def test_delete_object_category_with_data(db):
subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy(
)
mock_data.create_subject_data(policy_id, subject_category_id)
mock_data.create_object_data(policy_id, object_category_id)
with pytest.raises(DeleteObjectCategoryWithMetaRule) as exception_info:
category_helper.delete_object_category(object_category_id)
assert str(
exception_info.value) == '400: Object Category With Meta Rule Error'
def test_check_existing_rule_valid_request(db):
subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy(
subject_category_name="subject_category1",
object_category_name="object_category1",
action_category_name="action_category1",
meta_rule_name="meta_rule_1",
model_name="model1")
subject_data_id = mock_data.create_subject_data(policy_id=policy_id,
category_id=subject_category_id)
object_data_id = mock_data.create_object_data(policy_id=policy_id,
category_id=object_category_id)
action_data_id = mock_data.create_action_data(policy_id=policy_id,
category_id=action_category_id)
value = {
"rule": (subject_data_id, object_data_id, action_data_id),
"instructions": ({"decision": "grant"}),
"enabled": "",
}
rules = policy_helper.add_rule(policy_id=policy_id, meta_rule_id=meta_rule_id, value=value)
assert rules
assert len(rules) == 1
assert isinstance(rules, dict)
rule_id = list(rules.keys())[0]
for key in ("rule", "instructions", "enabled"):
assert key in rules[rule_id]
assert rules[rule_id][key] == value[key]
with pytest.raises(RuleExisting) as exception_info:
policy_helper.add_rule(policy_id=policy_id, meta_rule_id=meta_rule_id, value=value)
assert str(exception_info.value) == '409: Rule Existing'
def test_add_object_assignments(db):
subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy(
subject_category_name="subject_category1",
object_category_name="object_category1",
action_category_name="action_category1",
meta_rule_name="meta_rule_1")
object_id = mock_data.create_object(policy_id)
data_id = mock_data.create_object_data(policy_id=policy_id,
category_id=object_category_id)
object_assignments = assignment_helper.add_object_assignment(
policy_id, object_id, object_category_id, data_id)
assert object_assignments
object_id_1 = list(object_assignments.keys())[0]
assert object_assignments[object_id_1]["policy_id"] == policy_id
assert object_assignments[object_id_1]["object_id"] == object_id
assert object_assignments[object_id_1]["category_id"] == object_category_id
assert len(object_assignments[object_id_1].get("assignments")) == 1
assert data_id in object_assignments[object_id_1].get("assignments")
with pytest.raises(ObjectAssignmentExisting) as exception_info:
assignment_helper.add_object_assignment(policy_id, object_id,
object_category_id, data_id)
assert str(exception_info.value) == '409: Object Assignment Existing'
assert str(exception_info.value.description
) == 'The given object assignment value is existing.'
def test_delete_policies_with_object_data(db):
subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy()
data_id = mock_data.create_object_data(policy_id=policy_id, category_id=object_category_id)
with pytest.raises(DeletePolicyWithData) as exception_info:
policy_helper.delete_policies(policy_id)
assert '400: Policy With Data Error' == str(exception_info.value)
def test_get_object_assignments_by_policy_id(db):
subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy(
subject_category_name="subject_category1",
object_category_name="object_category1",
action_category_name="action_category1",
meta_rule_name="meta_rule_1")
object_id = mock_data.create_object(policy_id)
data_id = mock_data.create_object_data(policy_id=policy_id,
category_id=object_category_id)
assignment_helper.add_object_assignment(policy_id, object_id,
object_category_id, data_id)
obj_assignments = assignment_helper.get_object_assignments(policy_id)
assert len(obj_assignments) == 1
def test_delete_object_with_assignment(db):
subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy(
subject_category_name="subject_category" + uuid4().hex,
object_category_name="object_category" + uuid4().hex,
action_category_name="action_category" + uuid4().hex,
meta_rule_name="meta_rule_" + uuid4().hex)
object_id = mock_data.create_object(policy_id)
data_id = mock_data.create_object_data(policy_id=policy_id, category_id=object_category_id)
assignment_helper.add_object_assignment(policy_id, object_id, object_category_id, data_id)
with pytest.raises(DeletePerimeterWithAssignment) as exception_info:
data_helper.delete_object(policy_id, object_id)
assert '400: Perimeter With Assignment Error' == str(exception_info.value)
def test_get_object_assignments(db):
subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy(
subject_category_name="subject_category1",
object_category_name="object_category1",
action_category_name="action_category1",
meta_rule_name="meta_rule_1")
object_id = mock_data.create_object(policy_id)
data_id = mock_data.create_object_data(policy_id=policy_id,
category_id=object_category_id)
assignment_helper.add_object_assignment(policy_id, object_id,
object_category_id, data_id)
obj_assignments = assignment_helper.get_object_assignments(
policy_id, object_id, object_category_id)
object_id_1 = list(obj_assignments.keys())[0]
assert obj_assignments[object_id_1]["policy_id"] == policy_id
assert obj_assignments[object_id_1]["object_id"] == object_id
assert obj_assignments[object_id_1]["category_id"] == object_category_id
assert len(obj_assignments[object_id_1].get("assignments")) == 1
assert data_id in obj_assignments[object_id_1].get("assignments")
def test_update_meta_rule_connected_with_policy_and_rule():
subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy(
subject_category_name="subject_category1",
object_category_name="object_category1",
action_category_name="action_category1",
meta_rule_name="meta_rule_1",
model_name="model1")
subject_data_id = mock_data.create_subject_data(policy_id=policy_id,
category_id=subject_category_id)
object_data_id = mock_data.create_object_data(policy_id=policy_id,
category_id=object_category_id)
action_data_id = mock_data.create_action_data(policy_id=policy_id,
category_id=action_category_id)
value = {
"rule": (subject_data_id, object_data_id, action_data_id),
"instructions": ({"decision": "grant"}),
"enabled": "",
}
rules = policy_helper.add_rule(policy_id=policy_id, meta_rule_id=meta_rule_id, value=value)
assert rules
assert len(rules) == 1
action_category_id = mock_data.create_action_category("action_category_id2")
subject_category_id = mock_data.create_subject_category("subject_category_id2")
object_category_id = mock_data.create_object_category("object_category_id2")
updated_value = {
"name": "MLS_meta_rule",
"description": "test",
"subject_categories": [subject_category_id],
"object_categories": [object_category_id],
"action_categories": [action_category_id]
}
with pytest.raises(MetaRuleUpdateError) as exception_info:
updated_meta_rule = meta_rule_helper.update_meta_rule(meta_rule_id, updated_value)
assert str(exception_info.value) == '400: Meta_Rule Update Error'
def add_rule(policy_id, meta_rule_id, value=None):
from python_moondb.core import PolicyManager
if not value:
meta_rule = meta_rule_helper.get_meta_rules(meta_rule_id)
sub_cat_id = meta_rule[meta_rule_id]['subject_categories'][0]
ob_cat_id = meta_rule[meta_rule_id]['object_categories'][0]
act_cat_id = meta_rule[meta_rule_id]['action_categories'][0]
subject_data_id = mock_data.create_subject_data(policy_id=policy_id,
category_id=sub_cat_id)
object_data_id = mock_data.create_object_data(policy_id=policy_id,
category_id=ob_cat_id)
action_data_id = mock_data.create_action_data(policy_id=policy_id,
category_id=act_cat_id)
value = {
"rule": (subject_data_id, object_data_id, action_data_id),
"instructions": ({
"decision": "grant"
}),
"enabled": "",
}
return PolicyManager.add_rule("", policy_id, meta_rule_id, value)
def test_check_existing_rule_wrong_action_data_id(db):
subject_category_id, object_category_id, action_category_id, meta_rule_id, policy_id = mock_data.create_new_policy(
subject_category_name="subject_category1",
object_category_name="object_category1",
action_category_name="action_category1",
meta_rule_name="meta_rule_1",
model_name="model1")
subject_data_id = mock_data.create_subject_data(policy_id=policy_id,
category_id=subject_category_id)
object_data_id = mock_data.create_object_data(policy_id=policy_id,
category_id=object_category_id)
action_data_id = mock_data.create_action_data(policy_id=policy_id,
category_id=action_category_id)
value = {
"rule": (subject_data_id, object_data_id, uuid4().hex),
"instructions": ({"decision": "grant"}),
"enabled": "",
}
with pytest.raises(RuleContentError) as exception_info:
policy_helper.add_rule(policy_id=policy_id, meta_rule_id=meta_rule_id, value=value)
assert str(exception_info.value) == '400: Rule Error'
assert "Missing Action_category" in exception_info.value.description
