39839def2e
this will better isolate the unit tests from the functional tests. unfortunately, the "integration" tests had to be lumped into the "unit" tests since we need the separation in testr.conf Change-Id: Ifd12198c1f90e4e3c951c73bfa1884ab300d8ded
684 lines
21 KiB
Python
684 lines
21 KiB
Python
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
#
|
|
|
|
import copy
|
|
import mock
|
|
|
|
from openstackclient.identity.v3 import role_assignment
|
|
from openstackclient.tests.unit import fakes
|
|
from openstackclient.tests.unit.identity.v3 import fakes as identity_fakes
|
|
|
|
|
|
class TestRoleAssignment(identity_fakes.TestIdentityv3):
|
|
|
|
def setUp(self):
|
|
super(TestRoleAssignment, self).setUp()
|
|
|
|
|
|
class TestRoleAssignmentList(TestRoleAssignment):
|
|
|
|
columns = (
|
|
'Role',
|
|
'User',
|
|
'Group',
|
|
'Project',
|
|
'Domain',
|
|
'Inherited',
|
|
)
|
|
|
|
def setUp(self):
|
|
super(TestRoleAssignment, self).setUp()
|
|
|
|
# Get a shortcut to the UserManager Mock
|
|
self.users_mock = self.app.client_manager.identity.users
|
|
self.users_mock.reset_mock()
|
|
|
|
# Get a shortcut to the GroupManager Mock
|
|
self.groups_mock = self.app.client_manager.identity.groups
|
|
self.groups_mock.reset_mock()
|
|
|
|
# Get a shortcut to the DomainManager Mock
|
|
self.domains_mock = self.app.client_manager.identity.domains
|
|
self.domains_mock.reset_mock()
|
|
|
|
# Get a shortcut to the ProjectManager Mock
|
|
self.projects_mock = self.app.client_manager.identity.projects
|
|
self.projects_mock.reset_mock()
|
|
|
|
# Get a shortcut to the RoleManager Mock
|
|
self.roles_mock = self.app.client_manager.identity.roles
|
|
self.roles_mock.reset_mock()
|
|
|
|
self.role_assignments_mock = self.app.client_manager.identity.\
|
|
role_assignments
|
|
self.role_assignments_mock.reset_mock()
|
|
|
|
# Get the command object to test
|
|
self.cmd = role_assignment.ListRoleAssignment(self.app, None)
|
|
|
|
def test_role_assignment_list_no_filters(self):
|
|
|
|
self.role_assignments_mock.list.return_value = [
|
|
fakes.FakeResource(
|
|
None,
|
|
copy.deepcopy(
|
|
identity_fakes.ASSIGNMENT_WITH_PROJECT_ID_AND_USER_ID),
|
|
loaded=True,
|
|
),
|
|
fakes.FakeResource(
|
|
None,
|
|
copy.deepcopy(
|
|
identity_fakes.ASSIGNMENT_WITH_PROJECT_ID_AND_GROUP_ID),
|
|
loaded=True,
|
|
),
|
|
]
|
|
|
|
arglist = []
|
|
verifylist = []
|
|
parsed_args = self.check_parser(self.cmd, arglist, verifylist)
|
|
|
|
# In base command class Lister in cliff, abstract method take_action()
|
|
# returns a tuple containing the column names and an iterable
|
|
# containing the data to be listed.
|
|
columns, data = self.cmd.take_action(parsed_args)
|
|
|
|
self.role_assignments_mock.list.assert_called_with(
|
|
domain=None,
|
|
group=None,
|
|
effective=False,
|
|
role=None,
|
|
user=None,
|
|
project=None,
|
|
os_inherit_extension_inherited_to=None,
|
|
include_names=False)
|
|
|
|
self.assertEqual(self.columns, columns)
|
|
datalist = ((
|
|
identity_fakes.role_id,
|
|
identity_fakes.user_id,
|
|
'',
|
|
identity_fakes.project_id,
|
|
'',
|
|
False
|
|
), (identity_fakes.role_id,
|
|
'',
|
|
identity_fakes.group_id,
|
|
identity_fakes.project_id,
|
|
'',
|
|
False
|
|
),)
|
|
self.assertEqual(datalist, tuple(data))
|
|
|
|
def test_role_assignment_list_user(self):
|
|
|
|
self.role_assignments_mock.list.return_value = [
|
|
fakes.FakeResource(
|
|
None,
|
|
copy.deepcopy(
|
|
identity_fakes.ASSIGNMENT_WITH_DOMAIN_ID_AND_USER_ID),
|
|
loaded=True,
|
|
),
|
|
fakes.FakeResource(
|
|
None,
|
|
copy.deepcopy(
|
|
identity_fakes.ASSIGNMENT_WITH_PROJECT_ID_AND_USER_ID),
|
|
loaded=True,
|
|
),
|
|
]
|
|
|
|
arglist = [
|
|
'--user', identity_fakes.user_name
|
|
]
|
|
verifylist = [
|
|
('user', identity_fakes.user_name),
|
|
('group', None),
|
|
('domain', None),
|
|
('project', None),
|
|
('role', None),
|
|
('effective', False),
|
|
('inherited', False),
|
|
('names', False),
|
|
]
|
|
parsed_args = self.check_parser(self.cmd, arglist, verifylist)
|
|
|
|
# In base command class Lister in cliff, abstract method take_action()
|
|
# returns a tuple containing the column names and an iterable
|
|
# containing the data to be listed.
|
|
columns, data = self.cmd.take_action(parsed_args)
|
|
|
|
self.role_assignments_mock.list.assert_called_with(
|
|
domain=None,
|
|
user=self.users_mock.get(),
|
|
group=None,
|
|
project=None,
|
|
role=None,
|
|
effective=False,
|
|
os_inherit_extension_inherited_to=None,
|
|
include_names=False)
|
|
|
|
self.assertEqual(self.columns, columns)
|
|
datalist = ((
|
|
identity_fakes.role_id,
|
|
identity_fakes.user_id,
|
|
'',
|
|
'',
|
|
identity_fakes.domain_id,
|
|
False
|
|
), (identity_fakes.role_id,
|
|
identity_fakes.user_id,
|
|
'',
|
|
identity_fakes.project_id,
|
|
'',
|
|
False
|
|
),)
|
|
self.assertEqual(datalist, tuple(data))
|
|
|
|
def test_role_assignment_list_group(self):
|
|
|
|
self.role_assignments_mock.list.return_value = [
|
|
fakes.FakeResource(
|
|
None,
|
|
copy.deepcopy(
|
|
identity_fakes.ASSIGNMENT_WITH_DOMAIN_ID_AND_GROUP_ID),
|
|
loaded=True,
|
|
),
|
|
fakes.FakeResource(
|
|
None,
|
|
copy.deepcopy(
|
|
identity_fakes.ASSIGNMENT_WITH_PROJECT_ID_AND_GROUP_ID),
|
|
loaded=True,
|
|
),
|
|
]
|
|
|
|
arglist = [
|
|
'--group', identity_fakes.group_name
|
|
]
|
|
verifylist = [
|
|
('user', None),
|
|
('group', identity_fakes.group_name),
|
|
('domain', None),
|
|
('project', None),
|
|
('role', None),
|
|
('effective', False),
|
|
('inherited', False),
|
|
('names', False),
|
|
]
|
|
parsed_args = self.check_parser(self.cmd, arglist, verifylist)
|
|
|
|
# In base command class Lister in cliff, abstract method take_action()
|
|
# returns a tuple containing the column names and an iterable
|
|
# containing the data to be listed.
|
|
columns, data = self.cmd.take_action(parsed_args)
|
|
|
|
self.role_assignments_mock.list.assert_called_with(
|
|
domain=None,
|
|
group=self.groups_mock.get(),
|
|
effective=False,
|
|
project=None,
|
|
role=None,
|
|
user=None,
|
|
os_inherit_extension_inherited_to=None,
|
|
include_names=False)
|
|
|
|
self.assertEqual(self.columns, columns)
|
|
datalist = ((
|
|
identity_fakes.role_id,
|
|
'',
|
|
identity_fakes.group_id,
|
|
'',
|
|
identity_fakes.domain_id,
|
|
False
|
|
), (identity_fakes.role_id,
|
|
'',
|
|
identity_fakes.group_id,
|
|
identity_fakes.project_id,
|
|
'',
|
|
False
|
|
),)
|
|
self.assertEqual(datalist, tuple(data))
|
|
|
|
def test_role_assignment_list_domain(self):
|
|
|
|
self.role_assignments_mock.list.return_value = [
|
|
fakes.FakeResource(
|
|
None,
|
|
copy.deepcopy(
|
|
identity_fakes.ASSIGNMENT_WITH_DOMAIN_ID_AND_USER_ID),
|
|
loaded=True,
|
|
),
|
|
fakes.FakeResource(
|
|
None,
|
|
copy.deepcopy(
|
|
identity_fakes.ASSIGNMENT_WITH_DOMAIN_ID_AND_GROUP_ID),
|
|
loaded=True,
|
|
),
|
|
]
|
|
|
|
arglist = [
|
|
'--domain', identity_fakes.domain_name
|
|
]
|
|
verifylist = [
|
|
('user', None),
|
|
('group', None),
|
|
('domain', identity_fakes.domain_name),
|
|
('project', None),
|
|
('role', None),
|
|
('effective', False),
|
|
('inherited', False),
|
|
('names', False),
|
|
]
|
|
parsed_args = self.check_parser(self.cmd, arglist, verifylist)
|
|
|
|
# In base command class Lister in cliff, abstract method take_action()
|
|
# returns a tuple containing the column names and an iterable
|
|
# containing the data to be listed.
|
|
columns, data = self.cmd.take_action(parsed_args)
|
|
|
|
self.role_assignments_mock.list.assert_called_with(
|
|
domain=self.domains_mock.get(),
|
|
group=None,
|
|
effective=False,
|
|
project=None,
|
|
role=None,
|
|
user=None,
|
|
os_inherit_extension_inherited_to=None,
|
|
include_names=False)
|
|
|
|
self.assertEqual(self.columns, columns)
|
|
datalist = ((
|
|
identity_fakes.role_id,
|
|
identity_fakes.user_id,
|
|
'',
|
|
'',
|
|
identity_fakes.domain_id,
|
|
False
|
|
), (identity_fakes.role_id,
|
|
'',
|
|
identity_fakes.group_id,
|
|
'',
|
|
identity_fakes.domain_id,
|
|
False
|
|
),)
|
|
self.assertEqual(datalist, tuple(data))
|
|
|
|
def test_role_assignment_list_project(self):
|
|
|
|
self.role_assignments_mock.list.return_value = [
|
|
fakes.FakeResource(
|
|
None,
|
|
copy.deepcopy(
|
|
identity_fakes.ASSIGNMENT_WITH_PROJECT_ID_AND_USER_ID),
|
|
loaded=True,
|
|
),
|
|
fakes.FakeResource(
|
|
None,
|
|
copy.deepcopy(
|
|
identity_fakes.ASSIGNMENT_WITH_PROJECT_ID_AND_GROUP_ID),
|
|
loaded=True,
|
|
),
|
|
]
|
|
|
|
arglist = [
|
|
'--project', identity_fakes.project_name
|
|
]
|
|
verifylist = [
|
|
('user', None),
|
|
('group', None),
|
|
('domain', None),
|
|
('project', identity_fakes.project_name),
|
|
('role', None),
|
|
('effective', False),
|
|
('inherited', False),
|
|
('names', False),
|
|
]
|
|
parsed_args = self.check_parser(self.cmd, arglist, verifylist)
|
|
|
|
# In base command class Lister in cliff, abstract method take_action()
|
|
# returns a tuple containing the column names and an iterable
|
|
# containing the data to be listed.
|
|
columns, data = self.cmd.take_action(parsed_args)
|
|
|
|
self.role_assignments_mock.list.assert_called_with(
|
|
domain=None,
|
|
group=None,
|
|
effective=False,
|
|
project=self.projects_mock.get(),
|
|
role=None,
|
|
user=None,
|
|
os_inherit_extension_inherited_to=None,
|
|
include_names=False)
|
|
|
|
self.assertEqual(self.columns, columns)
|
|
datalist = ((
|
|
identity_fakes.role_id,
|
|
identity_fakes.user_id,
|
|
'',
|
|
identity_fakes.project_id,
|
|
'',
|
|
False
|
|
), (identity_fakes.role_id,
|
|
'',
|
|
identity_fakes.group_id,
|
|
identity_fakes.project_id,
|
|
'',
|
|
False
|
|
),)
|
|
self.assertEqual(datalist, tuple(data))
|
|
|
|
def test_role_assignment_list_def_creds(self):
|
|
|
|
auth_ref = self.app.client_manager.auth_ref = mock.MagicMock()
|
|
auth_ref.project_id.return_value = identity_fakes.project_id
|
|
auth_ref.user_id.return_value = identity_fakes.user_id
|
|
|
|
self.role_assignments_mock.list.return_value = [
|
|
fakes.FakeResource(
|
|
None,
|
|
copy.deepcopy(
|
|
identity_fakes.ASSIGNMENT_WITH_PROJECT_ID_AND_USER_ID),
|
|
loaded=True,
|
|
),
|
|
]
|
|
|
|
arglist = [
|
|
'--auth-user',
|
|
'--auth-project',
|
|
]
|
|
verifylist = [
|
|
('user', None),
|
|
('group', None),
|
|
('domain', None),
|
|
('project', None),
|
|
('role', None),
|
|
('effective', False),
|
|
('inherited', False),
|
|
('names', False),
|
|
('authuser', True),
|
|
('authproject', True),
|
|
]
|
|
parsed_args = self.check_parser(self.cmd, arglist, verifylist)
|
|
|
|
# In base command class Lister in cliff, abstract method take_action()
|
|
# returns a tuple containing the column names and an iterable
|
|
# containing the data to be listed.
|
|
columns, data = self.cmd.take_action(parsed_args)
|
|
|
|
self.role_assignments_mock.list.assert_called_with(
|
|
domain=None,
|
|
user=self.users_mock.get(),
|
|
group=None,
|
|
project=self.projects_mock.get(),
|
|
role=None,
|
|
effective=False,
|
|
os_inherit_extension_inherited_to=None,
|
|
include_names=False)
|
|
|
|
self.assertEqual(self.columns, columns)
|
|
datalist = ((
|
|
identity_fakes.role_id,
|
|
identity_fakes.user_id,
|
|
'',
|
|
identity_fakes.project_id,
|
|
'',
|
|
False
|
|
),)
|
|
self.assertEqual(datalist, tuple(data))
|
|
|
|
def test_role_assignment_list_effective(self):
|
|
|
|
self.role_assignments_mock.list.return_value = [
|
|
fakes.FakeResource(
|
|
None,
|
|
copy.deepcopy(
|
|
identity_fakes.ASSIGNMENT_WITH_PROJECT_ID_AND_USER_ID),
|
|
loaded=True,
|
|
),
|
|
fakes.FakeResource(
|
|
None,
|
|
copy.deepcopy(
|
|
identity_fakes.ASSIGNMENT_WITH_DOMAIN_ID_AND_USER_ID),
|
|
loaded=True,
|
|
),
|
|
]
|
|
|
|
arglist = ['--effective']
|
|
verifylist = [
|
|
('user', None),
|
|
('group', None),
|
|
('domain', None),
|
|
('project', None),
|
|
('role', None),
|
|
('effective', True),
|
|
('inherited', False),
|
|
('names', False),
|
|
]
|
|
parsed_args = self.check_parser(self.cmd, arglist, verifylist)
|
|
|
|
# In base command class Lister in cliff, abstract method take_action()
|
|
# returns a tuple containing the column names and an iterable
|
|
# containing the data to be listed.
|
|
columns, data = self.cmd.take_action(parsed_args)
|
|
|
|
self.role_assignments_mock.list.assert_called_with(
|
|
domain=None,
|
|
group=None,
|
|
effective=True,
|
|
project=None,
|
|
role=None,
|
|
user=None,
|
|
os_inherit_extension_inherited_to=None,
|
|
include_names=False)
|
|
|
|
self.assertEqual(self.columns, columns)
|
|
datalist = ((
|
|
identity_fakes.role_id,
|
|
identity_fakes.user_id,
|
|
'',
|
|
identity_fakes.project_id,
|
|
'',
|
|
False
|
|
), (identity_fakes.role_id,
|
|
identity_fakes.user_id,
|
|
'',
|
|
'',
|
|
identity_fakes.domain_id,
|
|
False
|
|
),)
|
|
self.assertEqual(tuple(data), datalist)
|
|
|
|
def test_role_assignment_list_inherited(self):
|
|
|
|
self.role_assignments_mock.list.return_value = [
|
|
fakes.FakeResource(
|
|
None,
|
|
copy.deepcopy(
|
|
(identity_fakes.
|
|
ASSIGNMENT_WITH_PROJECT_ID_AND_USER_ID_INHERITED)),
|
|
loaded=True,
|
|
),
|
|
fakes.FakeResource(
|
|
None,
|
|
copy.deepcopy(
|
|
(identity_fakes.
|
|
ASSIGNMENT_WITH_DOMAIN_ID_AND_USER_ID_INHERITED)),
|
|
loaded=True,
|
|
),
|
|
]
|
|
|
|
arglist = ['--inherited']
|
|
verifylist = [
|
|
('user', None),
|
|
('group', None),
|
|
('domain', None),
|
|
('project', None),
|
|
('role', None),
|
|
('effective', False),
|
|
('inherited', True),
|
|
('names', False),
|
|
]
|
|
parsed_args = self.check_parser(self.cmd, arglist, verifylist)
|
|
|
|
# In base command class Lister in cliff, abstract method take_action()
|
|
# returns a tuple containing the column names and an iterable
|
|
# containing the data to be listed.
|
|
columns, data = self.cmd.take_action(parsed_args)
|
|
|
|
self.role_assignments_mock.list.assert_called_with(
|
|
domain=None,
|
|
group=None,
|
|
effective=False,
|
|
project=None,
|
|
role=None,
|
|
user=None,
|
|
os_inherit_extension_inherited_to='projects',
|
|
include_names=False)
|
|
|
|
self.assertEqual(self.columns, columns)
|
|
datalist = ((
|
|
identity_fakes.role_id,
|
|
identity_fakes.user_id,
|
|
'',
|
|
identity_fakes.project_id,
|
|
'',
|
|
True
|
|
), (identity_fakes.role_id,
|
|
identity_fakes.user_id,
|
|
'',
|
|
'',
|
|
identity_fakes.domain_id,
|
|
True
|
|
),)
|
|
self.assertEqual(datalist, tuple(data))
|
|
|
|
def test_role_assignment_list_include_names(self):
|
|
|
|
self.role_assignments_mock.list.return_value = [
|
|
fakes.FakeResource(
|
|
None,
|
|
copy.deepcopy(
|
|
identity_fakes
|
|
.ASSIGNMENT_WITH_PROJECT_ID_AND_USER_ID_INCLUDE_NAMES),
|
|
loaded=True,
|
|
),
|
|
fakes.FakeResource(
|
|
None,
|
|
copy.deepcopy(
|
|
identity_fakes
|
|
.ASSIGNMENT_WITH_DOMAIN_ID_AND_USER_ID_INCLUDE_NAMES),
|
|
loaded=True,
|
|
),
|
|
]
|
|
|
|
arglist = ['--names']
|
|
verifylist = [
|
|
('user', None),
|
|
('group', None),
|
|
('domain', None),
|
|
('project', None),
|
|
('role', None),
|
|
('effective', False),
|
|
('inherited', False),
|
|
('names', True),
|
|
]
|
|
parsed_args = self.check_parser(self.cmd, arglist, verifylist)
|
|
|
|
# DisplayCommandBase.take_action() returns two tuples
|
|
|
|
# This test will not run correctly until the patch in the python
|
|
# client is merged. Once that is done 'data' should return the
|
|
# correct information
|
|
columns, data = self.cmd.take_action(parsed_args)
|
|
|
|
self.role_assignments_mock.list.assert_called_with(
|
|
domain=None,
|
|
group=None,
|
|
effective=False,
|
|
project=None,
|
|
role=None,
|
|
user=None,
|
|
os_inherit_extension_inherited_to=None,
|
|
include_names=True)
|
|
|
|
collist = ('Role', 'User', 'Group', 'Project', 'Domain', 'Inherited')
|
|
self.assertEqual(columns, collist)
|
|
|
|
datalist1 = ((
|
|
identity_fakes.role_name,
|
|
'@'.join([identity_fakes.user_name, identity_fakes.domain_name]),
|
|
'',
|
|
'@'.join([identity_fakes.project_name,
|
|
identity_fakes.domain_name]),
|
|
'',
|
|
False
|
|
), (identity_fakes.role_name,
|
|
'@'.join([identity_fakes.user_name, identity_fakes.domain_name]),
|
|
'',
|
|
'',
|
|
identity_fakes.domain_name,
|
|
False
|
|
),)
|
|
self.assertEqual(tuple(data), datalist1)
|
|
|
|
def test_role_assignment_list_domain_role(self):
|
|
|
|
self.role_assignments_mock.list.return_value = [
|
|
fakes.FakeResource(
|
|
None,
|
|
copy.deepcopy(
|
|
identity_fakes.ASSIGNMENT_WITH_DOMAIN_ROLE),
|
|
loaded=True,
|
|
),
|
|
]
|
|
|
|
arglist = [
|
|
'--role', identity_fakes.ROLE_2['name'],
|
|
'--role-domain', identity_fakes.domain_name
|
|
]
|
|
verifylist = [
|
|
('user', None),
|
|
('group', None),
|
|
('domain', None),
|
|
('project', None),
|
|
('role', identity_fakes.ROLE_2['name']),
|
|
('effective', False),
|
|
('inherited', False),
|
|
('names', False),
|
|
]
|
|
parsed_args = self.check_parser(self.cmd, arglist, verifylist)
|
|
|
|
# In base command class Lister in cliff, abstract method take_action()
|
|
# returns a tuple containing the column names and an iterable
|
|
# containing the data to be listed.
|
|
columns, data = self.cmd.take_action(parsed_args)
|
|
|
|
self.role_assignments_mock.list.assert_called_with(
|
|
domain=None,
|
|
user=None,
|
|
group=None,
|
|
project=None,
|
|
role=self.roles_mock.get(),
|
|
effective=False,
|
|
os_inherit_extension_inherited_to=None,
|
|
include_names=False)
|
|
|
|
self.assertEqual(self.columns, columns)
|
|
datalist = ((
|
|
identity_fakes.ROLE_2['id'],
|
|
identity_fakes.user_id,
|
|
'',
|
|
'',
|
|
identity_fakes.domain_id,
|
|
False
|
|
),)
|
|
self.assertEqual(datalist, tuple(data))
|