def test_get_only_overall_object(self):
"""Test only allowing them to know about the object, not get any specific parameters"""
auth = Authorization()
auth.auth_group = "test_auth_group"
auth.method = "GET"
auth.obj_name = "Foo"
auth.put()
time.sleep(5)
self.authorizations.append(auth)
self.user.load_auths()
assert (self.user.has_auth("GET") == False)
assert (self.user.has_auth("GET", "Bar") == False)
assert (self.user.has_auth("GET", "*") == False)
assert (self.user.has_auth("GET", "Foo"))
assert (self.user.has_auth("GET", "Foo", "bar") == False)
auth.delete()
def test_get_only_overall_object(self):
"""Test only allowing them to know about the object, not get any specific parameters"""
auth = Authorization()
auth.auth_group = "test_auth_group"
auth.method = "GET"
auth.obj_name = "Foo"
auth.put()
time.sleep(5)
self.authorizations.append(auth)
self.user.load_auths()
assert(self.user.has_auth("GET") == False)
assert(self.user.has_auth("GET", "Bar") == False)
assert(self.user.has_auth("GET", "*") == False)
assert(self.user.has_auth("GET", "Foo"))
assert(self.user.has_auth("GET", "Foo", "bar") == False)
auth.delete()
def test_get_only_single_object_auth(self):
"""Test someone that has only all permissions on a specific object"""
auth = Authorization()
auth.auth_group = "test_auth_group"
auth.method = "GET"
auth.obj_name = "Foo"
auth.prop_name = "*"
auth.put()
time.sleep(5)
self.authorizations.append(auth)
self.user.load_auths()
assert (self.user.has_auth("GET") == False)
assert (self.user.has_auth("GET", "Bar") == False)
assert (self.user.has_auth("GET", "Bar", "bizzle") == False)
assert (self.user.has_auth("GET", "Foo"))
assert (self.user.has_auth("GET", "Foo", "bar"))
auth.delete()
def test_get_only_single_object_auth(self):
"""Test someone that has only all permissions on a specific object"""
auth = Authorization()
auth.auth_group = "test_auth_group"
auth.method = "GET"
auth.obj_name = "Foo"
auth.prop_name = "*"
auth.put()
time.sleep(5)
self.authorizations.append(auth)
self.user.load_auths()
assert(self.user.has_auth("GET") == False)
assert(self.user.has_auth("GET", "Bar") == False)
assert(self.user.has_auth("GET", "Bar", "bizzle") == False)
assert(self.user.has_auth("GET", "Foo"))
assert(self.user.has_auth("GET", "Foo", "bar"))
auth.delete()
def test_all_auth(self):
"""Test someone that should have every authorization to everything"""
auth = Authorization()
auth.auth_group = "test_auth_group"
auth.method = "*"
auth.obj_name = "*"
auth.prop_name = "*"
auth.put()
time.sleep(5)
self.authorizations.append(auth)
self.user.load_auths()
assert (self.user.has_auth())
assert (self.user.has_auth("GET"))
assert (self.user.has_auth("POST"))
assert (self.user.has_auth("PUT"))
assert (self.user.has_auth("DELETE"))
assert (self.user.has_auth("GET", "Foo"))
assert (self.user.has_auth("GET", "Foo", "bar"))
assert (self.user.has_auth("GET", "*", "bar"))
auth.delete()
def test_all_auth(self):
"""Test someone that should have every authorization to everything"""
auth = Authorization()
auth.auth_group = "test_auth_group"
auth.method = "*"
auth.obj_name = "*"
auth.prop_name = "*"
auth.put()
time.sleep(5)
self.authorizations.append(auth)
self.user.load_auths()
assert(self.user.has_auth())
assert(self.user.has_auth("GET"))
assert(self.user.has_auth("POST"))
assert(self.user.has_auth("PUT"))
assert(self.user.has_auth("DELETE"))
assert(self.user.has_auth("GET", "Foo"))
assert(self.user.has_auth("GET", "Foo", "bar"))
assert(self.user.has_auth("GET", "*", "bar"))
auth.delete()
def test_get_only_auth(self):
"""Test someone that has only GET permissions on all objects"""
auth = Authorization()
auth.auth_group = "test_auth_group"
auth.method = "GET"
auth.obj_name = "*"
auth.prop_name = "*"
auth.put()
time.sleep(5)
self.authorizations.append(auth)
self.user.load_auths()
assert (self.user.has_auth("GET"))
assert (self.user.has_auth("GET", "*", "*"))
assert (self.user.has_auth("POST") == False)
assert (self.user.has_auth("PUT") == False)
assert (self.user.has_auth("DELETE") == False)
assert (self.user.has_auth("DELETE", "Foo") == False)
assert (self.user.has_auth("DELETE", "Foo", "bar") == False)
assert (self.user.has_auth("DELETE", "*", "bar") == False)
assert (self.user.has_auth("GET", "Foo"))
assert (self.user.has_auth("GET", "Foo", "bar"))
assert (self.user.has_auth("GET", "*", "bar"))
auth.delete()
def test_get_only_auth(self):
"""Test someone that has only GET permissions on all objects"""
auth = Authorization()
auth.auth_group = "test_auth_group"
auth.method = "GET"
auth.obj_name = "*"
auth.prop_name = "*"
auth.put()
time.sleep(5)
self.authorizations.append(auth)
self.user.load_auths()
assert(self.user.has_auth("GET"))
assert(self.user.has_auth("GET", "*", "*"))
assert(self.user.has_auth("POST") == False)
assert(self.user.has_auth("PUT") == False)
assert(self.user.has_auth("DELETE") == False)
assert(self.user.has_auth("DELETE", "Foo") == False)
assert(self.user.has_auth("DELETE", "Foo", "bar") == False)
assert(self.user.has_auth("DELETE", "*", "bar") == False)
assert(self.user.has_auth("GET", "Foo"))
assert(self.user.has_auth("GET", "Foo", "bar"))
assert(self.user.has_auth("GET", "*", "bar"))
auth.delete()
