def test_remove_policies(self):
m = Model()
m.load_model(get_examples("basic_model.conf"))
rule1 = ['alice', 'data1', 'read']
rule2 = ['bob', 'data2', 'write']
rules = [rule1, rule2]
m.add_policies('p', 'p', rules)
self.assertTrue(m.has_policy('p', 'p', rule1))
self.assertTrue(m.has_policy('p', 'p', rule2))
m.remove_policies('p', 'p', rules)
self.assertFalse(m.has_policy('p', 'p', rule1))
self.assertFalse(m.has_policy('p', 'p', rule2))
def test_add_policy(self):
m = Model()
m.load_model(get_examples("basic_model.conf"))
rule = ['admin', 'domain1', 'data1', 'read']
self.assertFalse(m.has_policy('p', 'p', rule))
m.add_policy('p', 'p', rule)
self.assertTrue(m.has_policy('p', 'p', rule))
def test_add_policy(self):
m = Model()
m.load_model(get_examples("basic_model.conf"))
rule = ["admin", "domain1", "data1", "read"]
self.assertFalse(m.has_policy("p", "p", rule))
m.add_policy("p", "p", rule)
self.assertTrue(m.has_policy("p", "p", rule))
def test_remove_filtered_policy(self):
m = Model()
m.load_model(get_examples("rbac_with_domains_model.conf"))
rule = ["admin", "domain1", "data1", "read"]
m.add_policy("p", "p", rule)
res = m.remove_filtered_policy("p", "p", 1, "domain1", "data1")
self.assertTrue(res)
res = m.remove_filtered_policy("p", "p", 1, "domain1", "data1")
self.assertFalse(res)
def test_remove_filtered_policy(self):
m = Model()
m.load_model(get_examples("rbac_with_domains_model.conf"))
rule = ['admin', 'domain1', 'data1', 'read']
m.add_policy('p', 'p', rule)
res = m.remove_filtered_policy('p', 'p', 1, 'domain1', 'data1')
self.assertTrue(res)
res = m.remove_filtered_policy('p', 'p', 1, 'domain1', 'data1')
self.assertFalse(res)
def new_model(path="", text=""):
"""creates a model."""
m = Model()
if len(path) > 0:
m.load_model(path)
else:
m.load_model_from_text(text)
return m
def test_add_role_policy(self):
m = Model()
m.load_model(get_examples("rbac_model.conf"))
p_rule1 = ['alice', 'data1', 'read']
m.add_policy('p', 'p', p_rule1)
self.assertTrue(m.has_policy('p', 'p', p_rule1))
p_rule2 = ['data2_admin', 'data2', 'read']
m.add_policy('p', 'p', p_rule2)
self.assertTrue(m.has_policy('p', 'p', p_rule2))
g_rule = ['alice', 'data2_admin']
m.add_policy('g', 'g', g_rule)
self.assertTrue(m.has_policy('g', 'g', g_rule))
self.assertTrue(m.get_policy('p', 'p') == [p_rule1, p_rule2])
self.assertTrue(m.get_policy('g', 'g') == [g_rule])
def test_update_policies(self):
m = Model()
m.load_model(get_examples("basic_model.conf"))
old_rules = [
["admin", "domain1", "data1", "read"],
["admin", "domain1", "data2", "read"],
["admin", "domain1", "data3", "read"],
]
new_rules = [
["admin", "domain1", "data4", "read"],
["admin", "domain1", "data5", "read"],
["admin", "domain1", "data6", "read"],
]
m.add_policies("p", "p", old_rules)
for old_rule in old_rules:
self.assertTrue(m.has_policy("p", "p", old_rule))
m.update_policies("p", "p", old_rules, new_rules)
for old_rule in old_rules:
self.assertFalse(m.has_policy("p", "p", old_rule))
for new_rule in new_rules:
self.assertTrue(m.has_policy("p", "p", new_rule))
m = Model()
m.load_model(get_examples("priority_model_explicit.conf"))
old_rules = [
["1", "admin", "data1", "read", "allow"],
["1", "admin", "data2", "read", "allow"],
["1", "admin", "data3", "read", "allow"],
]
new_rules = [
["1", "admin", "data4", "read", "allow"],
["1", "admin", "data5", "read", "allow"],
["1", "admin", "data6", "read", "allow"],
]
m.add_policies("p", "p", old_rules)
for old_rule in old_rules:
self.assertTrue(m.has_policy("p", "p", old_rule))
m.update_policies("p", "p", old_rules, new_rules)
for old_rule in old_rules:
self.assertFalse(m.has_policy("p", "p", old_rule))
for new_rule in new_rules:
self.assertTrue(m.has_policy("p", "p", new_rule))
def test_update_policy(self):
m = Model()
m.load_model(get_examples("basic_model.conf"))
old_rule = ["admin", "domain1", "data1", "read"]
new_rule = ["admin", "domain1", "data2", "read"]
m.add_policy("p", "p", old_rule)
self.assertTrue(m.has_policy("p", "p", old_rule))
m.update_policy("p", "p", old_rule, new_rule)
self.assertFalse(m.has_policy("p", "p", old_rule))
self.assertTrue(m.has_policy("p", "p", new_rule))
m = Model()
m.load_model(get_examples("priority_model_explicit.conf"))
old_rule = ["1", "admin", "data1", "read", "allow"]
new_rule = ["1", "admin", "data2", "read", "allow"]
m.add_policy("p", "p", old_rule)
self.assertTrue(m.has_policy("p", "p", old_rule))
m.update_policy("p", "p", old_rule, new_rule)
self.assertFalse(m.has_policy("p", "p", old_rule))
self.assertTrue(m.has_policy("p", "p", new_rule))
def test_add_role_policy(self):
m = Model()
m.load_model(get_examples("rbac_model.conf"))
p_rule1 = ["alice", "data1", "read"]
m.add_policy("p", "p", p_rule1)
self.assertTrue(m.has_policy("p", "p", p_rule1))
p_rule2 = ["data2_admin", "data2", "read"]
m.add_policy("p", "p", p_rule2)
self.assertTrue(m.has_policy("p", "p", p_rule2))
g_rule = ["alice", "data2_admin"]
m.add_policy("g", "g", g_rule)
self.assertTrue(m.has_policy("g", "g", g_rule))
self.assertTrue(m.get_policy("p", "p") == [p_rule1, p_rule2])
self.assertTrue(m.get_policy("g", "g") == [g_rule])
def test_update_policies(self):
m = Model()
m.load_model(get_examples("basic_model.conf"))
old_rules = [['admin', 'domain1', 'data1', 'read'],
['admin', 'domain1', 'data2', 'read'],
['admin', 'domain1', 'data3', 'read']]
new_rules = [['admin', 'domain1', 'data4', 'read'],
['admin', 'domain1', 'data5', 'read'],
['admin', 'domain1', 'data6', 'read']]
m.add_policies('p', 'p', old_rules)
for old_rule in old_rules:
self.assertTrue(m.has_policy('p', 'p', old_rule))
m.update_policies('p', 'p', old_rules, new_rules)
for old_rule in old_rules:
self.assertFalse(m.has_policy('p', 'p', old_rule))
for new_rule in new_rules:
self.assertTrue(m.has_policy('p', 'p', new_rule))
def test_update_policy(self):
m = Model()
m.load_model(get_examples("basic_model.conf"))
old_rule = ['admin', 'domain1', 'data1', 'read']
new_rule = ['admin', 'domain1', 'data2', 'read']
m.add_policy('p', 'p', old_rule)
self.assertTrue(m.has_policy('p', 'p', old_rule))
m.update_policy('p', 'p', old_rule, new_rule)
self.assertFalse(m.has_policy('p', 'p', old_rule))
self.assertTrue(m.has_policy('p', 'p', new_rule))