This is an automated email from the ASF dual-hosted git repository.
domgarguilo pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/accumulo-proxy.git
The following commit(s) were added to refs/heads/main by this push:
new 9cef998 Add tests for user creation/deletion and permissions
granting/revoking (#74)
9cef998 is described below
commit 9cef998bb3b69cfb233d4d2a1d082fde8723babf
Author: Dom G <domgargu...@apache.org>
AuthorDate: Mon Feb 13 13:03:10 2023 -0500
Add tests for user creation/deletion and permissions granting/revoking (#74)
* Add tests for user creation/deletion and permissions granting/revoking
* Change shared secret in test
---
.../apache/accumulo/proxy/its/SimpleProxyBase.java | 129 ++++++++++++++++++++-
1 file changed, 128 insertions(+), 1 deletion(-)
diff --git a/src/test/java/org/apache/accumulo/proxy/its/SimpleProxyBase.java
b/src/test/java/org/apache/accumulo/proxy/its/SimpleProxyBase.java
index a42ef8e..ba9d081 100644
--- a/src/test/java/org/apache/accumulo/proxy/its/SimpleProxyBase.java
+++ b/src/test/java/org/apache/accumulo/proxy/its/SimpleProxyBase.java
@@ -249,7 +249,8 @@ public abstract class SimpleProxyBase extends
SharedMiniClusterBase {
} else {
clientPrincipal = "root";
tokenClass = PasswordToken.class.getName();
- sharedSecret = SharedMiniClusterBase.getRootPassword();
+ sharedSecret = "superSecret";
+
props.put("sharedSecret", sharedSecret);
hostname = "localhost";
}
@@ -1466,6 +1467,132 @@ public abstract class SimpleProxyBase extends
SharedMiniClusterBase {
assertTrue(
client.authenticateUser(sharedSecret, user,
s2pp(ByteBufferUtil.toString(password))));
}
+
+ client.dropLocalUser(sharedSecret, user);
+ }
+
+ @Test
+ public void createAndDropUser() throws Exception {
+
+ Set<String> expectedUsers = new HashSet<>();
+
+ expectedUsers.add(clientPrincipal);
+
+ assertEquals(expectedUsers, client.listLocalUsers(sharedSecret));
+
+ final String newUser = "user" + getUniqueNameArray(1)[0];
+
+ expectedUsers.add(newUser);
+ client.createLocalUser(sharedSecret, newUser, s2bb("password"));
+
+ assertEquals(expectedUsers, client.listLocalUsers(sharedSecret));
+
+ expectedUsers.remove(newUser);
+ client.dropLocalUser(sharedSecret, newUser);
+
+ assertEquals(expectedUsers, client.listLocalUsers(sharedSecret));
+ }
+
+ @Test
+ public void tablePermissions() throws Exception {
+
+ final String newUser = "user" + getUniqueNameArray(1)[0];
+ client.createLocalUser(sharedSecret, newUser, s2bb("password"));
+
+ final TablePermission[] tablePermissions = TablePermission.values();
+
+ for (TablePermission tablePermission : tablePermissions) {
+
+ // make sure user doesn't have table permission
+ assertFalse(client.hasTablePermission(sharedSecret, newUser, tableName,
tablePermission),
+ "A newly created user should not have any permissions, but has " +
tablePermission);
+
+ // grant table permission
+ client.grantTablePermission(sharedSecret, newUser, tableName,
tablePermission);
+
+ // assert user has table permission
+ assertTrue(client.hasTablePermission(sharedSecret, newUser, tableName,
tablePermission),
+ "The user was granted, and should have " + tablePermission);
+
+ // revoke table permission
+ client.revokeTablePermission(sharedSecret, newUser, tableName,
tablePermission);
+
+ // assert table permission has been revoked
+ assertFalse(client.hasTablePermission(sharedSecret, newUser, tableName,
tablePermission),
+ "The users permissions have been revoked. Should NOT have " +
tablePermission);
+ }
+
+ client.dropLocalUser(sharedSecret, newUser);
+
+ }
+
+ @Test
+ public void namespacePermissions() throws Exception {
+
+ final String newUser = "user" + getUniqueNameArray(1)[0];
+ client.createLocalUser(sharedSecret, newUser, s2bb("password"));
+
+ final NamespacePermission[] namespacePermissions =
NamespacePermission.values();
+
+ for (NamespacePermission namespacePermission : namespacePermissions) {
+
+ // make sure user doesn't have namespace permission
+ assertFalse(
+ client.hasNamespacePermission(sharedSecret, newUser, namespaceName,
namespacePermission),
+ "A newly created user should not have any permissions, but has " +
namespacePermission);
+
+ // grant namespace permission
+ client.grantNamespacePermission(sharedSecret, newUser, namespaceName,
namespacePermission);
+
+ // assert user has namespace permission
+ assertTrue(
+ client.hasNamespacePermission(sharedSecret, newUser, namespaceName,
namespacePermission),
+ "The user was granted, and should have " + namespacePermission);
+
+ // revoke namespace permission
+ client.revokeNamespacePermission(sharedSecret, newUser, namespaceName,
namespacePermission);
+
+ // assert namespace permission has been revoked
+ assertFalse(
+ client.hasNamespacePermission(sharedSecret, newUser, namespaceName,
namespacePermission),
+ "The users permissions have been revoked. Should NOT have " +
namespacePermission);
+ }
+
+ client.dropLocalUser(sharedSecret, newUser);
+
+ }
+
+ @Test
+ public void systemPermissions() throws Exception {
+
+ final String newUser = "user" + getUniqueNameArray(1)[0];
+ client.createLocalUser(sharedSecret, newUser, s2bb("password"));
+
+ final SystemPermission[] systemPermissions = SystemPermission.values();
+
+ for (SystemPermission systemPermission : systemPermissions) {
+
+ // make sure user doesn't have system permission
+ assertFalse(client.hasSystemPermission(sharedSecret, newUser,
systemPermission),
+ "A newly created user should not have any permissions, but has " +
systemPermission);
+
+ // grant system permission
+ client.grantSystemPermission(sharedSecret, newUser, systemPermission);
+
+ // assert user has system permission
+ assertTrue(client.hasSystemPermission(sharedSecret, newUser,
systemPermission),
+ "The user was granted, and should have " + systemPermission);
+
+ // revoke system permission
+ client.revokeSystemPermission(sharedSecret, newUser, systemPermission);
+
+ // assert system permission has been revoked
+ assertFalse(client.hasSystemPermission(sharedSecret, newUser,
systemPermission),
+ "The users permissions have been revoked. Should NOT have " +
systemPermission);
+ }
+
+ client.dropLocalUser(sharedSecret, newUser);
+
}
@Test
