def test_check_existing_rule_valid_request(db):
subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy(
subject_category_name="subject_category1",
object_category_name="object_category1",
action_category_name="action_category1",
meta_rule_name="meta_rule_1",
model_name="model1")
subject_data_id = mock_data.create_subject_data(policy_id=policy_id,
category_id=subject_category_id)
object_data_id = mock_data.create_object_data(policy_id=policy_id,
category_id=object_category_id)
action_data_id = mock_data.create_action_data(policy_id=policy_id,
category_id=action_category_id)
value = {
"rule": (subject_data_id, object_data_id, action_data_id),
"instructions": ({"decision": "grant"}),
"enabled": "",
}
rules = policy_helper.add_rule(policy_id=policy_id, meta_rule_id=meta_rule_id, value=value)
assert rules
assert len(rules) == 1
assert isinstance(rules, dict)
rule_id = list(rules.keys())[0]
for key in ("rule", "instructions", "enabled"):
assert key in rules[rule_id]
assert rules[rule_id][key] == value[key]
with pytest.raises(RuleExisting) as exception_info:
policy_helper.add_rule(policy_id=policy_id, meta_rule_id=meta_rule_id, value=value)
assert str(exception_info.value) == '409: Rule Existing'
def test_delete_action_category_with_rule(db):
subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy(
)
policy_helper.add_rule(policy_id=policy_id, meta_rule_id=meta_rule_id)
with pytest.raises(DeleteActionCategoryWithMetaRule) as exception_info:
category_helper.delete_action_category(action_category_id)
assert str(
exception_info.value) == '400: Action Category With Meta Rule Error'
def test_get_rules(db):
subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy(
subject_category_name="subject_category12",
object_category_name="object_category12",
action_category_name="action_category12",
meta_rule_name="meta_rule_12",
model_name="model12")
policy_helper.add_rule(policy_id=policy_id, meta_rule_id=meta_rule_id)
policy_helper.add_rule(policy_id=policy_id, meta_rule_id=meta_rule_id)
rules = policy_helper.get_rules(policy_id=policy_id, meta_rule_id=meta_rule_id)
assert isinstance(rules, dict)
assert rules
obj = rules.get('rules')
assert len(obj) == 2
def test_delete_policies_with_rule(db):
subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy()
rules = policy_helper.add_rule(policy_id, meta_rule_id)
with pytest.raises(DeletePolicyWithRules) as exception_info:
policy_helper.delete_policies(policy_id)
assert '400: Policy With Rule Error' == str(exception_info.value)
def test_delete_rule(db):
subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy()
rules = policy_helper.add_rule(policy_id, meta_rule_id)
rule_id = list(rules.keys())[0]
policy_helper.delete_rule(policy_id, rule_id)
rules = policy_helper.get_rules(policy_id, meta_rule_id)
assert not rules.get('rules')
def test_check_existing_rule_wrong_action_data_id(db):
subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy(
subject_category_name="subject_category1",
object_category_name="object_category1",
action_category_name="action_category1",
meta_rule_name="meta_rule_1",
model_name="model1")
subject_data_id = mock_data.create_subject_data(policy_id=policy_id,
category_id=subject_category_id)
object_data_id = mock_data.create_object_data(policy_id=policy_id,
category_id=object_category_id)
action_data_id = mock_data.create_action_data(policy_id=policy_id,
category_id=action_category_id)
value = {
"rule": (subject_data_id, object_data_id, uuid4().hex),
"instructions": ({"decision": "grant"}),
"enabled": "",
}
with pytest.raises(RuleContentError) as exception_info:
policy_helper.add_rule(policy_id=policy_id, meta_rule_id=meta_rule_id, value=value)
assert str(exception_info.value) == '400: Rule Error'
assert "Missing Action_category" in exception_info.value.description
def test_update_meta_rule_connected_with_policy_and_rule():
subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy(
subject_category_name="subject_category1",
object_category_name="object_category1",
action_category_name="action_category1",
meta_rule_name="meta_rule_1",
model_name="model1")
subject_data_id = mock_data.create_subject_data(policy_id=policy_id,
category_id=subject_category_id)
object_data_id = mock_data.create_object_data(policy_id=policy_id,
category_id=object_category_id)
action_data_id = mock_data.create_action_data(policy_id=policy_id,
category_id=action_category_id)
value = {
"rule": (subject_data_id, object_data_id, action_data_id),
"instructions": ({"decision": "grant"}),
"enabled": "",
}
rules = policy_helper.add_rule(policy_id=policy_id, meta_rule_id=meta_rule_id, value=value)
assert rules
assert len(rules) == 1
action_category_id = mock_data.create_action_category("action_category_id2")
subject_category_id = mock_data.create_subject_category("subject_category_id2")
object_category_id = mock_data.create_object_category("object_category_id2")
updated_value = {
"name": "MLS_meta_rule",
"description": "test",
"subject_categories": [subject_category_id],
"object_categories": [object_category_id],
"action_categories": [action_category_id]
}
with pytest.raises(MetaRuleUpdateError) as exception_info:
updated_meta_rule = meta_rule_helper.update_meta_rule(meta_rule_id, updated_value)
assert str(exception_info.value) == '400: Meta_Rule Update Error'
