def test_deletes_expired_and_unused_users(self):
ensure_databases_configured().handle()
user = UserFactory(email='*****@*****.**')
st = SourceTableFactory(
dataset=MasterDataSetFactory.create(
user_access_type='REQUIRES_AUTHENTICATION'
)
)
source_tables = source_tables_for_user(user)
db_role_schema_suffix = db_role_schema_suffix_for_user(user)
user_creds_to_drop = new_private_database_credentials(
db_role_schema_suffix,
source_tables,
postgres_user(user.email),
user,
valid_for=datetime.timedelta(days=31),
)
qs_creds_to_drop = new_private_database_credentials(
db_role_schema_suffix,
source_tables,
postgres_user(user.email, suffix='qs'),
user,
valid_for=datetime.timedelta(seconds=0),
)
qs_creds_to_keep = new_private_database_credentials(
db_role_schema_suffix,
source_tables,
postgres_user(user.email, suffix='qs'),
user,
valid_for=datetime.timedelta(minutes=1),
)
connections[st.database.memorable_name].cursor().execute('COMMIT')
# Make sure that `qs_creds_to_drop` has definitely expired
time.sleep(1)
with mock.patch('dataworkspace.apps.applications.utils.gevent.sleep'):
delete_unused_datasets_users()
with connections[st.database.memorable_name].cursor() as cursor:
cursor.execute(
"SELECT usename FROM pg_catalog.pg_user WHERE usename IN %s",
[
(
user_creds_to_drop[0]['db_user'],
qs_creds_to_drop[0]['db_user'],
qs_creds_to_keep[0]['db_user'],
)
],
)
assert cursor.fetchall() == [(qs_creds_to_keep[0]['db_user'],)]
def test_dies_immediately_if_already_locked(self, do_delete_mock):
do_delete_mock.side_effect = Exception("I will be raised if the lock is available")
# Make sure we actually acquire the lock, else the test is flawed
assert self.lock.acquire() is True
delete_unused_datasets_users()
self.lock.release()
with pytest.raises(Exception) as e:
delete_unused_datasets_users()
assert e.value is do_delete_mock.side_effect