def Authorize():
try:
user = oauth.get_current_user(OAUTH_SCOPES)
except oauth.Error:
raise NotLoggedInError
if not user:
raise NotLoggedInError
try:
if not user.email().endswith('.gserviceaccount.com'):
# For non-service account, need to verify that the OAuth client ID
# is in our whitelist.
client_id = oauth.get_client_id(OAUTH_SCOPES)
if client_id not in OAUTH_CLIENT_ID_WHITELIST:
logging.info('OAuth client id %s for user %s not in whitelist',
client_id, user.email())
user = None
raise OAuthError
except oauth.Error:
raise OAuthError
logging.info('OAuth user logged in as: %s', user.email())
if utils.IsGroupMember(user.email(), 'chromeperf-access'):
datastore_hooks.SetPrivilegedRequest()
def testIsGroupMember_RequestFails_LogsErrorAndReturnsFalse(
self, mock_discovery_build, mock_logging_error):
mock_service = mock.MagicMock()
mock_service.membership = mock.MagicMock(
return_value={'error': 'Some error'})
mock_discovery_build.return_value = mock_service
self.assertFalse(utils.IsGroupMember('*****@*****.**', 'group'))
self.assertEqual(1, mock_logging_error.call_count)
def testIsGroupMember_PositiveCase(self, mock_discovery_build):
mock_request = mock.MagicMock()
mock_request.execute = mock.MagicMock(return_value={'is_member': True})
mock_service = mock.MagicMock()
mock_service.membership = mock.MagicMock(return_value=mock_request)
mock_discovery_build.return_value = mock_service
self.assertTrue(utils.IsGroupMember('*****@*****.**', 'group'))
mock_service.membership.assert_called_once_with(identity='*****@*****.**',
group='group')
