def test__extractUserIds_masquerading_disabled(self):
request = self.app.REQUEST
request._auth = 'Basic %s' % pastc.mkauth('fred/wilma', 'r0ck')
masquerading(False)
uids = self.pas._extractUserIds(request, self.pas.plugins)
self.assertEqual(len(uids), 0)
def test__extractUserIds_Masquerader_via_group(self):
request = self.app.REQUEST
request._auth = 'Basic %s' % pastc.mkauth('pebbles/wilma', 'sci55ors')
uids = self.pas._extractUserIds(request, self.pas.plugins)
self.assertEqual(len(uids), 1)
user_id, info = uids[0]
self.assertEqual(user_id, 'wilma_id')
self.assertEqual(info, 'wilma')
def test__extractUserIds_Masquerader(self):
request = self.app.REQUEST
request._auth = 'Basic %s' % pastc.mkauth('barney/wilma', 'p4per')
uids = self.pas._extractUserIds(request, self.pas.plugins)
self.assertEqual(len(uids), 1)
user_id, info = uids[0]
self.assertEqual(user_id, 'wilma_id')
self.assertEqual(info, 'wilma')
def test_validate_bad_role_user(self):
request = self.app.REQUEST
request._auth = 'Basic %s' % pastc.mkauth('fred/betty', 'r0ck')
user = self.pas.validate(request)
self.assertEqual(user, None)
user = getSecurityManager().getUser()
self.failIfEqual(user, None)
self.assertEqual(user.getId(), None)
self.assertEqual(user.getUserName(), 'Anonymous User')
self.assertEqual(user.getRoles(), ('Anonymous', ))
def test_validate_masquerading_denied(self):
request = self.app.REQUEST
request._auth = 'Basic %s' % pastc.mkauth('wilma/fred', 'geheim')
user = self.pas.validate(request)
self.assertEqual(user, None)
user = getSecurityManager().getUser()
self.failIfEqual(user, None)
self.assertEqual(user.getId(), None)
self.assertEqual(user.getUserName(), 'Anonymous User')
self.assertEqual(user.getRoles(), ('Anonymous', ))
def test_validate_Masquerader_via_group(self):
request = self.app.REQUEST
request._auth = 'Basic %s' % pastc.mkauth('pebbles/wilma', 'sci55ors')
user = self.pas.validate(request)
self.failIfEqual(user, None)
self.assertEqual(user.getId(), 'wilma_id')
self.assertEqual(user.getUserName(), 'wilma')
self.assertEqual(user.getRoles(), ['Authenticated', pastc.user_role])
user = getSecurityManager().getUser()
self.failIfEqual(user, None)
self.assertEqual(user.getId(), 'wilma_id')
self.assertEqual(user.getUserName(), 'wilma')
self.assertEqual(user.getRoles(), ['Authenticated', pastc.user_role])
def test__extractUserIds_bad_role_user(self):
request = self.app.REQUEST
request._auth = 'Basic %s' % pastc.mkauth('fred/betty', 'r0ck')
uids = self.pas._extractUserIds(request, self.pas.plugins)
self.assertEqual(len(uids), 0)
def test__extractUserIds_masquerading_denied(self):
request = self.app.REQUEST
request._auth = 'Basic %s' % pastc.mkauth('wilma/fred', 'geheim')
uids = self.pas._extractUserIds(request, self.pas.plugins)
self.assertEqual(len(uids), 0)