Spaces:
Running
Running
File size: 4,222 Bytes
b110593 |
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 |
// _ _
// __ _____ __ ___ ___ __ _| |_ ___
// \ \ /\ / / _ \/ _` \ \ / / |/ _` | __/ _ \
// \ V V / __/ (_| |\ V /| | (_| | || __/
// \_/\_/ \___|\__,_| \_/ |_|\__,_|\__\___|
//
// Copyright © 2016 - 2024 Weaviate B.V. All rights reserved.
//
// CONTACT: [email protected]
//
package backup
import (
"context"
"errors"
"fmt"
"reflect"
"testing"
"github.com/sirupsen/logrus/hooks/test"
"github.com/stretchr/testify/assert"
"github.com/stretchr/testify/require"
"github.com/weaviate/weaviate/entities/models"
)
// A component-test like test suite that makes sure that every available UC is
// potentially protected with the Authorization plugin
func Test_Authorization(t *testing.T) {
req := &BackupRequest{ID: "123", Backend: "s3"}
type testCase struct {
methodName string
additionalArgs []interface{}
expectedVerb string
expectedResource string
}
tests := []testCase{
{
methodName: "Backup",
additionalArgs: []interface{}{req},
expectedVerb: "add",
expectedResource: "backups/s3/123",
},
{
methodName: "BackupStatus",
additionalArgs: []interface{}{"s3", "123"},
expectedVerb: "get",
expectedResource: "backups/s3/123",
},
{
methodName: "Restore",
additionalArgs: []interface{}{req},
expectedVerb: "restore",
expectedResource: "backups/s3/123/restore",
},
{
methodName: "RestorationStatus",
additionalArgs: []interface{}{"s3", "123"},
expectedVerb: "get",
expectedResource: "backups/s3/123/restore",
},
}
t.Run("verify that a test for every public method exists", func(t *testing.T) {
testedMethods := make([]string, len(tests))
for i, test := range tests {
testedMethods[i] = test.methodName
}
for _, method := range allExportedMethods(&Scheduler{}) {
switch method {
case "OnCommit", "OnAbort", "OnCanCommit", "OnStatus":
continue
}
assert.Contains(t, testedMethods, method)
}
})
t.Run("verify the tested methods require correct permissions from the authorizer", func(t *testing.T) {
principal := &models.Principal{}
logger, _ := test.NewNullLogger()
for _, test := range tests {
t.Run(test.methodName, func(t *testing.T) {
authorizer := &authDenier{}
s := NewScheduler(authorizer, nil, nil, nil, nil, logger)
require.NotNil(t, s)
args := append([]interface{}{context.Background(), principal}, test.additionalArgs...)
out, _ := callFuncByName(s, test.methodName, args...)
require.Len(t, authorizer.calls, 1, "authorizer must be called")
assert.Equal(t, errors.New("just a test fake"), out[len(out)-1].Interface(),
"execution must abort with authorizer error")
assert.Equal(t, authorizeCall{principal, test.expectedVerb, test.expectedResource},
authorizer.calls[0], "correct parameters must have been used on authorizer")
})
}
})
}
type authorizeCall struct {
principal *models.Principal
verb string
resource string
}
type authDenier struct {
calls []authorizeCall
}
func (a *authDenier) Authorize(principal *models.Principal, verb, resource string) error {
a.calls = append(a.calls, authorizeCall{principal, verb, resource})
return errors.New("just a test fake")
}
// inspired by https://stackoverflow.com/a/33008200
func callFuncByName(manager interface{}, funcName string, params ...interface{}) (out []reflect.Value, err error) {
managerValue := reflect.ValueOf(manager)
m := managerValue.MethodByName(funcName)
if !m.IsValid() {
return make([]reflect.Value, 0), fmt.Errorf("Method not found \"%s\"", funcName)
}
in := make([]reflect.Value, len(params))
for i, param := range params {
in[i] = reflect.ValueOf(param)
}
out = m.Call(in)
return
}
func allExportedMethods(subject interface{}) []string {
var methods []string
subjectType := reflect.TypeOf(subject)
for i := 0; i < subjectType.NumMethod(); i++ {
name := subjectType.Method(i).Name
if name[0] >= 'A' && name[0] <= 'Z' {
methods = append(methods, name)
}
}
return methods
}
|