def test_get_access_for_user_data_limited(self, mock_get):
"""Test handling of user request where access returns data."""
rbac = RbacService()
mock_user = Mock()
mock_user.identity_header = {'encoded': 'dGVzdCBoZWFkZXIgZGF0YQ=='}
access = rbac.get_access_for_user(mock_user)
expected = {
'provider': {
'write': [],
'read': []
},
'rate': {
'write': [],
'read': []
},
'aws.account': {
'read': ['123456']
},
'openshift.cluster': {
'read': []
},
'openshift.node': {
'read': []
},
'openshift.project': {
'read': []
}
}
self.assertEqual(access, expected)
mock_get.assert_called()
def test_get_access_for_user_data_limited(self, mock_get):
"""Test handling of user request where access returns data."""
rbac = RbacService()
mock_user = Mock()
mock_user.identity_header = {"encoded": "dGVzdCBoZWFkZXIgZGF0YQ=="}
access = rbac.get_access_for_user(mock_user)
expected = {
"provider": {
"write": [],
"read": []
},
"rate": {
"write": [],
"read": []
},
"aws.account": {
"read": ["123456"]
},
"azure.subscription_guid": {
"read": []
},
"openshift.cluster": {
"read": []
},
"openshift.node": {
"read": []
},
"openshift.project": {
"read": []
},
}
self.assertEqual(access, expected)
mock_get.assert_called()
def test_get_access_for_user_none(self, mock_get):
"""Test handling of user request where no access returns None."""
rbac = RbacService()
mock_user = Mock()
mock_user.identity_header = {'encoded': 'dGVzdCBoZWFkZXIgZGF0YQ=='}
access = rbac.get_access_for_user(mock_user)
self.assertIsNone(access)
mock_get.assert_called()