def test_has_role(self):
# Make sure RBAC is enabled for the tests
cfg.CONF.set_override(name='enable', override=True, group='rbac')
# Admin user
self.assertTrue(rbac_utils.user_has_role(user_db=self.admin_user, role=SystemRole.ADMIN))
# Regular user
self.assertFalse(rbac_utils.user_has_role(user_db=self.regular_user, role=SystemRole.ADMIN))
def test_is_admin(self):
# Make sure RBAC is enabled for the tests
cfg.CONF.set_override(name='enable', override=True, group='rbac')
# Admin user
self.assertTrue(rbac_utils.user_is_admin(user_db=self.admin_user))
# Regular user
self.assertFalse(rbac_utils.user_is_admin(user_db=self.regular_user))
def test_feature_flag_returns_false_on_rbac_enabled(self):
cfg.CONF.set_override(name='enable', override=True, group='rbac')
result = rbac_utils.user_is_admin(user_db=self.mocks['user_db'])
self.assertFalse(result)
def test_feature_flag_returns_true_on_rbac_disabled(self):
# When feature RBAC is disabled, all the functions should return True
cfg.CONF.set_override(name='enable', override=False, group='rbac')
result = rbac_utils.user_is_admin(user_db=self.mocks['user_db'])
self.assertTrue(result)