name": uuid4().hex, - "description": {uuid4().hex: "", uuid4().hex: "", uuid4().hex: ""}, - } - action_data = add_action_data(policy_id=policy_id, category_id=category_id, value=value).get('data') - return list(action_data.keys())[0] diff --git a/python_moondb/tests/unit_python/helpers/model_helper.py b/python_moondb/tests/unit_python/helpers/model_helper.py deleted file mode 100644 index 98a6271d..00000000 --- a/python_moondb/tests/unit_python/helpers/model_helper.py +++ /dev/null @@ -1,47 +0,0 @@ -# Copyright 2015 Open Platform for NFV Project, Inc. and its contributors -# This software is distributed under the terms and conditions of the 'Apache-2.0' -# license which can be found in the file 'LICENSE' in this package distribution -# or at 'http://www.apache.org/licenses/LICENSE-2.0'. - -from helpers import mock_data -from uuid import uuid4 - -def get_models(model_id=None): - from python_moondb.core import ModelManager - return ModelManager.get_models(user_id=None, model_id=model_id) - - -def add_model(model_id=None, value=None): - from python_moondb.core import ModelManager - if not value: - subject_category_id, object_category_id, action_category_id, meta_rule_id = mock_data.create_new_meta_rule() - name = "MLS" if model_id is None else "MLS " + model_id - value = { - "name": name, - "description": "test", - "meta_rules": [meta_rule_id] - } - return ModelManager.add_model(user_id=None, model_id=model_id, value=value) - - -def delete_models(uuid=None, name=None): - from python_moondb.core import ModelManager - if not uuid: - for model_id, model_value in get_models(): - if name == model_value['name']: - uuid = model_id - break - ModelManager.delete_model(user_id=None, model_id=uuid) - - -def delete_all_models(): - from python_moondb.core import ModelManager - models_values = get_models() - print(models_values) - for model_id, model_value in models_values.items(): - ModelManager.delete_model(user_id=None, model_id=model_id) - - -def update_model(model_id=None, value=None): - from python_moondb.core import ModelManager - return ModelManager.update_model(user_id=None, model_id=model_id, value=value) diff --git a/python_moondb/tests/unit_python/helpers/pdp_helper.py b/python_moondb/tests/unit_python/helpers/pdp_helper.py deleted file mode 100644 index 3d169b06..00000000 --- a/python_moondb/tests/unit_python/helpers/pdp_helper.py +++ /dev/null @@ -1,23 +0,0 @@ -# Copyright 2015 Open Platform for NFV Project, Inc. and its contributors -# This software is distributed under the terms and conditions of the 'Apache-2.0' -# license which can be found in the file 'LICENSE' in this package distribution -# or at 'http://www.apache.org/licenses/LICENSE-2.0'. - -def update_pdp(pdp_id, value): - from python_moondb.core import PDPManager - return PDPManager.update_pdp("", pdp_id, value) - - -def delete_pdp(pdp_id): - from python_moondb.core import PDPManager - PDPManager.delete_pdp("", pdp_id) - - -def add_pdp(pdp_id=None, value=None): - from python_moondb.core import PDPManager - return PDPManager.add_pdp("", pdp_id, value) - - -def get_pdp(pdp_id=None): - from python_moondb.core import PDPManager - return PDPManager.get_pdp("", pdp_id) diff --git a/python_moondb/tests/unit_python/helpers/policy_helper.py b/python_moondb/tests/unit_python/helpers/policy_helper.py deleted file mode 100644 index 93d81c62..00000000 --- a/python_moondb/tests/unit_python/helpers/policy_helper.py +++ /dev/null @@ -1,72 +0,0 @@ -# Copyright 2015 Open Platform for NFV Project, Inc. and its contributors -# This software is distributed under the terms and conditions of the 'Apache-2.0' -# license which can be found in the file 'LICENSE' in this package distribution -# or at 'http://www.apache.org/licenses/LICENSE-2.0'. -from helpers import mock_data as mock_data -from helpers import meta_rule_helper - -def get_policies(): - from python_moondb.core import PolicyManager - return PolicyManager.get_policies("admin") - - -def add_policies(policy_id=None, value=None): - from python_moondb.core import PolicyManager - if not value: - value = { - "name": "test_policy", - "model_id": "", - "genre": "authz", - "description": "test", - } - return PolicyManager.add_policy("admin", policy_id=policy_id, value=value) - - -def delete_policies(uuid=None, name=None): - from python_moondb.core import PolicyManager - if not uuid: - for policy_id, policy_value in get_policies(): - if name == policy_value['name']: - uuid = policy_id - break - PolicyManager.delete_policy("admin", uuid) - - -def update_policy(policy_id, value): - from python_moondb.core import PolicyManager - return PolicyManager.update_policy("admin", policy_id, value) - - -def get_policy_from_meta_rules(meta_rule_id): - from python_moondb.core import PolicyManager - return PolicyManager.get_policy_from_meta_rules("admin", meta_rule_id) - - -def get_rules(policy_id=None, meta_rule_id=None, rule_id=None): - from python_moondb.core import PolicyManager - return PolicyManager.get_rules("", policy_id, meta_rule_id, rule_id) - - -def add_rule(policy_id, meta_rule_id, value=None): - from python_moondb.core import PolicyManager - if not value: - meta_rule = meta_rule_helper.get_meta_rules(meta_rule_id) - sub_cat_id = meta_rule[meta_rule_id]['subject_categories'][0] - ob_cat_id = meta_rule[meta_rule_id]['object_categories'][0] - act_cat_id = meta_rule[meta_rule_id]['action_categories'][0] - - subject_data_id = mock_data.create_subject_data(policy_id=policy_id, category_id=sub_cat_id) - object_data_id = mock_data.create_object_data(policy_id=policy_id, category_id=ob_cat_id) - action_data_id = mock_data.create_action_data(policy_id=policy_id, category_id=act_cat_id) - - value = { - "rule": (subject_data_id, object_data_id, action_data_id), - "instructions": ({"decision": "grant"}), - "enabled": "", - } - return PolicyManager.add_rule("", policy_id, meta_rule_id, value) - - -def delete_rule(policy_id=None, rule_id=None): - from python_moondb.core import PolicyManager - PolicyManager.delete_rule("", policy_id, rule_id) diff --git a/python_moondb/tests/unit_python/mock_components.py b/python_moondb/tests/unit_python/mock_components.py deleted file mode 100644 index a0319e1a..00000000 --- a/python_moondb/tests/unit_python/mock_components.py +++ /dev/null @@ -1,27 +0,0 @@ -import utilities - -COMPONENTS = ( - "logging", - "openstack/keystone", - "database", - "slave", - "components/manager", - "components/orchestrator", - "components/interface", -) - - -def register_components(m): - for component in COMPONENTS: - m.register_uri( - 'GET', 'http://consul:8500/v1/kv/{}'.format(component), - json=[{'Key': component, 'Value': utilities.get_b64_conf(component)}] - ) - - m.register_uri( - 'GET', 'http://consul:8500/v1/kv/components?recurse=true', - json=[ - {"Key": key, "Value": utilities.get_b64_conf(key)} for key in COMPONENTS - ], - # json={'Key': "components", 'Value': get_b64_conf("components")} - )
\ No newline at end of file diff --git a/python_moondb/tests/unit_python/mock_keystone.py b/python_moondb/tests/unit_python/mock_keystone.py deleted file mode 100644 index 3f262538..00000000 --- a/python_moondb/tests/unit_python/mock_keystone.py +++ /dev/null @@ -1,33 +0,0 @@ -def register_keystone(m): - m.register_uri( - 'POST', 'http://keystone:5000/v3/auth/tokens', - headers={'X-Subject-Token': "111111111"} - ) - m.register_uri( - 'DELETE', 'http://keystone:5000/v3/auth/tokens', - headers={'X-Subject-Token': "111111111"} - ) - m.register_uri( - 'POST', 'http://keystone:5000/v3/users?name=testuser&domain_id=default', - json={"users": {}} - ) - m.register_uri( - 'GET', 'http://keystone:5000/v3/users?name=testuser&domain_id=default', - json={"users": {}} - ) - m.register_uri( - 'POST', 'http://keystone:5000/v3/users/', - json={"users": [{ - "id": "1111111111111" - }]} - ) - m.register_uri( - 'POST', 'http://keystone:5000/v3/projects/', - json={ - "description": "test_project", - "domain_id": ['domain_id_1'], - "enabled": True, - "is_domain": False, - "name": 'project_1' - } - ) diff --git a/python_moondb/tests/unit_python/models/__init__.py b/python_moondb/tests/unit_python/models/__init__.py deleted file mode 100755 index e69de29b..00000000 --- a/python_moondb/tests/unit_python/models/__init__.py +++ /dev/null diff --git a/python_moondb/tests/unit_python/models/test_categories.py b/python_moondb/tests/unit_python/models/test_categories.py deleted file mode 100644 index 39dc4c71..00000000 --- a/python_moondb/tests/unit_python/models/test_categories.py +++ /dev/null @@ -1,111 +0,0 @@ -# Copyright 2015 Open Platform for NFV Project, Inc. and its contributors -# This software is distributed under the terms and conditions of the 'Apache-2.0' -# license which can be found in the file 'LICENSE' in this package distribution -# or at 'http://www.apache.org/licenses/LICENSE-2.0'. - -import pytest -import logging -from python_moonutilities.exceptions import * -from helpers import category_helper - -logger = logging.getLogger("moon.db.tests.models.test_categories") - - -def test_add_subject_category_twice(): - category = category_helper.add_subject_category( - value={"name": "category name", "description": "description 1"}) - category_id = list(category.keys())[0] - assert category is not None - with pytest.raises(SubjectCategoryExisting): - category_helper.add_subject_category(category_id, - value={"name": "category name", - "description": "description 2"}) - - -def test_add_subject_category_name_space(): - with pytest.raises(CategoryNameInvalid) as exp: - category = category_helper.add_subject_category(value={"name": " ", "description": - "description 1"}) - assert exp.value.code == 400 - assert exp.value.description == 'The given category name is invalid.' - - -def test_get_subject_categories(): - added_category = category_helper.add_subject_category( - value={"name": "category name", "description": "description 1"}) - category_id = list(added_category.keys())[0] - subject_category = category_helper.get_subject_category(category_id) - assert subject_category == added_category - - -def test_get_subject_categories_with_invalid_id(): - category_id = "invalid_id" - subject_category = category_helper.get_subject_category(category_id) - assert len(subject_category) == 0 - - -def test_add_object_category_twice(): - category = category_helper.add_object_category( - value={"name": "category name", "description": "description 1"}) - category_id = list(category.keys())[0] - assert category is not None - with pytest.raises(ObjectCategoryExisting): - category_helper.add_object_category(category_id, - value={"name": "category name", - "description": "description 2"}) - - -def test_add_object_category_name_space(): - with pytest.raises(CategoryNameInvalid) as exp: - category = category_helper.add_object_category(value={"name": " ", "description": - "description 1"}) - assert exp.value.code == 400 - assert exp.value.description == 'The given category name is invalid.' - - -def test_get_object_categories(): - added_category = category_helper.add_object_category( - value={"name": "category name", "description": "description 1"}) - category_id = list(added_category.keys())[0] - object_category = category_helper.get_object_category(category_id) - assert object_category == added_category - - -def test_get_object_categories_with_invalid_id(): - category_id = "invalid_id" - object_category = category_helper.get_object_category(category_id) - assert len(object_category) == 0 - - -def test_add_action_category_twice(): - category = category_helper.add_action_category( - value={"name": "category name", "description": "description 1"}) - category_id = list(category.keys())[0] - assert category is not None - with pytest.raises(ActionCategoryExisting) as exp_info: - category_helper.add_action_category(category_id, - value={"name": "category name", - "description": "description 2"}) - assert str(exp_info.value)=='409: Action Category Existing' - - -def test_add_action_category_name_space(): - with pytest.raises(CategoryNameInvalid) as exp: - category = category_helper.add_action_category(value={"name": " ", "description": - "description 1"}) - assert exp.value.code == 400 - assert exp.value.description == 'The given category name is invalid.' - - -def test_get_action_categories(): - added_category = category_helper.add_action_category( - value={"name": "category name", "description": "description 1"}) - category_id = list(added_category.keys())[0] - action_category = category_helper.get_action_category(category_id) - assert action_category == added_category - - -def test_get_action_categories_with_invalid_id(): - category_id = "invalid_id" - action_category = category_helper.get_action_category(category_id) - assert len(action_category) == 0 diff --git a/python_moondb/tests/unit_python/models/test_meta_rules.py b/python_moondb/tests/unit_python/models/test_meta_rules.py deleted file mode 100644 index 3b2b5b0e..00000000 --- a/python_moondb/tests/unit_python/models/test_meta_rules.py +++ /dev/null @@ -1,403 +0,0 @@ -# Copyright 2015 Open Platform for NFV Project, Inc. and its contributors -# This software is distributed under the terms and conditions of the 'Apache-2.0' -# license which can be found in the file 'LICENSE' in this package distribution -# or at 'http://www.apache.org/licenses/LICENSE-2.0'. - -import pytest -from helpers import meta_rule_helper -from helpers import policy_helper -import helpers.mock_data as mock_data -import helpers.model_helper as model_helper -from python_moonutilities.exceptions import * -from uuid import uuid4 - - -def test_update_not_exist_meta_rule_error(db): - # set not existing meta rule and expect to raise and error - with pytest.raises(MetaRuleUnknown) as exception_info: - meta_rule_helper.update_meta_rule(meta_rule_id=None) - assert str(exception_info.value) == '400: Meta Rule Unknown' - - -def test_update_meta_rule_connected_with_policy_and_rule(): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1", - model_name="model1") - subject_data_id = mock_data.create_subject_data(policy_id=policy_id, - category_id=subject_category_id) - object_data_id = mock_data.create_object_data(policy_id=policy_id, - category_id=object_category_id) - action_data_id = mock_data.create_action_data(policy_id=policy_id, - category_id=action_category_id) - - value = { - "rule": (subject_data_id, object_data_id, action_data_id), - "instructions": ({"decision": "grant"}), - "enabled": "", - } - - rules = policy_helper.add_rule(policy_id=policy_id, meta_rule_id=meta_rule_id, value=value) - assert rules - assert len(rules) == 1 - - action_category_id = mock_data.create_action_category("action_category_id2") - subject_category_id = mock_data.create_subject_category("subject_category_id2") - object_category_id = mock_data.create_object_category("object_category_id2") - - updated_value = { - "name": "MLS_meta_rule", - "description": "test", - "subject_categories": [subject_category_id], - "object_categories": [object_category_id], - "action_categories": [action_category_id] - } - with pytest.raises(MetaRuleUpdateError) as exception_info: - updated_meta_rule = meta_rule_helper.update_meta_rule(meta_rule_id, updated_value) - assert str(exception_info.value) == '400: Meta_Rule Update Error' - - -def test_update_meta_rule_connected_with_policy(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1", - model_name="model1") - action_category_id = mock_data.create_action_category("action_category_id2") - subject_category_id = mock_data.create_subject_category("subject_category_id2") - object_category_id = mock_data.create_object_category("object_category_id2") - value = { - "name": "MLS_meta_rule", - "description": "test", - "subject_categories": [subject_category_id], - "object_categories": [object_category_id], - "action_categories": [action_category_id] - } - meta_rules = meta_rule_helper.add_meta_rule(value=value) - assert isinstance(meta_rules, dict) - assert meta_rules - assert len(meta_rules) is 1 - meta_rule_id = list(meta_rules.keys())[0] - for key in ( - "name", "description", "subject_categories", "object_categories", "action_categories"): - assert key in meta_rules[meta_rule_id] - assert meta_rules[meta_rule_id][key] == value[key] - - -def test_add_new_meta_rule_success(db): - action_category_id = mock_data.create_action_category("action_category_id1") - subject_category_id = mock_data.create_subject_category("subject_category_id1") - object_category_id = mock_data.create_object_category("object_category_id1") - value = { - "name": "MLS_meta_rule", - "description": "test", - "subject_categories": [subject_category_id], - "object_categories": [object_category_id], - "action_categories": [action_category_id] - } - meta_rules = meta_rule_helper.add_meta_rule(value=value) - assert isinstance(meta_rules, dict) - assert meta_rules - assert len(meta_rules) is 1 - meta_rule_id = list(meta_rules.keys())[0] - for key in ( - "name", "description", "subject_categories", "object_categories", "action_categories"): - assert key in meta_rules[meta_rule_id] - assert meta_rules[meta_rule_id][key] == value[key] - - -def test_meta_rule_with_blank_name(db): - action_category_id = mock_data.create_action_category(uuid4().hex) - subject_category_id = mock_data.create_subject_category(uuid4().hex) - object_category_id = mock_data.create_object_category(uuid4().hex) - value = { - "name": "", - "description": "test", - "subject_categories": [subject_category_id], - "object_categories": [object_category_id], - "action_categories": [action_category_id] - } - with pytest.raises(MetaRuleContentError) as exception_info: - meta_rule_helper.add_meta_rule(value=value) - assert str(exception_info.value) == '400: Meta Rule Error' - - -def test_update_meta_rule_success(db): - # arrange - meta_rules = meta_rule_helper.add_meta_rule() - meta_rule_id = list(meta_rules.keys())[0] - action_category_id = mock_data.create_action_category("action_category_id2") - subject_category_id = mock_data.create_subject_category("subject_category_id2") - object_category_id = mock_data.create_object_category("object_category_id2") - updated_value = { - "name": "MLS_meta_rule", - "description": "test", - "subject_categories": [subject_category_id], - "object_categories": [object_category_id], - "action_categories": [action_category_id] - } - # action - updated_meta_rule = meta_rule_helper.update_meta_rule(meta_rule_id, updated_value) - # assert - updated_meta_rule_id = list(updated_meta_rule.keys())[0] - assert updated_meta_rule_id == meta_rule_id - assert updated_meta_rule[updated_meta_rule_id]["subject_categories"] == updated_value[ - "subject_categories"] - - -def test_update_meta_rule_with_existed_categories_combination(db): - action_category_id1 = mock_data.create_action_category(uuid4().hex) - subject_category_id1 = mock_data.create_subject_category(uuid4().hex) - object_category_id1 = mock_data.create_object_category(uuid4().hex) - meta_rule_name1=uuid4().hex - value1 = { - "name": meta_rule_name1, - "description": "test", - "subject_categories": [subject_category_id1], - "object_categories": [object_category_id1], - "action_categories": [action_category_id1] - } - meta_rules = meta_rule_helper.add_meta_rule(value=value1) - - action_category_id2 = mock_data.create_action_category(uuid4().hex) - subject_category_id2 = mock_data.create_subject_category(uuid4().hex) - object_category_id2 = mock_data.create_object_category(uuid4().hex) - meta_rule_name2 = uuid4().hex - value2 = { - "name": meta_rule_name2, - "description": "test", - "subject_categories": [subject_category_id2], - "object_categories": [object_category_id2], - "action_categories": [action_category_id2] - } - meta_rules = meta_rule_helper.add_meta_rule(value=value2) - meta_rule_id2 = list(meta_rules.keys())[0] - value1['name']=value2['name'] - with pytest.raises(MetaRuleExisting) as exception_info: - updated_meta_rule = meta_rule_helper.update_meta_rule(meta_rule_id2, value1) - assert str(exception_info.value) == '409: Meta Rule Existing' - assert exception_info.value.description=="Same categories combination existed" - - -def test_update_meta_rule_with_different_categories_combination_but_same_data(db): - action_category_id1 = mock_data.create_action_category(uuid4().hex) - subject_category_id1 = mock_data.create_subject_category(uuid4().hex) - object_category_id1 = mock_data.create_object_category(uuid4().hex) - meta_rule_name1=uuid4().hex - value1 = { - "name": meta_rule_name1, - "description": "test", - "subject_categories": [subject_category_id1], - "object_categories": [object_category_id1], - "action_categories": [action_category_id1] - } - meta_rules = meta_rule_helper.add_meta_rule(value=value1) - - action_category_id2 = mock_data.create_action_category(uuid4().hex) - subject_category_id2 = mock_data.create_subject_category(uuid4().hex) - object_category_id2 = mock_data.create_object_category(uuid4().hex) - meta_rule_name2 = uuid4().hex - value2 = { - "name": meta_rule_name2, - "description": "test", - "subject_categories": [subject_category_id2], - "object_categories": [object_category_id2], - "action_categories": [action_category_id2] - } - meta_rules = meta_rule_helper.add_meta_rule(value=value2) - meta_rule_id2 = list(meta_rules.keys())[0] - value1['name']=value2['name'] - value1['object_categories']+=[object_category_id1] - updated_meta_rule = meta_rule_helper.update_meta_rule(meta_rule_id2, value1) - assert meta_rule_id2 in updated_meta_rule - - -def test_add_existing_meta_rule_error(db): - action_category_id = mock_data.create_action_category("action_category_id3") - subject_category_id = mock_data.create_subject_category("subject_category_id3") - object_category_id = mock_data.create_object_category("object_category_id3") - value = { - "name": "MLS_meta_rule", - "description": "test", - "subject_categories": [subject_category_id], - "object_categories": [object_category_id], - "action_categories": [action_category_id] - } - meta_rules = meta_rule_helper.add_meta_rule(value=value) - meta_rule_id = list(meta_rules.keys())[0] - with pytest.raises(MetaRuleExisting) as exception_info: - meta_rule_helper.add_meta_rule(meta_rule_id=meta_rule_id) - assert str(exception_info.value) == '409: Meta Rule Existing' - - -def test_add_meta_rule_with_existing_name_error(db): - action_category_id = mock_data.create_action_category(uuid4().hex) - subject_category_id = mock_data.create_subject_category(uuid4().hex) - object_category_id = mock_data.create_object_category(uuid4().hex) - name = uuid4().hex - value = { - "name": name, - "description": "test", - "subject_categories": [subject_category_id], - "object_categories": [object_category_id], - "action_categories": [action_category_id] - } - meta_rule_helper.add_meta_rule(value=value) - action_category_id = mock_data.create_action_category(uuid4().hex) - subject_category_id = mock_data.create_subject_category(uuid4().hex) - object_category_id = mock_data.create_object_category(uuid4().hex) - value = { - "name": name, - "description": 'test', - "subject_categories": [subject_category_id], - "object_categories": [object_category_id], - "action_categories": [action_category_id] - } - with pytest.raises(MetaRuleExisting) as exception_info: - meta_rule_helper.add_meta_rule(value=value) - assert str(exception_info.value) == '409: Meta Rule Existing' - assert exception_info.value.description == 'The meta rule already exists.' - - -def test_add_meta_rule_with_existing_categories_combination(db): - action_category_id = mock_data.create_action_category(uuid4().hex) - subject_category_id = mock_data.create_subject_category(uuid4().hex) - object_category_id = mock_data.create_object_category(uuid4().hex) - name = uuid4().hex - value = { - "name": name, - "description": "test", - "subject_categories": [subject_category_id], - "object_categories": [object_category_id], - "action_categories": [action_category_id] - } - meta_rule_helper.add_meta_rule(value=value) - value['name'] = uuid4().hex - with pytest.raises(MetaRuleExisting) as exception_info: - meta_rule_helper.add_meta_rule(value=value) - assert str(exception_info.value) == '409: Meta Rule Existing' - assert exception_info.value.description == "Same categories combination existed" - - -def test_add_meta_rule_with_different_categories_combination_but_same_data(db): - action_category_id = mock_data.create_action_category(uuid4().hex) - subject_category_id = mock_data.create_subject_category(uuid4().hex) - object_category_id1 = mock_data.create_object_category(uuid4().hex) - object_category_id2 = mock_data.create_object_category(uuid4().hex) - - name1 = uuid4().hex - value = { - "name": name1, - "description": "test", - "subject_categories": [subject_category_id], - "object_categories": [object_category_id1], - "action_categories": [action_category_id] - } - meta_rule_helper.add_meta_rule(value=value) - name2 = uuid4().hex - value['name'] = name2 - value['object_categories'] += [object_category_id2] - meta_rules = meta_rule_helper.add_meta_rule(value=value) - bool_found_meta_rule = 0 - for meta_rule_id in meta_rules: - if meta_rules[meta_rule_id]['name'] == name2: - bool_found_meta_rule = 1 - break - assert bool_found_meta_rule - - -def test_get_meta_rule_success(db): - # arrange - action_category_id = mock_data.create_action_category("action_type") - subject_category_id = mock_data.create_subject_category("user_security_level") - object_category_id = mock_data.create_object_category("vm_security_level") - values = {} - value1 = { - "name": "MLS_meta_rule", - "description": "test", - "subject_categories": [subject_category_id], - "object_categories": [object_category_id], - "action_categories": [action_category_id] - } - meta_rules1 = meta_rule_helper.add_meta_rule(value=value1) - meta_rule_id1 = list(meta_rules1.keys())[0] - values[meta_rule_id1] = value1 - action_category_id = mock_data.create_action_category("action_type2") - subject_category_id = mock_data.create_subject_category("user_security_level2") - object_category_id = mock_data.create_object_category("vm_security_level2") - value2 = { - "name": "rbac_meta_rule", - "description": "test", - "subject_categories": [subject_category_id], - "object_categories": [object_category_id], - "action_categories": [action_category_id] - } - meta_rules2 = meta_rule_helper.add_meta_rule(value=value2) - meta_rule_id2 = list(meta_rules2.keys())[0] - values[meta_rule_id2] = value2 - - # action - meta_rules = meta_rule_helper.get_meta_rules() - # assert - assert isinstance(meta_rules, dict) - assert meta_rules - assert len(meta_rules) is 2 - for meta_rule_id in meta_rules: - for key in ( - "name", "description", "subject_categories", "object_categories", "action_categories"): - assert key in meta_rules[meta_rule_id] - assert meta_rules[meta_rule_id][key] == values[meta_rule_id][key] - - -def test_get_specific_meta_rule_success(db): - # arrange - added_meta_rules = meta_rule_helper.add_meta_rule() - added_meta_rule_id = list(added_meta_rules.keys())[0] - # action - meta_rules = meta_rule_helper.get_meta_rules(meta_rule_id=added_meta_rule_id) - meta_rule_id = list(meta_rules.keys())[0] - # assert - assert meta_rule_id == added_meta_rule_id - for key in ( - "name", "description", "subject_categories", "object_categories", "action_categories"): - assert key in meta_rules[meta_rule_id] - assert meta_rules[meta_rule_id][key] == added_meta_rules[added_meta_rule_id][key] - - -def test_delete_meta_rules_success(db): - action_category_id = mock_data.create_action_category("action_type") - subject_category_id = mock_data.create_subject_category("user_security_level") - object_category_id = mock_data.create_object_category("vm_security_level") - # arrange - value1 = { - "name": "MLS_meta_rule", - "description": "test", - "subject_categories": [subject_category_id], - "object_categories": [object_category_id], - "action_categories": [action_category_id] - } - meta_rules1 = meta_rule_helper.add_meta_rule(value=value1) - meta_rule_id1 = list(meta_rules1.keys())[0] - - # action - meta_rule_helper.delete_meta_rules(meta_rule_id1) - # assert - meta_rules = meta_rule_helper.get_meta_rules() - assert meta_rule_id1 not in meta_rules - - -def test_delete_meta_rules_with_model(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy() - - with pytest.raises(DeleteMetaRuleWithModel) as exception_info: - meta_rule_helper.delete_meta_rules(meta_rule_id) - assert str(exception_info.value) == '400: Meta rule With Model Error' - - -def test_delete_invalid_meta_rules_error(db): - with pytest.raises(MetaRuleUnknown) as exception_info: - meta_rule_helper.delete_meta_rules("INVALID_META_RULE_ID") - assert str(exception_info.value) == '400: Meta Rule Unknown' diff --git a/python_moondb/tests/unit_python/models/test_models.py b/python_moondb/tests/unit_python/models/test_models.py deleted file mode 100644 index 1b171069..00000000 --- a/python_moondb/tests/unit_python/models/test_models.py +++ /dev/null @@ -1,622 +0,0 @@ -# Copyright 2015 Open Platform for NFV Project, Inc. and its contributors -# This software is distributed under the terms and conditions of the 'Apache-2.0' -# license which can be found in the file 'LICENSE' in this package distribution -# or at 'http://www.apache.org/licenses/LICENSE-2.0'. - -import pytest -from python_moonutilities.exceptions import * -import logging -import helpers.mock_data as mock_data -import helpers.model_helper as model_helper -import helpers.category_helper as category_helper -import helpers.policy_helper as policy_helper -import helpers.assignment_helper as assignment_helper -from uuid import uuid4 - -logger = logging.getLogger("moon.db.tests.test_model") - - -def test_get_models_empty(db): - # act - models = model_helper.get_models() - # assert - assert isinstance(models, dict) - assert not models - - -def test_get_model(db): - # prepare - model_helper.add_model(model_id="mls_model_id") - # act - models = model_helper.get_models() - # assert - assert isinstance(models, dict) - assert models # assert model is not empty - assert len(models) is 1 - model_helper.delete_all_models() - - -def test_get_specific_model(db): - # prepare - model_helper.add_model(model_id="mls_model_id") - # act - models = model_helper.get_models(model_id="mls_model_id") - # assert - assert isinstance(models, dict) - assert models # assert model is not empty - assert len(models) is 1 - model_helper.delete_all_models() - - -def test_add_model(db): - # act - model = model_helper.add_model() - # assert - assert isinstance(model, dict) - assert model # assert model is not empty - assert len(model) is 1 - model_helper.delete_all_models() - - -def test_add_same_model_twice(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id = mock_data.create_new_meta_rule( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1") - value = { - "name": "model1", - "description": "test", - "meta_rules": [meta_rule_id] - } - # prepare - model_helper.add_model(model_id="model_1", value=value) # add model twice - # act - subject_category_id, object_category_id, action_category_id, meta_rule_id = mock_data.create_new_meta_rule( - subject_category_name="subject_category2", - object_category_name="object_category2", - action_category_name="action_category2", - meta_rule_name="meta_rule_2") - value = { - "name": "model2", - "description": "test", - "meta_rules": [meta_rule_id] - } - with pytest.raises(ModelExisting) as exception_info: - model_helper.add_model(model_id="model_1", value=value) - model_helper.delete_all_models() - assert str(exception_info.value) == '409: Model Error' - - -def test_add_model_generate_new_uuid(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id1 = mock_data.create_new_meta_rule( - subject_category_name="subject_category3", - object_category_name="object_category3", - action_category_name="action_category3", - meta_rule_name="meta_rule_3") - model_value1 = { - "name": "MLS", - "description": "test", - "meta_rules": [meta_rule_id1] - } - model1 = model_helper.add_model(value=model_value1) - subject_category_id, object_category_id, action_category_id, meta_rule_id2 = mock_data.create_new_meta_rule( - subject_category_name="subject_category4", - object_category_name="object_category4", - action_category_name="action_category4", - meta_rule_name="meta_rule_4") - model_value2 = { - "name": "rbac", - "description": "test", - "meta_rules": [meta_rule_id2] - } - model2 = model_helper.add_model(value=model_value2) - - assert list(model1)[0] != list(model2)[0] - model_helper.delete_all_models() - - -def test_add_models(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id = mock_data.create_new_meta_rule( - subject_category_name="subject_category5", - object_category_name="object_category5", - action_category_name="action_category5") - model_value1 = { - "name": "MLS", - "description": "test", - "meta_rules": [meta_rule_id] - } - models = model_helper.add_model(value=model_value1) - assert isinstance(models, dict) - assert models - assert len(models.keys()) == 1 - model_id = list(models.keys())[0] - for key in ("name", "meta_rules", "description"): - assert key in models[model_id] - assert models[model_id][key] == model_value1[key] - model_helper.delete_all_models() - - -def test_add_models_with_same_name_twice(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id = mock_data.create_new_meta_rule( - subject_category_name="subject_category5", - object_category_name="object_category5", - action_category_name="action_category5") - model_value1 = { - "name": "MLS", - "description": "test", - "meta_rules": [meta_rule_id] - } - models = model_helper.add_model(value=model_value1) - assert isinstance(models, dict) - assert models - with pytest.raises(Exception) as exception_info: - model_helper.add_model(value=model_value1) - model_helper.delete_all_models() - assert str(exception_info.value) == '409: Model Error' - -def test_add_model_with_existed_meta_rules_list(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id = mock_data.create_new_meta_rule( - subject_category_name=uuid4().hex, - object_category_name=uuid4().hex, - action_category_name=uuid4().hex) - model_value1 = { - "name": uuid4().hex, - "description": "test", - "meta_rules": [meta_rule_id] - } - models = model_helper.add_model(value=model_value1) - assert isinstance(models, dict) - assert models - model_value1 = { - "name": uuid4().hex, - "description": "test", - "meta_rules": [meta_rule_id] - } - with pytest.raises(Exception) as exception_info: - model_helper.add_model(value=model_value1) - model_helper.delete_all_models() - assert str(exception_info.value) == '409: Model Error' - assert str(exception_info.value.description)=='Meta Rules List Existed in another Model' - - -def test_delete_models(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id1 = mock_data.create_new_meta_rule( - subject_category_name="subject_category6", - object_category_name="object_category6", - action_category_name="action_category6", - meta_rule_name="meta_rule_6") - model_value1 = { - "name": "MLS", - "description": "test", - "meta_rules": [meta_rule_id1] - } - model1 = model_helper.add_model(value=model_value1) - subject_category_id, object_category_id, action_category_id, meta_rule_id2 = mock_data.create_new_meta_rule( - subject_category_name="subject_category7", - object_category_name="object_category7", - action_category_name="action_category7", - meta_rule_name="meta_rule_7") - model_value2 = { - "name": "rbac", - "description": "test", - "meta_rules": [meta_rule_id2] - } - model_helper.add_model(value=model_value2) - - id = list(model1)[0] - model_helper.delete_models(id) - # assert - models = model_helper.get_models() - assert id not in models - model_helper.delete_all_models() - - -def test_update_model(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id1 = mock_data.create_new_meta_rule( - subject_category_name="subject_category8", - object_category_name="object_category8", - action_category_name="action_category8", - meta_rule_name="meta_rule_8") - # prepare - model_value = { - "name": "MLS", - "description": "test", - "meta_rules": [meta_rule_id1] - } - model = model_helper.add_model(value=model_value) - model_id = list(model)[0] - subject_category_id, object_category_id, action_category_id, meta_rule_id2 = mock_data.create_new_meta_rule( - subject_category_name="subject_category9", - object_category_name="object_category9", - action_category_name="action_category9", - meta_rule_name="meta_rule_9") - new_model_value = { - "name": "MLS2", - "description": "test", - "meta_rules": [meta_rule_id2] - } - # act - model_helper.update_model(model_id=model_id, value=new_model_value) - # assert - model = model_helper.get_models(model_id) - - for key in ("name", "meta_rules", "description"): - assert key in model[model_id] - assert model[model_id][key] == new_model_value[key] - model_helper.delete_all_models() - - -def test_delete_model_assigned_to_policy(db): - model_value1 = { - "name": "MLS", - "description": "test", - "meta_rules": [] - } - models = model_helper.add_model(value=model_value1) - assert isinstance(models, dict) - assert models - assert len(models.keys()) == 1 - model_id = list(models.keys())[0] - value = { - "name": "test_policy", - "model_id": model_id, - "genre": "authz", - "description": "test", - } - policy_helper.add_policies(value=value) - with pytest.raises(DeleteModelWithPolicy) as exception_info: - model_helper.delete_models(uuid=model_id) - assert str(exception_info.value) == '400: Model With Policy Error' - - -def test_add_subject_category(db): - category_id = "category_id1" - value = { - "name": "subject_category", - "description": "description subject_category" - } - subject_category = category_helper.add_subject_category(category_id, value) - assert subject_category - assert len(subject_category) == 1 - - -def test_add_subject_categories_with_existed_name(db): - name = uuid4().hex - value = { - "name": name, - "description": "description subject_category" - } - subject_category = category_helper.add_subject_category(value=value) - assert subject_category - assert len(subject_category) == 1 - - value = { - "name": name, - "description": "description subject_category" - } - with pytest.raises(SubjectCategoryExisting) as exception_info: - category_helper.add_subject_category(value=value) - assert str(exception_info.value) == '409: Subject Category Existing' - - -def test_add_subject_category_with_empty_name(db): - category_id = "category_id1" - value = { - "name": "", - "description": "description subject_category" - } - with pytest.raises(CategoryNameInvalid) as exception_info: - category_helper.add_subject_category(category_id, value) - assert str(exception_info.value) == '400: Category Name Invalid' - - -def test_add_subject_category_with_same_category_id(db): - category_id = "category_id1" - value = { - "name": "subject_category", - "description": "description subject_category" - } - category_helper.add_subject_category(category_id, value) - with pytest.raises(SubjectCategoryExisting) as exception_info: - category_helper.add_subject_category(category_id, value) - assert str(exception_info.value) == '409: Subject Category Existing' - - -def test_get_subject_category(db): - category_id = "category_id1" - value = { - "name": "subject_category", - "description": "description subject_category" - } - category_helper.add_subject_category(category_id, value) - subject_category = category_helper.get_subject_category(category_id) - assert subject_category - assert len(subject_category) == 1 - - -def test_delete_subject_category(db): - category_id = "category_id1" - value = { - "name": "subject_category", - "description": "description subject_category" - } - category_helper.add_subject_category(category_id, value) - subject_category = category_helper.delete_subject_category(category_id) - assert not subject_category - - -def test_delete_subject_category_with_data(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy() - - mock_data.create_subject_data(policy_id, subject_category_id) - - with pytest.raises(DeleteSubjectCategoryWithMetaRule) as exception_info: - category_helper.delete_subject_category(subject_category_id) - assert str(exception_info.value) == '400: Subject Category With Meta Rule Error' - - -def test_delete_subject_category_with_assignment(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy() - - subject_id = mock_data.create_subject(policy_id) - data_id = mock_data.create_subject_data(policy_id, subject_category_id) - assignment_helper.add_subject_assignment(policy_id, subject_id, subject_category_id, data_id) - - with pytest.raises(DeleteSubjectCategoryWithMetaRule) as exception_info: - category_helper.delete_subject_category(subject_category_id) - assert str(exception_info.value) == '400: Subject Category With Meta Rule Error' - - -def test_delete_subject_category_with_rule(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy() - policy_helper.add_rule(policy_id=policy_id, meta_rule_id=meta_rule_id) - - with pytest.raises(DeleteSubjectCategoryWithMetaRule) as exception_info: - category_helper.delete_subject_category(subject_category_id) - assert str(exception_info.value) == '400: Subject Category With Meta Rule Error' - - -def test_delete_subject_category_with_unkown_category_id(db): - category_id = "invalid_category_id" - - with pytest.raises(SubjectCategoryUnknown) as exception_info: - category_helper.delete_subject_category(category_id) - assert str(exception_info.value) == '400: Subject Category Unknown' - - -def test_add_object_category(db): - category_id = "category_id1" - value = { - "name": "object_category", - "description": "description object_category" - } - object_category = category_helper.add_object_category(category_id, value) - assert object_category - assert len(object_category) == 1 - - -def test_add_object_categories_with_existed_name(db): - name = uuid4().hex - value = { - "name": name, - "description": "description object_category" - } - object_category = category_helper.add_object_category(value=value) - assert object_category - assert len(object_category) == 1 - with pytest.raises(ObjectCategoryExisting) as exception_info: - category_helper.add_object_category(value=value) - assert str(exception_info.value) == '409: Object Category Existing' - - -def test_add_object_category_with_same_category_id(db): - category_id = "category_id1" - value = { - "name": "object_category", - "description": "description object_category" - } - category_helper.add_object_category(category_id, value) - with pytest.raises(ObjectCategoryExisting) as exception_info: - category_helper.add_object_category(category_id, value) - assert str(exception_info.value) == '409: Object Category Existing' - - -def test_add_object_category_with_empty_name(db): - category_id = "category_id1" - value = { - "name": "", - "description": "description object_category" - } - with pytest.raises(CategoryNameInvalid) as exception_info: - category_helper.add_object_category(category_id, value) - assert str(exception_info.value) == '400: Category Name Invalid' - - -def test_get_object_category(db): - category_id = "category_id1" - value = { - "name": "object_category", - "description": "description object_category" - } - category_helper.add_object_category(category_id, value) - object_category = category_helper.get_object_category(category_id) - assert object_category - assert len(object_category) == 1 - - -def test_delete_object_category(db): - category_id = "category_id1" - value = { - "name": "object_category", - "description": "description object_category" - } - category_helper.add_object_category(category_id, value) - object_category = category_helper.delete_object_category(category_id) - assert not object_category - - -def test_delete_object_category_with_data(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy() - mock_data.create_subject_data(policy_id, subject_category_id) - - mock_data.create_object_data(policy_id, object_category_id) - - with pytest.raises(DeleteObjectCategoryWithMetaRule) as exception_info: - category_helper.delete_object_category(object_category_id) - assert str(exception_info.value) == '400: Object Category With Meta Rule Error' - - -def test_delete_object_category_with_assignment(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy() - - object_id = mock_data.create_object(policy_id) - data_id = mock_data.create_object_data(policy_id, object_category_id) - assignment_helper.add_object_assignment(policy_id, object_id, object_category_id, data_id) - - with pytest.raises(DeleteObjectCategoryWithMetaRule) as exception_info: - category_helper.delete_object_category(object_category_id) - assert str(exception_info.value) == '400: Object Category With Meta Rule Error' - - -def test_delete_object_category_with_rule(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy() - policy_helper.add_rule(policy_id=policy_id, meta_rule_id=meta_rule_id) - - with pytest.raises(DeleteObjectCategoryWithMetaRule) as exception_info: - category_helper.delete_object_category(object_category_id) - assert str(exception_info.value) == '400: Object Category With Meta Rule Error' - - -def test_delete_object_category_with_unkown_category_id(db): - category_id = "invalid_category_id" - - with pytest.raises(ObjectCategoryUnknown) as exception_info: - category_helper.delete_object_category(category_id) - assert str(exception_info.value) == '400: Object Category Unknown' - - -def test_add_action_category(db): - category_id = "category_id1" - value = { - "name": "action_category", - "description": "description action_category" - } - action_category = category_helper.add_action_category(category_id, value) - assert action_category - assert len(action_category) == 1 - - -def test_add_action_categories_with_existed_name(db): - name = uuid4().hex - value = { - "name": name, - "description": "description action_category" - } - action_category = category_helper.add_action_category(value=value) - assert action_category - assert len(action_category) == 1 - with pytest.raises(ActionCategoryExisting) as exception_info: - category_helper.add_action_category(value=value) - assert str(exception_info.value) == '409: Action Category Existing' - - -def test_add_action_category_with_same_category_id(db): - category_id = "category_id1" - value = { - "name": "action_category", - "description": "description action_category" - } - category_helper.add_action_category(category_id, value) - with pytest.raises(ActionCategoryExisting) as exception_info: - category_helper.add_action_category(category_id, value) - assert str(exception_info.value) == '409: Action Category Existing' - - -def test_add_action_category_with_empty_name(db): - category_id = "category_id1" - value = { - "name": "", - "description": "description action_category" - } - with pytest.raises(CategoryNameInvalid) as exception_info: - category_helper.add_action_category(category_id, value) - assert str(exception_info.value) == '400: Category Name Invalid' - - -def test_get_action_category(db): - category_id = "category_id1" - value = { - "name": "action_category", - "description": "description action_category" - } - category_helper.add_action_category(category_id, value) - action_category = category_helper.get_action_category(category_id) - assert action_category - assert len(action_category) == 1 - - -def test_delete_action_category(db): - category_id = "category_id1" - value = { - "name": "action_category", - "description": "description action_category" - } - category_helper.add_action_category(category_id, value) - action_category = category_helper.delete_action_category(category_id) - assert not action_category - - -def test_delete_action_category_with_data(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy() - mock_data.create_subject_data(policy_id, subject_category_id) - - mock_data.create_action_data(policy_id, action_category_id) - - with pytest.raises(DeleteActionCategoryWithMetaRule) as exception_info: - category_helper.delete_action_category(action_category_id) - assert str(exception_info.value) == '400: Action Category With Meta Rule Error' - - -def test_delete_action_category_with_assignment(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy() - - action_id = mock_data.create_action(policy_id) - data_id = mock_data.create_action_data(policy_id, action_category_id) - assignment_helper.add_action_assignment(policy_id, action_id, action_category_id, data_id) - - with pytest.raises(DeleteActionCategoryWithMetaRule) as exception_info: - category_helper.delete_action_category(action_category_id) - assert str(exception_info.value) == '400: Action Category With Meta Rule Error' - - -def test_delete_action_category_with_rule(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy() - policy_helper.add_rule(policy_id=policy_id, meta_rule_id=meta_rule_id) - - with pytest.raises(DeleteActionCategoryWithMetaRule) as exception_info: - category_helper.delete_action_category(action_category_id) - assert str(exception_info.value) == '400: Action Category With Meta Rule Error' - - -def test_delete_action_category_with_unkown_category_id(db): - category_id = "invalid_category_id" - - with pytest.raises(ActionCategoryUnknown) as exception_info: - category_helper.delete_action_category(category_id) - assert str(exception_info.value) == '400: Action Category Unknown' - - -def test_delete_data_categories_connected_to_meta_rule(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy() - with pytest.raises(DeleteSubjectCategoryWithMetaRule) as exception_info: - category_helper.delete_subject_category(subject_category_id) - assert str(exception_info.value) == '400: Subject Category With Meta Rule Error' - - with pytest.raises(DeleteObjectCategoryWithMetaRule) as exception_info: - category_helper.delete_object_category(object_category_id) - assert str(exception_info.value) == '400: Object Category With Meta Rule Error' - - with pytest.raises(DeleteActionCategoryWithMetaRule) as exception_info: - category_helper.delete_action_category(action_category_id) - assert str(exception_info.value) == '400: Action Category With Meta Rule Error' diff --git a/python_moondb/tests/unit_python/policies/__init__.py b/python_moondb/tests/unit_python/policies/__init__.py deleted file mode 100644 index e69de29b..00000000 --- a/python_moondb/tests/unit_python/policies/__init__.py +++ /dev/null diff --git a/python_moondb/tests/unit_python/policies/mock_data.py b/python_moondb/tests/unit_python/policies/mock_data.py deleted file mode 100644 index 47fc9f9e..00000000 --- a/python_moondb/tests/unit_python/policies/mock_data.py +++ /dev/null @@ -1,74 +0,0 @@ -import helpers.model_helper as model_helper -import helpers.meta_rule_helper as meta_rule_helper -import helpers.policy_helper as policy_helper -import helpers.category_helper as category_helper - - -def create_meta_rule(meta_rule_name="meta_rule1", category_prefix=""): - meta_rule_value = { - "name": meta_rule_name, - "algorithm": "name of the meta rule algorithm", - "subject_categories": [category_prefix + "subject_category_id1", - category_prefix + "subject_category_id2"], - "object_categories": [category_prefix + "object_category_id1"], - "action_categories": [category_prefix + "action_category_id1"] - } - return meta_rule_value - - -def create_model(meta_rule_id, model_name="test_model"): - value = { - "name": model_name, - "description": "test", - "meta_rules": [meta_rule_id] - - } - return value - - -def create_policy(model_id, policy_name="policy_1"): - value = { - "name": policy_name, - "model_id": model_id, - "genre": "authz", - "description": "test", - } - return value - - -def create_pdp(pdp_ids): - value = { - "name": "test_pdp", - "security_pipeline": pdp_ids, - "keystone_project_id": "keystone_project_id1", - "description": "...", - } - return value - - -def get_policy_id(model_name="test_model", policy_name="policy_1", meta_rule_name="meta_rule1", category_prefix=""): - category_helper.add_subject_category( - category_prefix + "subject_category_id1", - value={"name": category_prefix + "subject_category_id1", - "description": "description 1"}) - category_helper.add_subject_category( - category_prefix + "subject_category_id2", - value={"name": category_prefix + "subject_category_id2", - "description": "description 1"}) - category_helper.add_object_category( - category_prefix + "object_category_id1", - value={"name": category_prefix + "object_category_id1", - "description": "description 1"}) - category_helper.add_action_category( - category_prefix + "action_category_id1", - value={"name": category_prefix + "action_category_id1", - "description": "description 1"}) - meta_rule = meta_rule_helper.add_meta_rule(value=create_meta_rule(meta_rule_name, category_prefix)) - meta_rule_id = list(meta_rule.keys())[0] - model = model_helper.add_model(value=create_model(meta_rule_id, model_name)) - model_id = list(model.keys())[0] - value = create_policy(model_id, policy_name) - policy = policy_helper.add_policies(value=value) - assert policy - policy_id = list(policy.keys())[0] - return policy_id diff --git a/python_moondb/tests/unit_python/policies/test_assignments.py b/python_moondb/tests/unit_python/policies/test_assignments.py deleted file mode 100755 index 24a3a7b0..00000000 --- a/python_moondb/tests/unit_python/policies/test_assignments.py +++ /dev/null @@ -1,235 +0,0 @@ -# Copyright 2015 Open Platform for NFV Project, Inc. and its contributors -# This software is distributed under the terms and conditions of the 'Apache-2.0' -# license which can be found in the file 'LICENSE' in this package distribution -# or at 'http://www.apache.org/licenses/LICENSE-2.0'. - -import helpers.mock_data as mock_data -import helpers.assignment_helper as assignment_helper -from python_moonutilities.exceptions import * -import pytest - - -def test_get_action_assignments(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1") - action_id = mock_data.create_action(policy_id) - data_id = mock_data.create_action_data(policy_id=policy_id, category_id=action_category_id) - - assignment_helper.add_action_assignment(policy_id, action_id, action_category_id, data_id) - act_assignments = assignment_helper.get_action_assignments(policy_id, action_id, - action_category_id) - action_id_1 = list(act_assignments.keys())[0] - assert act_assignments[action_id_1]["policy_id"] == policy_id - assert act_assignments[action_id_1]["action_id"] == action_id - assert act_assignments[action_id_1]["category_id"] == action_category_id - assert len(act_assignments[action_id_1].get("assignments")) == 1 - assert data_id in act_assignments[action_id_1].get("assignments") - - -def test_add_action_assignments(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1") - action_id = mock_data.create_action(policy_id) - data_id = mock_data.create_action_data(policy_id=policy_id, category_id=action_category_id) - action_assignments = assignment_helper.add_action_assignment(policy_id, action_id, - action_category_id, data_id) - assert action_assignments - action_id_1 = list(action_assignments.keys())[0] - assert action_assignments[action_id_1]["policy_id"] == policy_id - assert action_assignments[action_id_1]["action_id"] == action_id - assert action_assignments[action_id_1]["category_id"] == action_category_id - assert len(action_assignments[action_id_1].get("assignments")) == 1 - assert data_id in action_assignments[action_id_1].get("assignments") - - with pytest.raises(ActionAssignmentExisting) as exception_info: - assignment_helper.add_action_assignment(policy_id, action_id, action_category_id, data_id) - assert str(exception_info.value) == '409: Action Assignment Existing' - assert str(exception_info.value.description) == 'The given action assignment value is existing.' - - -def test_delete_action_assignment(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1") - action_id = mock_data.create_action(policy_id) - data_id = mock_data.create_action_data(policy_id=policy_id, category_id=action_category_id) - assignment_helper.add_action_assignment(policy_id, action_id, action_category_id, data_id) - assignment_helper.delete_action_assignment(policy_id, "", "", "") - assignments = assignment_helper.get_action_assignments(policy_id, ) - assert len(assignments) == 1 - - -def test_delete_action_assignment_with_invalid_policy_id(db): - policy_id = "invalid_id" - assignment_helper.delete_action_assignment(policy_id, "", "", "") - assignments = assignment_helper.get_action_assignments(policy_id, ) - assert len(assignments) == 0 - - -def test_get_object_assignments(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1") - object_id = mock_data.create_object(policy_id) - data_id = mock_data.create_object_data(policy_id=policy_id, category_id=object_category_id) - assignment_helper.add_object_assignment(policy_id, object_id, object_category_id, data_id) - obj_assignments = assignment_helper.get_object_assignments(policy_id, object_id, - object_category_id) - object_id_1 = list(obj_assignments.keys())[0] - assert obj_assignments[object_id_1]["policy_id"] == policy_id - assert obj_assignments[object_id_1]["object_id"] == object_id - assert obj_assignments[object_id_1]["category_id"] == object_category_id - assert len(obj_assignments[object_id_1].get("assignments")) == 1 - assert data_id in obj_assignments[object_id_1].get("assignments") - - -def test_get_object_assignments_by_policy_id(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1") - object_id = mock_data.create_object(policy_id) - data_id = mock_data.create_object_data(policy_id=policy_id, category_id=object_category_id) - assignment_helper.add_object_assignment(policy_id, object_id, object_category_id, data_id) - obj_assignments = assignment_helper.get_object_assignments(policy_id) - assert len(obj_assignments) == 1 - - -def test_add_object_assignments(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1") - object_id = mock_data.create_object(policy_id) - data_id = mock_data.create_object_data(policy_id=policy_id, category_id=object_category_id) - object_assignments = assignment_helper.add_object_assignment(policy_id, object_id, - object_category_id, data_id) - assert object_assignments - object_id_1 = list(object_assignments.keys())[0] - assert object_assignments[object_id_1]["policy_id"] == policy_id - assert object_assignments[object_id_1]["object_id"] == object_id - assert object_assignments[object_id_1]["category_id"] == object_category_id - assert len(object_assignments[object_id_1].get("assignments")) == 1 - assert data_id in object_assignments[object_id_1].get("assignments") - - with pytest.raises(ObjectAssignmentExisting) as exception_info: - assignment_helper.add_object_assignment(policy_id, object_id, object_category_id, data_id) - assert str(exception_info.value) == '409: Object Assignment Existing' - assert str(exception_info.value.description) == 'The given object assignment value is existing.' - - -def test_delete_object_assignment(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1") - object_id = mock_data.create_object(policy_id) - data_id = mock_data.create_object_data(policy_id=policy_id, category_id=object_category_id) - assignment_helper.add_object_assignment(policy_id, object_id, object_category_id, data_id) - - assignment_helper.delete_object_assignment(policy_id, object_id, object_category_id, - data_id=data_id) - assignments = assignment_helper.get_object_assignments(policy_id) - assert len(assignments) == 0 - - -def test_delete_object_assignment_with_invalid_policy_id(db): - policy_id = "invalid_id" - assignment_helper.delete_object_assignment(policy_id, "", "", "") - assignments = assignment_helper.get_object_assignments(policy_id, ) - assert len(assignments) == 0 - - -def test_get_subject_assignments(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1") - subject_id = mock_data.create_subject(policy_id) - data_id = mock_data.create_subject_data(policy_id=policy_id, category_id=subject_category_id) - - assignment_helper.add_subject_assignment(policy_id, subject_id, subject_category_id, data_id) - subj_assignments = assignment_helper.get_subject_assignments(policy_id, subject_id, - subject_category_id) - subject_id_1 = list(subj_assignments.keys())[0] - assert subj_assignments[subject_id_1]["policy_id"] == policy_id - assert subj_assignments[subject_id_1]["subject_id"] == subject_id - assert subj_assignments[subject_id_1]["category_id"] == subject_category_id - assert len(subj_assignments[subject_id_1].get("assignments")) == 1 - assert data_id in subj_assignments[subject_id_1].get("assignments") - - -def test_get_subject_assignments_by_policy_id(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1") - subject_id = mock_data.create_subject(policy_id) - data_id = mock_data.create_subject_data(policy_id=policy_id, category_id=subject_category_id) - - assignment_helper.add_subject_assignment(policy_id, subject_id, subject_category_id, data_id) - subj_assignments = assignment_helper.get_subject_assignments(policy_id) - assert len(subj_assignments) == 1 - - -def test_add_subject_assignments(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1") - subject_id = mock_data.create_subject(policy_id) - data_id = mock_data.create_subject_data(policy_id=policy_id, category_id=subject_category_id) - - subject_assignments = assignment_helper.add_subject_assignment(policy_id, subject_id, - subject_category_id, data_id) - assert subject_assignments - subject_id_1 = list(subject_assignments.keys())[0] - assert subject_assignments[subject_id_1]["policy_id"] == policy_id - assert subject_assignments[subject_id_1]["subject_id"] == subject_id - assert subject_assignments[subject_id_1]["category_id"] == subject_category_id - assert len(subject_assignments[subject_id_1].get("assignments")) == 1 - assert data_id in subject_assignments[subject_id_1].get("assignments") - - with pytest.raises(SubjectAssignmentExisting) as exception_info: - assignment_helper.add_subject_assignment(policy_id, subject_id, subject_category_id, - data_id) - assert str(exception_info.value) == '409: Subject Assignment Existing' - assert str( - exception_info.value.description) == 'The given subject assignment value is existing.' - - -def test_delete_subject_assignment(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1") - subject_id = mock_data.create_subject(policy_id) - data_id = mock_data.create_subject_data(policy_id=policy_id, category_id=subject_category_id) - assignment_helper.add_subject_assignment(policy_id, subject_id, subject_category_id, data_id) - assignment_helper.delete_subject_assignment(policy_id, subject_id, subject_category_id, data_id) - assignments = assignment_helper.get_subject_assignments(policy_id) - assert len(assignments) == 0 - - -def test_delete_subject_assignment_with_invalid_policy_id(db): - policy_id = "invalid_id" - assignment_helper.delete_subject_assignment(policy_id, "", "", "") - assignments = assignment_helper.get_subject_assignments(policy_id, ) - assert len(assignments) == 0 diff --git a/python_moondb/tests/unit_python/policies/test_data.py b/python_moondb/tests/unit_python/policies/test_data.py deleted file mode 100755 index 8ce1ac00..00000000 --- a/python_moondb/tests/unit_python/policies/test_data.py +++ /dev/null @@ -1,707 +0,0 @@ -# Copyright 2015 Open Platform for NFV Project, Inc. and its contributors -# This software is distributed under the terms and conditions of the 'Apache-2.0' -# license which can be found in the file 'LICENSE' in this package distribution -# or at 'http://www.apache.org/licenses/LICENSE-2.0'. - -import helpers.mock_data as mock_data -import policies.mock_data -import helpers.data_helper as data_helper -import helpers.assignment_helper as assignment_helper -import pytest -from uuid import uuid4 -import logging -from python_moonutilities.exceptions import * - -logger = logging.getLogger("python_moondb.tests.api.test_data") - - -def test_get_action_data(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1") - value = { - "name": "action-type", - "description": {"vm-action": "", "storage-action": "", }, - } - action_data = data_helper.add_action_data(policy_id=policy_id, category_id=action_category_id, value=value) - data_id = list(action_data["data"])[0] - found_action_data = data_helper.get_action_data(policy_id=policy_id, data_id=data_id, - category_id=action_category_id) - assert found_action_data - assert len(found_action_data[0]["data"]) == 1 - - -def test_get_action_data_with_invalid_category_id(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1") - action_data = data_helper.get_action_data(policy_id=policy_id, category_id="invalid") - assert len(action_data) == 0 - - -def test_add_action_data(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1") - value = { - "name": "action-type", - "description": {"vm-action": "", "storage-action": "", }, - } - action_data = data_helper.add_action_data(policy_id=policy_id, category_id=action_category_id, value=value) - assert action_data - assert len(action_data['data']) == 1 - - -def test_add_action_data_duplicate(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1") - value = { - "name": "action-type", - "description": {"vm-action": "", "storage-action": "", }, - } - action_data = data_helper.add_action_data(policy_id=policy_id, category_id=action_category_id, value=value) - with pytest.raises(ActionScopeExisting) as exception_info: - action_data = data_helper.add_action_data(policy_id=policy_id, category_id=action_category_id, value=value) - assert str(exception_info.value) == '409: Action Scope Existing' - -def test_add_action_data_with_invalid_category_id(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1") - value = { - "name": "action-type", - "description": {"vm-action": "", "storage-action": "", }, - } - with pytest.raises(ActionCategoryUnknown) as exception_info: - data_helper.add_action_data(policy_id=policy_id, value=value).get('data') - assert str(exception_info.value) == '400: Action Category Unknown' - - -def test_delete_action_data(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1") - data_helper.get_available_metadata(policy_id) - value = { - "name": "action-type", - "description": {"vm-action": "", "storage-action": "", }, - } - action_data = data_helper.add_action_data(policy_id=policy_id, category_id=action_category_id, value=value) - data_id = list(action_data["data"])[0] - data_helper.delete_action_data(policy_id=policy_id, data_id=data_id) - new_action_data = data_helper.get_action_data(policy_id) - assert len(new_action_data[0]['data']) == 0 - - -def test_get_object_data(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1") - value = { - "name": "object-security-level", - "description": {"low": "", "medium": "", "high": ""}, - } - object_data = data_helper.add_object_data(policy_id=policy_id, category_id=object_category_id, value=value) - data_id = list(object_data["data"])[0] - found_object_data = data_helper.get_object_data(policy_id=policy_id, data_id=data_id, - category_id=object_category_id) - assert found_object_data - assert len(found_object_data[0]['data']) == 1 - - -def test_get_object_data_with_invalid_category_id(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1") - object_data = data_helper.get_object_data(policy_id=policy_id, category_id="invalid") - assert len(object_data) == 0 - - -def test_add_object_data(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1") - value = { - "name": "object-security-level", - "description": {"low": "", "medium": "", "high": ""}, - } - object_data = data_helper.add_object_data(policy_id=policy_id, category_id=object_category_id, value=value).get( - 'data') - assert object_data - object_data_id = list(object_data.keys())[0] - assert object_data[object_data_id].get('policy_id') == policy_id - - -def test_add_object_data_with_invalid_category_id(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1") - value = { - "name": "object-security-level", - "description": {"low": "", "medium": "", "high": ""}, - } - with pytest.raises(ObjectCategoryUnknown) as exception_info: - data_helper.add_object_data(policy_id=policy_id, category_id="invalid", value=value).get('data') - assert str(exception_info.value) == '400: Object Category Unknown' - - -def test_add_object_data_duplicate(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1") - value = { - "name": "object-security-level", - "description": {"low": "", "medium": "", "high": ""}, - } - object_data = data_helper.add_object_data(policy_id=policy_id, category_id=object_category_id, value=value).get( - 'data') - with pytest.raises(ObjectScopeExisting) as exception_info: - data_helper.add_object_data(policy_id=policy_id, category_id=object_category_id, value=value).get( - 'data') - assert str(exception_info.value) == '409: Object Scope Existing' - - -def test_delete_object_data(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1") - value = { - "name": "object-security-level", - "description": {"low": "", "medium": "", "high": ""}, - } - object_data = data_helper.add_object_data(policy_id=policy_id, category_id=object_category_id, value=value).get( - 'data') - object_data_id = list(object_data.keys())[0] - data_helper.delete_object_data(policy_id=object_data[object_data_id].get('policy_id'), data_id=object_data_id) - new_object_data = data_helper.get_object_data(policy_id) - assert len(new_object_data[0]['data']) == 0 - - -def test_get_subject_data(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1") - value = { - "name": "subject-security-level", - "description": {"low": "", "medium": "", "high": ""}, - } - subject_data = data_helper.add_subject_data(policy_id=policy_id, category_id=subject_category_id, value=value).get( - 'data') - subject_data_id = list(subject_data.keys())[0] - subject_data = data_helper.get_subject_data(policy_id, subject_data_id, subject_category_id) - assert subject_data - assert len(subject_data[0]['data']) == 1 - - -def test_get_subject_data_with_invalid_category_id(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1") - value = { - "name": "subject-security-level", - "description": {"low": "", "medium": "", "high": ""}, - } - subject_data = data_helper.add_subject_data(policy_id=policy_id, category_id=subject_category_id, value=value).get( - 'data') - subject_data_id = list(subject_data.keys())[0] - found_subject_data = data_helper.get_subject_data(policy_id, subject_data_id, "invalid") - assert len(found_subject_data) == 0 - - -def test_add_subject_data(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1") - value = { - "name": "subject-security-level", - "description": {"low": "", "medium": "", "high": ""}, - } - subject_data = data_helper.add_subject_data(policy_id=policy_id, category_id=subject_category_id, value=value).get( - 'data') - assert subject_data - subject_data_id = list(subject_data.keys())[0] - assert subject_data[subject_data_id].get('policy_id') == policy_id - - -def test_add_subject_data_with_no_category_id(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1") - value = { - "name": "subject-security-level", - "description": {"low": "", "medium": "", "high": ""}, - } - with pytest.raises(SubjectCategoryUnknown) as exception_info: - data_helper.add_subject_data(policy_id=policy_id, data_id=subject_category_id, value=value).get('data') - assert str(exception_info.value) == '400: Subject Category Unknown' - - -def test_add_subject_data_duplicate(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1") - value = { - "name": "subject-security-level", - "description": {"low": "", "medium": "", "high": ""}, - } - subject_data = data_helper.add_subject_data(policy_id=policy_id, category_id=subject_category_id, value=value).get( - 'data') - - with pytest.raises(SubjectScopeExisting) as exception_info: - subject_data = data_helper.add_subject_data(policy_id=policy_id, category_id=subject_category_id, - value=value).get('data') - assert str(exception_info.value) == '409: Subject Scope Existing' - - -def test_delete_subject_data(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1") - value = { - "name": "subject-security-level", - "description": {"low": "", "medium": "", "high": ""}, - } - subject_data = data_helper.add_subject_data(policy_id=policy_id, category_id=subject_category_id, value=value).get( - 'data') - subject_data_id = list(subject_data.keys())[0] - data_helper.delete_subject_data(policy_id=subject_data[subject_data_id].get('policy_id'), data_id=subject_data_id) - new_subject_data = data_helper.get_subject_data(policy_id) - assert len(new_subject_data[0]['data']) == 0 - - -def test_get_actions(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1") - value = { - "name": "test_action", - "description": "test", - } - data_helper.add_action(policy_id=policy_id, value=value) - actions = data_helper.get_actions(policy_id, ) - assert actions - assert len(actions) == 1 - action_id = list(actions.keys())[0] - assert actions[action_id].get('policy_list')[0] == policy_id - - -def test_add_action(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1") - value = { - "name": "test_action", - "description": "test", - } - action = data_helper.add_action(policy_id=policy_id, value=value) - assert action - action_id = list(action.keys())[0] - assert len(action[action_id].get('policy_list')) == 1 - - -def test_add_action_twice(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1") - value = { - "name": "test_action", - "description": "test", - } - data_helper.add_action(policy_id=policy_id, value=value) - with pytest.raises(PolicyExisting) as exception_info: - data_helper.add_action(policy_id=policy_id, value=value) - assert str(exception_info.value) == '409: Policy Already Exists' - - -def test_add_action_blank_name(db): - policy_id = policies.mock_data.get_policy_id() - value = { - "name": "", - "description": "test", - } - with pytest.raises(PerimeterContentError) as exception_info: - data_helper.add_action(policy_id=policy_id, value=value) - assert str(exception_info.value) == '400: Perimeter content is invalid.' - - -def test_add_action_with_name_space(db): - policy_id = policies.mock_data.get_policy_id() - value = { - "name": " ", - "description": "test", - } - with pytest.raises(PerimeterContentError) as exception_info: - data_helper.add_action(policy_id=policy_id, value=value) - assert str(exception_info.value) == '400: Perimeter content is invalid.' - - -def test_add_action_multiple_times(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id1 = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1", - model_name="model1") - value = { - "name": "test_action", - "description": "test", - } - action = data_helper.add_action(policy_id=policy_id1, value=value) - logger.info("action : {}".format(action)) - action_id = list(action.keys())[0] - perimeter_id = action[action_id].get('id') - assert action - value = { - "name": "test_action", - "description": "test", - "policy_list": ['policy_id_3', 'policy_id_4'] - } - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id2 = mock_data.create_new_policy( - subject_category_name="subject_category2", - object_category_name="object_category2", - action_category_name="action_category2", - meta_rule_name="meta_rule_2", - model_name="model2") - action = data_helper.add_action(policy_id=policy_id2, perimeter_id=perimeter_id, value=value) - logger.info("action : {}".format(action)) - assert action - action_id = list(action.keys())[0] - assert len(action[action_id].get('policy_list')) == 2 - - -def test_delete_action(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1") - value = { - "name": "test_action", - "description": "test", - } - action = data_helper.add_action(policy_id=policy_id, value=value) - action_id = list(action.keys())[0] - data_helper.delete_action(policy_id, action_id) - actions = data_helper.get_actions(policy_id, ) - assert not actions - - -def test_delete_action_with_invalid_perimeter_id(db): - policy_id = "invalid" - perimeter_id = "invalid" - with pytest.raises(PolicyUnknown) as exception_info: - data_helper.delete_action(policy_id, perimeter_id) - assert str(exception_info.value) == '400: Policy Unknown' - - -def test_get_objects(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1") - value = { - "name": "test_object", - "description": "test", - } - data_helper.add_object(policy_id=policy_id, value=value) - objects = data_helper.get_objects(policy_id, ) - assert objects - assert len(objects) == 1 - object_id = list(objects.keys())[0] - assert objects[object_id].get('policy_list')[0] == policy_id - - -def test_add_object_with_same_policy_twice(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1") - value = { - "name": "test_object", - "description": "test", - } - added_object = data_helper.add_object(policy_id=policy_id, value=value) - assert added_object - object_id = list(added_object.keys())[0] - assert len(added_object[object_id].get('policy_list')) == 1 - - with pytest.raises(PolicyExisting) as exception_info: - data_helper.add_object(policy_id=policy_id, value=value) - assert str(exception_info.value) == '409: Policy Already Exists' - - -def test_add_objects_multiple_times(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1", - model_name="model1") - value = { - "name": "test_object", - "description": "test", - } - added_object = data_helper.add_object(policy_id=policy_id, value=value) - object_id = list(added_object.keys())[0] - perimeter_id = added_object[object_id].get('id') - assert added_object - value = { - "name": "test_object", - "description": "test", - } - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category2", - object_category_name="object_category2", - action_category_name="action_category2", - meta_rule_name="meta_rule_2", - model_name="model2") - added_object = data_helper.add_object(policy_id=policy_id, perimeter_id=perimeter_id, value=value) - assert added_object - object_id = list(added_object.keys())[0] - assert len(added_object[object_id].get('policy_list')) == 2 - - -def test_delete_object(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1") - value = { - "name": "test_object", - "description": "test", - } - added_object = data_helper.add_object(policy_id=policy_id, value=value) - object_id = list(added_object.keys())[0] - data_helper.delete_object(policy_id, object_id) - objects = data_helper.get_objects(policy_id, ) - assert not objects - - -def test_delete_object_with_invalid_perimeter_id(db): - policy_id = "invalid" - perimeter_id = "invalid" - with pytest.raises(PolicyUnknown) as exception_info: - data_helper.delete_object(policy_id, perimeter_id) - assert str(exception_info.value) == '400: Policy Unknown' - - -def test_get_subjects(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1") - value = { - "name": "testuser", - "description": "test", - } - data_helper.add_subject(policy_id=policy_id, value=value) - subjects = data_helper.get_subjects(policy_id=policy_id) - assert subjects - assert len(subjects) == 1 - subject_id = list(subjects.keys())[0] - assert subjects[subject_id].get('policy_list')[0] == policy_id - - -def test_get_subjects_with_invalid_policy_id(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1") - value = { - "name": "testuser", - "description": "test", - } - data_helper.add_subject(policy_id=policy_id, value=value) - with pytest.raises(PolicyUnknown) as exception_info: - data_helper.get_subjects(policy_id="invalid") - assert str(exception_info.value) == '400: Policy Unknown' - - -def test_add_subject_with_same_policy_twice(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1") - value = { - "name": "testuser", - "description": "test", - } - subject = data_helper.add_subject(policy_id=policy_id, value=value) - assert subject - subject_id = list(subject.keys())[0] - assert len(subject[subject_id].get('policy_list')) == 1 - with pytest.raises(PolicyExisting) as exception_info: - data_helper.add_subject(policy_id=policy_id, value=value) - assert str(exception_info.value) == '409: Policy Already Exists' - - -def test_add_subjects_multiple_times(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1", - model_name="model1") - value = { - "name": "testuser", - "description": "test", - } - subject = data_helper.add_subject(policy_id=policy_id, value=value) - subject_id = list(subject.keys())[0] - perimeter_id = subject[subject_id].get('id') - assert subject - value = { - "name": "testuser", - "description": "test", - } - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category2", - object_category_name="object_category2", - action_category_name="action_category2", - meta_rule_name="meta_rule_2", - model_name="model2") - subject = data_helper.add_subject(policy_id=policy_id, perimeter_id=perimeter_id, value=value) - assert subject - subject_id = list(subject.keys())[0] - assert len(subject[subject_id].get('policy_list')) == 2 - - -def test_delete_subject(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1") - value = { - "name": "testuser", - "description": "test", - } - subject = data_helper.add_subject(policy_id=policy_id, value=value) - subject_id = list(subject.keys())[0] - data_helper.delete_subject(policy_id, subject_id) - subjects = data_helper.get_subjects(policy_id, ) - assert not subjects - - -def test_delete_subject_with_invalid_perimeter_id(db): - policy_id = "invalid" - perimeter_id = "invalid" - with pytest.raises(PolicyUnknown) as exception_info: - data_helper.delete_subject(policy_id, perimeter_id) - assert str(exception_info.value) == '400: Policy Unknown' - - -def test_delete_subject_with_assignment(db): - - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category"+uuid4().hex, - object_category_name="object_category"+uuid4().hex, - action_category_name="action_category"+uuid4().hex, - meta_rule_name="meta_rule_"+uuid4().hex) - - subject_id = mock_data.create_subject(policy_id) - data_id = mock_data.create_subject_data(policy_id=policy_id, category_id=subject_category_id) - assignment_helper.add_subject_assignment(policy_id, subject_id, subject_category_id, data_id) - - with pytest.raises(DeletePerimeterWithAssignment) as exception_info: - data_helper.delete_subject(policy_id, subject_id) - assert '400: Perimeter With Assignment Error' == str(exception_info.value) - - -def test_delete_object_with_assignment(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category" + uuid4().hex, - object_category_name="object_category" + uuid4().hex, - action_category_name="action_category" + uuid4().hex, - meta_rule_name="meta_rule_" + uuid4().hex) - - object_id = mock_data.create_object(policy_id) - data_id = mock_data.create_object_data(policy_id=policy_id, category_id=object_category_id) - assignment_helper.add_object_assignment(policy_id, object_id, object_category_id, data_id) - - with pytest.raises(DeletePerimeterWithAssignment) as exception_info: - data_helper.delete_object(policy_id, object_id) - assert '400: Perimeter With Assignment Error' == str(exception_info.value) - -def test_delete_action_with_assignment(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category" + uuid4().hex, - object_category_name="object_category" + uuid4().hex, - action_category_name="action_category" + uuid4().hex, - meta_rule_name="meta_rule_" + uuid4().hex) - - action_id = mock_data.create_action(policy_id) - data_id = mock_data.create_action_data(policy_id=policy_id, category_id=action_category_id) - assignment_helper.add_action_assignment(policy_id, action_id, action_category_id, data_id) - - with pytest.raises(DeletePerimeterWithAssignment) as exception_info: - data_helper.delete_action(policy_id, action_id) - assert '400: Perimeter With Assignment Error' == str(exception_info.value) - - -def test_get_available_metadata(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1") - metadata = data_helper.get_available_metadata(policy_id=policy_id) - assert metadata - assert metadata['object'][0] == object_category_id - assert metadata['subject'][0] == subject_category_id - assert metadata['action'][0] == action_category_id - - -def test_get_available_metadata_with_invalid_policy_id(db): - with pytest.raises(PolicyUnknown) as exception_info: - data_helper.get_available_metadata(policy_id='invalid') - assert '400: Policy Unknown' == str(exception_info.value) diff --git a/python_moondb/tests/unit_python/policies/test_policies.py b/python_moondb/tests/unit_python/policies/test_policies.py deleted file mode 100755 index b2394203..00000000 --- a/python_moondb/tests/unit_python/policies/test_policies.py +++ /dev/null @@ -1,643 +0,0 @@ -# Copyright 2015 Open Platform for NFV Project, Inc. and its contributors -# This software is distributed under the terms and conditions of the 'Apache-2.0' -# license which can be found in the file 'LICENSE' in this package distribution -# or at 'http://www.apache.org/licenses/LICENSE-2.0'. - -import pytest -import helpers.mock_data as mock_data -import helpers.policy_helper as policy_helper -import helpers.model_helper as model_helper -import helpers.model_helper as model_helper -from python_moonutilities.exceptions import * -import helpers.pdp_helper as pdp_helper -import helpers.data_helper as data_helper -import helpers.assignment_helper as assignment_helper -from uuid import uuid4 - - -def test_get_policies(db): - policies = policy_helper.get_policies() - assert isinstance(policies, dict) - assert not policies - - -def test_add_policies(db): - model = model_helper.add_model(model_id=uuid4().hex) - model_id = next(iter(model)) - value = { - "name": "test_policy", - "model_id": model_id, - "genre": "authz", - "description": "test", - } - policies = policy_helper.add_policies(value=value) - assert isinstance(policies, dict) - assert policies - assert len(policies.keys()) == 1 - policy_id = list(policies.keys())[0] - for key in ("genre", "name", "model_id", "description"): - assert key in policies[policy_id] - assert policies[policy_id][key] == value[key] - - -def test_add_policies_twice_with_same_id(db): - policy_id = 'policy_id_1' - model = model_helper.add_model(model_id=uuid4().hex) - model_id = next(iter(model)) - value = { - "name": "test_policy", - "model_id": model_id, - "genre": "authz", - "description": "test", - } - policy_helper.add_policies(policy_id, value) - with pytest.raises(PolicyExisting) as exception_info: - policy_helper.add_policies(policy_id, value) - assert str(exception_info.value) == '409: Policy Already Exists' - - -def test_add_policies_twice_with_same_name(db): - model = model_helper.add_model(model_id=uuid4().hex) - model_id = next(iter(model)) - policy_name=uuid4().hex - value = { - "name": policy_name, - "model_id": model_id, - "genre": "authz", - "description": "test", - } - policy_helper.add_policies(value=value) - with pytest.raises(Exception) as exception_info: - policy_helper.add_policies(value=value) - assert str(exception_info.value) == '409: Policy Already Exists' - assert str(exception_info.value.description)== 'Policy name Existed' - - -def test_delete_policies(db): - model = model_helper.add_model(model_id=uuid4().hex) - model_id = next(iter(model)) - policy_name1 = uuid4().hex - value = { - "name": policy_name1, - "model_id": model_id, - "genre": "authz", - "description": "test", - } - policies = policy_helper.add_policies(value=value) - policy_id1 = list(policies.keys())[0] - policy_name2 = uuid4().hex - value = { - "name": policy_name2, - "model_id": model_id, - "genre": "authz", - "description": "test", - } - policies = policy_helper.add_policies(value=value) - policy_id2 = list(policies.keys())[0] - assert policy_id1 != policy_id2 - policy_helper.delete_policies(policy_id1) - policies = policy_helper.get_policies() - assert policy_id1 not in policies - - -def test_delete_policies_with_invalid_id(db): - policy_id = 'policy_id_1' - with pytest.raises(PolicyUnknown) as exception_info: - policy_helper.delete_policies(policy_id) - # assert str(exception_info.value) == '400: Policy Unknown' - - -def test_update_policy(db): - policies = policy_helper.add_policies() - policy_id = list(policies.keys())[0] - value = { - "name": "test_policy4", - "model_id": policies[policy_id]['model_id'], - "genre": "authz", - "description": "test-3", - } - updated_policy = policy_helper.update_policy(policy_id, value) - assert updated_policy - for key in ("genre", "name", "model_id", "description"): - assert key in updated_policy[policy_id] - assert updated_policy[policy_id][key] == value[key] - - -def test_update_policy_name_with_existed_one(db): - policies = policy_helper.add_policies() - policy_id1 = list(policies.keys())[0] - policy_name = uuid4().hex - value = { - "name": policy_name, - "model_id": policies[policy_id1]['model_id'], - "genre": "authz", - "description": "test-3", - } - policy_helper.add_policies(value=value) - with pytest.raises(PolicyExisting) as exception_info: - policy_helper.update_policy(policy_id=policy_id1,value=value) - - assert str(exception_info.value) == '409: Policy Already Exists' - assert str(exception_info.value.description)== 'Policy name Existed' - - -def test_update_policy_with_invalid_id(db): - policy_id = 'invalid-id' - value = { - "name": "test_policy4", - "model_id": "", - "genre": "authz", - "description": "test-3", - } - with pytest.raises(PolicyUnknown) as exception_info: - policy_helper.update_policy(policy_id, value) - assert str(exception_info.value) == '400: Policy Unknown' - - -def test_get_policy_from_meta_rules(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1", - model_name="model1") - security_pipeline = [policy_id] - pdp_obj = mock_data.create_pdp(security_pipeline) - pdp_helper.add_pdp(value=pdp_obj) - matched_policy_id = policy_helper.get_policy_from_meta_rules(meta_rule_id) - assert matched_policy_id - assert policy_id == matched_policy_id - - -def test_get_policy_from_meta_rules_with_no_policy_ids(db): - meta_rule_id = 'meta_rule_id' - value = { - "name": "test_pdp", - "security_pipeline": [], - "keystone_project_id": "keystone_project_id1", - "description": "...", - } - pdp_helper.add_pdp(value=value) - matched_policy_id = policy_helper.get_policy_from_meta_rules(meta_rule_id) - assert not matched_policy_id - - -def test_get_rules(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category12", - object_category_name="object_category12", - action_category_name="action_category12", - meta_rule_name="meta_rule_12", - model_name="model12") - - policy_helper.add_rule(policy_id=policy_id, meta_rule_id=meta_rule_id) - - policy_helper.add_rule(policy_id=policy_id, meta_rule_id=meta_rule_id) - rules = policy_helper.get_rules(policy_id=policy_id, meta_rule_id=meta_rule_id) - assert isinstance(rules, dict) - assert rules - obj = rules.get('rules') - assert len(obj) == 2 - - -def test_get_rules_with_invalid_policy_id_failure(db): - rules = policy_helper.get_rules("invalid_policy_id", "meta_rule_id") - assert not rules.get('meta_rule-id') - assert len(rules.get('rules')) == 0 - - -def test_add_rule_existing(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1", - model_name="model1") - subject_data_id = mock_data.create_subject_data(policy_id=policy_id, - category_id=subject_category_id) - object_data_id = mock_data.create_object_data(policy_id=policy_id, - category_id=object_category_id) - action_data_id = mock_data.create_action_data(policy_id=policy_id, - category_id=action_category_id) - - value = { - "rule": (subject_data_id, object_data_id, action_data_id), - "instructions": ({"decision": "grant"}), - "enabled": "", - } - - rules = policy_helper.add_rule(policy_id=policy_id, meta_rule_id=meta_rule_id, value=value) - assert rules - assert len(rules) == 1 - assert isinstance(rules, dict) - rule_id = list(rules.keys())[0] - for key in ("rule", "instructions", "enabled"): - assert key in rules[rule_id] - assert rules[rule_id][key] == value[key] - - with pytest.raises(RuleExisting) as exception_info: - policy_helper.add_rule(policy_id=policy_id, meta_rule_id=meta_rule_id, value=value) - assert str(exception_info.value) == '409: Rule Existing' - - -def test_check_existing_rule_valid_request(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1", - model_name="model1") - subject_data_id = mock_data.create_subject_data(policy_id=policy_id, - category_id=subject_category_id) - object_data_id = mock_data.create_object_data(policy_id=policy_id, - category_id=object_category_id) - action_data_id = mock_data.create_action_data(policy_id=policy_id, - category_id=action_category_id) - value = { - "rule": (subject_data_id, object_data_id, action_data_id), - "instructions": ({"decision": "grant"}), - "enabled": "", - } - - rules = policy_helper.add_rule(policy_id=policy_id, meta_rule_id=meta_rule_id, value=value) - assert rules - assert len(rules) == 1 - assert isinstance(rules, dict) - rule_id = list(rules.keys())[0] - for key in ("rule", "instructions", "enabled"): - assert key in rules[rule_id] - assert rules[rule_id][key] == value[key] - - with pytest.raises(RuleExisting) as exception_info: - policy_helper.add_rule(policy_id=policy_id, meta_rule_id=meta_rule_id, value=value) - assert str(exception_info.value) == '409: Rule Existing' - - -def test_check_existing_rule_valid_multiple__data(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1", - model_name="model1") - subject_data_id1 = mock_data.create_subject_data(policy_id=policy_id, - category_id=subject_category_id) - subject_data_id2 = mock_data.create_subject_data(policy_id=policy_id, - category_id=subject_category_id) - object_data_id1 = mock_data.create_object_data(policy_id=policy_id, - category_id=object_category_id) - object_data_id2 = mock_data.create_object_data(policy_id=policy_id, - category_id=object_category_id) - action_data_id1 = mock_data.create_action_data(policy_id=policy_id, - category_id=action_category_id) - action_data_id2 = mock_data.create_action_data(policy_id=policy_id, - category_id=action_category_id) - value = { - "rule": ( - subject_data_id1, object_data_id2, action_data_id1), - "instructions": ({"decision": "grant"}), - "enabled": "", - } - - rules = policy_helper.add_rule(policy_id=policy_id, meta_rule_id=meta_rule_id, value=value) - assert rules - assert len(rules) == 1 - assert isinstance(rules, dict) - rule_id = list(rules.keys())[0] - for key in ("rule", "instructions", "enabled"): - assert key in rules[rule_id] - assert rules[rule_id][key] == value[key] - - with pytest.raises(RuleExisting) as exception_info: - policy_helper.add_rule(policy_id=policy_id, meta_rule_id=meta_rule_id, value=value) - assert str(exception_info.value) == '409: Rule Existing' - - -def test_check_existing_rule_missing_data(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1", - model_name="model1") - subject_data_id = mock_data.create_subject_data(policy_id=policy_id, - category_id=subject_category_id) - object_data_id = mock_data.create_object_data(policy_id=policy_id, - category_id=object_category_id) - action_data_id = mock_data.create_action_data(policy_id=policy_id, - category_id=action_category_id) - value = { - "rule": (object_data_id, action_data_id), - "instructions": ({"decision": "grant"}), - "enabled": "", - } - - with pytest.raises(RuleContentError) as exception_info: - policy_helper.add_rule(policy_id=policy_id, meta_rule_id=meta_rule_id, value=value) - assert str(exception_info.value) == '400: Rule Error' - assert exception_info.value.description== "Missing Data" - - -def test_check_existing_rule_meta_rule_missing_data(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1", - model_name="model1") - subject_data_id = mock_data.create_subject_data(policy_id=policy_id, - category_id=subject_category_id) - object_data_id = mock_data.create_object_data(policy_id=policy_id, - category_id=object_category_id) - action_data_id = mock_data.create_action_data(policy_id=policy_id, - category_id=action_category_id) - value = { - "rule": (subject_data_id, object_data_id, action_data_id, action_data_id), - "instructions": ({"decision": "grant"}), - "enabled": "", - } - - with pytest.raises(MetaRuleContentError) as exception_info: - policy_helper.add_rule(policy_id=policy_id, meta_rule_id=meta_rule_id, value=value) - assert str(exception_info.value) == '400: Meta Rule Error' - assert exception_info.value.description == "Missing Data" - - -def test_check_existing_rule_invalid_data_id_order(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1", - model_name="model1") - subject_data_id = mock_data.create_subject_data(policy_id=policy_id, - category_id=subject_category_id) - object_data_id = mock_data.create_object_data(policy_id=policy_id, - category_id=object_category_id) - action_data_id = mock_data.create_action_data(policy_id=policy_id, - category_id=action_category_id) - value = { - "rule": (object_data_id, action_data_id, subject_data_id), - "instructions": ({"decision": "grant"}), - "enabled": "", - } - - with pytest.raises(RuleContentError) as exception_info: - policy_helper.add_rule(policy_id=policy_id, meta_rule_id=meta_rule_id, value=value) - assert str(exception_info.value) == '400: Rule Error' - assert "Missing Subject_category" in exception_info.value.description - - -def test_check_existing_rule_invalid_data_id_order_scenrio_2(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1", - model_name="model1") - subject_data_id = mock_data.create_subject_data(policy_id=policy_id, - category_id=subject_category_id) - object_data_id = mock_data.create_object_data(policy_id=policy_id, - category_id=object_category_id) - action_data_id = mock_data.create_action_data(policy_id=policy_id, - category_id=action_category_id) - value = { - "rule": (subject_data_id, action_data_id, object_data_id), - "instructions": ({"decision": "grant"}), - "enabled": "", - } - - with pytest.raises(RuleContentError) as exception_info: - policy_helper.add_rule(policy_id=policy_id, meta_rule_id=meta_rule_id, value=value) - assert str(exception_info.value) == '400: Rule Error' - assert "Missing Object_category" in exception_info.value.description - - -def test_check_existing_rule_wrong_subject_data_id(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1", - model_name="model1") - subject_data_id = mock_data.create_subject_data(policy_id=policy_id, - category_id=subject_category_id) - object_data_id = mock_data.create_object_data(policy_id=policy_id, - category_id=object_category_id) - action_data_id = mock_data.create_action_data(policy_id=policy_id, - category_id=action_category_id) - value = { - "rule": (uuid4().hex, object_data_id, action_data_id), - "instructions": ({"decision": "grant"}), - "enabled": "", - } - - with pytest.raises(RuleContentError) as exception_info: - policy_helper.add_rule(policy_id=policy_id, meta_rule_id=meta_rule_id, value=value) - assert str(exception_info.value) == '400: Rule Error' - assert "Missing Subject_category" in exception_info.value.description - - -def test_check_existing_rule_wrong_object_data_id(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1", - model_name="model1") - subject_data_id = mock_data.create_subject_data(policy_id=policy_id, - category_id=subject_category_id) - object_data_id = mock_data.create_object_data(policy_id=policy_id, - category_id=object_category_id) - action_data_id = mock_data.create_action_data(policy_id=policy_id, - category_id=action_category_id) - value = { - "rule": (subject_data_id, uuid4().hex, action_data_id), - "instructions": ({"decision": "grant"}), - "enabled": "", - } - - with pytest.raises(RuleContentError) as exception_info: - policy_helper.add_rule(policy_id=policy_id, meta_rule_id=meta_rule_id, value=value) - assert str(exception_info.value) == '400: Rule Error' - assert "Missing Object_category" in exception_info.value.description - - -def test_check_existing_rule_wrong_action_data_id(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1", - model_name="model1") - subject_data_id = mock_data.create_subject_data(policy_id=policy_id, - category_id=subject_category_id) - object_data_id = mock_data.create_object_data(policy_id=policy_id, - category_id=object_category_id) - action_data_id = mock_data.create_action_data(policy_id=policy_id, - category_id=action_category_id) - value = { - "rule": (subject_data_id, object_data_id, uuid4().hex), - "instructions": ({"decision": "grant"}), - "enabled": "", - } - - with pytest.raises(RuleContentError) as exception_info: - policy_helper.add_rule(policy_id=policy_id, meta_rule_id=meta_rule_id, value=value) - assert str(exception_info.value) == '400: Rule Error' - assert "Missing Action_category" in exception_info.value.description - - -def test_delete_rule(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy() - - rules = policy_helper.add_rule(policy_id, meta_rule_id) - rule_id = list(rules.keys())[0] - policy_helper.delete_rule(policy_id, rule_id) - rules = policy_helper.get_rules(policy_id, meta_rule_id) - assert not rules.get('rules') - - -def test_delete_policies_with_pdp(db): - policies = policy_helper.add_policies() - policy_id1 = list(policies.keys())[0] - pdp_id = "pdp_id1" - value = { - "name": "test_pdp", - "security_pipeline": [policy_id1], - "keystone_project_id": "keystone_project_id1", - "description": "...", - } - pdp_helper.add_pdp(pdp_id=pdp_id, value=value) - with pytest.raises(DeletePolicyWithPdp) as exception_info: - policy_helper.delete_policies(policy_id1) - assert str(exception_info.value) == '400: Policy With PDP Error' - assert 'Cannot delete policy with pdp' == exception_info.value.description - - -def test_delete_policies_with_subject_perimeter(db): - policies = policy_helper.add_policies() - policy_id1 = list(policies.keys())[0] - - value = { - "name": "testuser", - "security_pipeline": [policy_id1], - "keystone_project_id": "keystone_project_id1", - "description": "...", - } - data_helper.add_subject(policy_id=policy_id1, value=value) - with pytest.raises(DeletePolicyWithPerimeter) as exception_info: - policy_helper.delete_policies(policy_id1) - assert str(exception_info.value) == '400: Policy With Perimeter Error' - assert 'Cannot delete policy with perimeter'== exception_info.value.description - - -def test_delete_policies_with_object_perimeter(db): - policies = policy_helper.add_policies() - policy_id1 = list(policies.keys())[0] - - value = { - "name": "test_obj", - "security_pipeline": [policy_id1], - "keystone_project_id": "keystone_project_id1", - "description": "...", - } - data_helper.add_object(policy_id=policy_id1, value=value) - with pytest.raises(DeletePolicyWithPerimeter) as exception_info: - policy_helper.delete_policies(policy_id1) - assert str(exception_info.value) == '400: Policy With Perimeter Error' - assert 'Cannot delete policy with perimeter'== exception_info.value.description - - -def test_delete_policies_with_action_perimeter(db): - policies = policy_helper.add_policies() - policy_id1 = list(policies.keys())[0] - - value = { - "name": "test_act", - "security_pipeline": [policy_id1], - "keystone_project_id": "keystone_project_id1", - "description": "...", - } - data_helper.add_action(policy_id=policy_id1, value=value) - with pytest.raises(DeletePolicyWithPerimeter) as exception_info: - policy_helper.delete_policies(policy_id1) - assert '400: Policy With Perimeter Error' == str(exception_info.value) - - -def test_delete_policies_with_subject_assignment(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy() - - subject_id = mock_data.create_subject(policy_id) - data_id = mock_data.create_subject_data(policy_id=policy_id, category_id=subject_category_id) - assignment_helper.add_subject_assignment(policy_id, subject_id, subject_category_id, data_id) - - with pytest.raises(DeletePolicyWithPerimeter) as exception_info: - policy_helper.delete_policies(policy_id) - - assert '400: Policy With Perimeter Error' == str(exception_info.value) - - -def test_delete_policies_with_object_assignment(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy() - - object_id = mock_data.create_object(policy_id) - data_id = mock_data.create_object_data(policy_id=policy_id, category_id=object_category_id) - assignment_helper.add_object_assignment(policy_id, object_id, object_category_id, data_id) - - with pytest.raises(DeletePolicyWithPerimeter) as exception_info: - policy_helper.delete_policies(policy_id) - assert '400: Policy With Perimeter Error' == str(exception_info.value) - - -def test_delete_policies_with_action_assignment(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy() - - action_id = mock_data.create_action(policy_id) - data_id = mock_data.create_action_data(policy_id=policy_id, category_id=action_category_id) - assignment_helper.add_action_assignment(policy_id, action_id, action_category_id, data_id) - - with pytest.raises(DeletePolicyWithPerimeter) as exception_info: - policy_helper.delete_policies(policy_id) - assert '400: Policy With Perimeter Error' == str(exception_info.value) - - -def test_delete_policies_with_subject_data(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy() - - data_id = mock_data.create_subject_data(policy_id=policy_id, category_id=subject_category_id) - - with pytest.raises(DeletePolicyWithData) as exception_info: - policy_helper.delete_policies(policy_id) - - assert '400: Policy With Data Error' == str(exception_info.value) - - -def test_delete_policies_with_object_data(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy() - - data_id = mock_data.create_object_data(policy_id=policy_id, category_id=object_category_id) - - with pytest.raises(DeletePolicyWithData) as exception_info: - policy_helper.delete_policies(policy_id) - assert '400: Policy With Data Error' == str(exception_info.value) - - -def test_delete_policies_with_action_data(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy() - - data_id = mock_data.create_action_data(policy_id=policy_id, category_id=action_category_id) - - with pytest.raises(DeletePolicyWithData) as exception_info: - policy_helper.delete_policies(policy_id) - assert '400: Policy With Data Error' == str(exception_info.value) - - -def test_delete_policies_with_rule(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy() - - rules = policy_helper.add_rule(policy_id, meta_rule_id) - - with pytest.raises(DeletePolicyWithRules) as exception_info: - policy_helper.delete_policies(policy_id) - assert '400: Policy With Rule Error' == str(exception_info.value) diff --git a/python_moondb/tests/unit_python/requirements.txt b/python_moondb/tests/unit_python/requirements.txt deleted file mode 100644 index aea8e3d5..00000000 --- a/python_moondb/tests/unit_python/requirements.txt +++ /dev/null @@ -1,4 +0,0 @@ -sqlalchemy -pymysql -requests_mock -python_moonutilities==1.4.20
\ No newline at end of file diff --git a/python_moondb/tests/unit_python/test_keystone.py b/python_moondb/tests/unit_python/test_keystone.py deleted file mode 100644 index 134bec0d..00000000 --- a/python_moondb/tests/unit_python/test_keystone.py +++ /dev/null @@ -1,53 +0,0 @@ -import pytest - - -def create_project(tenant_dict): - from python_moondb.core import KeystoneManager - return KeystoneManager.create_project(tenant_dict) - - -def list_projects(): - from python_moondb.core import KeystoneManager - return KeystoneManager.list_projects() - - -def create_user(subject_dict): - from python_moondb.core import KeystoneManager - return KeystoneManager.create_user(subject_dict) - - -def test_create_project(): - tenant_dict = { - "description": "test_project", - "domain_id": ['domain_id_1'], - "enabled": True, - "is_domain": False, - "name": 'project_1' - } - project = create_project(tenant_dict) - assert project - assert project.get('name') == tenant_dict.get('name') - - -def test_create_project_without_name(): - tenant_dict = { - "description": "test_project", - "domain_id": ['domain_id_1'], - "enabled": True, - "is_domain": False, - } - with pytest.raises(Exception) as exception_info: - create_project(tenant_dict) - assert '400: Keystone project error' == str(exception_info.value) - - -def test_create_user(): - subject_dict = { - "password": "password", - "domain_id": ['domain_id_1'], - "enabled": True, - "project": 'test_project', - "name": 'user_id_1' - } - user = create_user(subject_dict) - assert user diff --git a/python_moondb/tests/unit_python/test_pdp.py b/python_moondb/tests/unit_python/test_pdp.py deleted file mode 100755 index 4d245e4d..00000000 --- a/python_moondb/tests/unit_python/test_pdp.py +++ /dev/null @@ -1,149 +0,0 @@ -import pytest -import helpers.mock_data as mock_data -import helpers.pdp_helper as pdp_helper - - -def test_update_pdp(db): - pdp_id = "pdp_id1" - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1", - model_name="model1") - value = { - "name": "test_pdp", - "security_pipeline": [policy_id], - "keystone_project_id": "keystone_project_id1", - "description": "...", - } - pdp_helper.add_pdp(pdp_id, value) - pdp = pdp_helper.update_pdp(pdp_id, value) - assert pdp - - -def test_update_pdp_with_invalid_id(db): - pdp_id = "pdp_id1" - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1", - model_name="model1") - value = { - "name": "test_pdp", - "security_pipeline": [policy_id], - "keystone_project_id": "keystone_project_id1", - "description": "...", - } - with pytest.raises(Exception) as exception_info: - pdp_helper.update_pdp(pdp_id, value) - assert str(exception_info.value) == '400: Pdp Unknown' - - -def test_delete_pdp(db): - pdp_id = "pdp_id1" - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1", - model_name="model1") - value = { - "name": "test_pdp", - "security_pipeline": [policy_id], - "keystone_project_id": "keystone_project_id1", - "description": "...", - } - pdp_helper.add_pdp(pdp_id, value) - pdp_helper.delete_pdp(pdp_id) - assert len(pdp_helper.get_pdp(pdp_id)) == 0 - - -def test_delete_pdp_with_invalid_id(db): - pdp_id = "pdp_id1" - with pytest.raises(Exception) as exception_info: - pdp_helper.delete_pdp(pdp_id) - assert str(exception_info.value) == '400: Pdp Unknown' - - -def test_add_pdp(db): - pdp_id = "pdp_id1" - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1", - model_name="model1") - value = { - "name": "test_pdp", - "security_pipeline": [policy_id], - "keystone_project_id": "keystone_project_id1", - "description": "...", - } - pdp = pdp_helper.add_pdp(pdp_id, value) - assert pdp - - -def test_add_pdp_twice_with_same_id(db): - pdp_id = "pdp_id1" - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1", - model_name="model1") - value = { - "name": "test_pdp", - "security_pipeline": [policy_id], - "keystone_project_id": "keystone_project_id1", - "description": "...", - } - pdp_helper.add_pdp(pdp_id, value) - with pytest.raises(Exception) as exception_info: - pdp_helper.add_pdp(pdp_id, value) - assert str(exception_info.value) == '409: Pdp Error' - - -def test_add_pdp_twice_with_same_name(db): - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1", - model_name="model1") - value = { - "name": "test_pdp", - "security_pipeline": [policy_id], - "keystone_project_id": "keystone_project_id1", - "description": "...", - } - pdp_helper.add_pdp(value=value) - with pytest.raises(Exception) as exception_info: - pdp_helper.add_pdp(value=value) - assert str(exception_info.value) == '409: Pdp Error' - - -def test_get_pdp(db): - pdp_id = "pdp_id1" - subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy( - subject_category_name="subject_category1", - object_category_name="object_category1", - action_category_name="action_category1", - meta_rule_name="meta_rule_1", - model_name="model1") - value = { - "name": "test_pdp", - "security_pipeline": [policy_id], - "keystone_project_id": "keystone_project_id1", - "description": "...", - } - pdp_helper.add_pdp(pdp_id, value) - pdp = pdp_helper.get_pdp(pdp_id) - assert len(pdp) == 1 - - -def test_get_pdp_with_invalid_id(db): - pdp_id = "invalid" - pdp = pdp_helper.get_pdp(pdp_id) - assert len(pdp) == 0 diff --git a/python_moondb/tests/unit_python/utilities.py b/python_moondb/tests/unit_python/utilities.py deleted file mode 100644 index 1d79d890..00000000 --- a/python_moondb/tests/unit_python/utilities.py +++ /dev/null @@ -1,136 +0,0 @@ -import base64 -import json - - -CONF = { - "openstack": { - "keystone": { - "url": "http://keystone:5000/v3", - "user": "admin", - "check_token": False, - "password": "p4ssw0rd", - "domain": "default", - "certificate": False, - "project": "admin" - } - }, - "components": { - "wrapper": { - "bind": "0.0.0.0", - "port": 8080, - "container": "wukongsun/moon_wrapper:v4.3", - "timeout": 5, - "hostname": "wrapper" - }, - "manager": { - "bind": "0.0.0.0", - "port": 8082, - "container": "wukongsun/moon_manager:v4.3", - "hostname": "manager" - }, - "port_start": 31001, - "orchestrator": { - "bind": "0.0.0.0", - "port": 8083, - "container": "wukongsun/moon_orchestrator:v4.3", - "hostname": "interface" - }, - "interface": { - "bind": "0.0.0.0", - "port": 8080, - "container": "wukongsun/moon_interface:v4.3", - "hostname": "interface" - } - }, - "plugins": { - "session": { - "port": 8082, - "container": "asteroide/session:latest" - }, - "authz": { - "port": 8081, - "container": "wukongsun/moon_authz:v4.3" - } - }, - "logging": { - "handlers": { - "file": { - "filename": "/tmp/moon.log", - "class": "logging.handlers.RotatingFileHandler", - "level": "DEBUG", - "formatter": "custom", - "backupCount": 3, - "maxBytes": 1048576 - }, - "console": { - "class": "logging.StreamHandler", - "formatter": "brief", - "level": "INFO", - "stream": "ext://sys.stdout" - } - }, - "formatters": { - "brief": { - "format": "%(levelname)s %(name)s %(message)-30s" - }, - "custom": { - "format": "%(asctime)-15s %(levelname)s %(name)s %(message)s" - } - }, - "root": { - "handlers": [ - "console" - ], - "level": "ERROR" - }, - "version": 1, - "loggers": { - "moon": { - "handlers": [ - "console", - "file" - ], - "propagate": False, - "level": "DEBUG" - } - } - }, - "slave": { - "name": None, - "master": { - "url": None, - "login": None, - "password": None - } - }, - "docker": { - "url": "tcp://172.88.88.1:2376", - "network": "moon" - }, - "database": { - "url": "sqlite:///database.db", - # "url": "mysql+pymysql://moon:p4sswOrd1@db/moon", - "driver": "sql" - }, - "messenger": { - "url": "rabbit://moon:p4sswOrd1@messenger:5672/moon" - } -} - - -def get_b64_conf(component=None): - if component == "components": - return base64.b64encode( - json.dumps(CONF["components"]).encode('utf-8')+b"\n").decode('utf-8') - elif component in CONF: - return base64.b64encode( - json.dumps( - CONF[component]).encode('utf-8')+b"\n").decode('utf-8') - elif not component: - return base64.b64encode( - json.dumps(CONF).encode('utf-8')+b"\n").decode('utf-8') - elif "/" in component: - key1, _, key2 = component.partition("/") - return base64.b64encode( - json.dumps( - CONF[key1][key2]).encode('utf-8')+b"\n").decode('utf-8') |