diff options
author | Zuul <zuul@review.opendev.org> | 2021-05-27 17:28:40 +0000 |
---|---|---|
committer | Gerrit Code Review <review@openstack.org> | 2021-05-27 17:28:40 +0000 |
commit | 5a6f61af4a438433f669e2c57bb152fc4ae8f3a9 (patch) | |
tree | 875fdc7b06211fb121910a57ff1d717eae2021c4 | |
parent | 43e0fb05b48f276a2def036b8e3e742b85676b75 (diff) | |
parent | 3b331b31f21ed808600cd3ee7e2e85f0c2896672 (diff) | |
download | neutron-5a6f61af4a438433f669e2c57bb152fc4ae8f3a9.tar.gz |
Merge "Add tests for metering API's new policy rules"
-rw-r--r-- | neutron/tests/unit/conf/policies/test_metering.py | 217 |
1 files changed, 217 insertions, 0 deletions
diff --git a/neutron/tests/unit/conf/policies/test_metering.py b/neutron/tests/unit/conf/policies/test_metering.py new file mode 100644 index 0000000000..0109c4170b --- /dev/null +++ b/neutron/tests/unit/conf/policies/test_metering.py @@ -0,0 +1,217 @@ +# Copyright (c) 2021 Red Hat Inc. +# +# Licensed under the Apache License, Version 2.0 (the "License"); +# you may not use this file except in compliance with the License. +# You may obtain a copy of the License at +# +# http://www.apache.org/licenses/LICENSE-2.0 +# +# Unless required by applicable law or agreed to in writing, software +# distributed under the License is distributed on an "AS IS" BASIS, +# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or +# implied. +# See the License for the specific language governing permissions and +# limitations under the License. + +from oslo_policy import policy as base_policy + +from neutron import policy +from neutron.tests.unit.conf.policies import base + + +class MeteringAPITestCase(base.PolicyBaseTestCase): + + def setUp(self): + super(MeteringAPITestCase, self).setUp() + self.target = {'project_id': self.project_id} + self.alt_target = {'project_id': self.alt_project_id} + + +class SystemAdminTests(MeteringAPITestCase): + + def setUp(self): + super(SystemAdminTests, self).setUp() + self.context = self.system_admin_ctx + + def test_create_metering_label(self): + self.assertTrue( + policy.enforce( + self.context, 'create_metering_label', self.target)) + self.assertTrue( + policy.enforce( + self.context, 'create_metering_label', self.alt_target)) + + def test_get_metering_label(self): + self.assertTrue( + policy.enforce( + self.context, 'get_metering_label', self.target)) + self.assertTrue( + policy.enforce( + self.context, 'get_metering_label', self.alt_target)) + + def test_delete_metering_label(self): + self.assertTrue( + policy.enforce( + self.context, 'delete_metering_label', self.target)) + self.assertTrue( + policy.enforce( + self.context, 'delete_metering_label', self.alt_target)) + + def test_create_metering_label_rule(self): + self.assertTrue( + policy.enforce( + self.context, 'create_metering_label_rule', self.target)) + self.assertTrue( + policy.enforce( + self.context, 'create_metering_label_rule', self.alt_target)) + + def test_get_metering_label_rule(self): + self.assertTrue( + policy.enforce( + self.context, 'get_metering_label_rule', self.target)) + self.assertTrue( + policy.enforce( + self.context, 'get_metering_label_rule', self.alt_target)) + + def test_delete_metering_label_rule(self): + self.assertTrue( + policy.enforce( + self.context, 'delete_metering_label_rule', self.target)) + self.assertTrue( + policy.enforce( + self.context, 'delete_metering_label_rule', self.alt_target)) + + +class SystemMemberTests(SystemAdminTests): + + def setUp(self): + super(SystemMemberTests, self).setUp() + self.context = self.system_member_ctx + + def test_create_metering_label(self): + self.assertRaises( + base_policy.PolicyNotAuthorized, + policy.enforce, + self.context, 'create_metering_label', self.target) + self.assertRaises( + base_policy.PolicyNotAuthorized, + policy.enforce, + self.context, 'create_metering_label', self.alt_target) + + def test_delete_metering_label(self): + self.assertRaises( + base_policy.PolicyNotAuthorized, + policy.enforce, + self.context, 'delete_metering_label', self.target) + self.assertRaises( + base_policy.PolicyNotAuthorized, + policy.enforce, + self.context, 'delete_metering_label', self.alt_target) + + def test_create_metering_label_rule(self): + self.assertRaises( + base_policy.PolicyNotAuthorized, + policy.enforce, + self.context, 'create_metering_label_rule', self.target) + self.assertRaises( + base_policy.PolicyNotAuthorized, + policy.enforce, + self.context, 'create_metering_label_rule', self.alt_target) + + def test_delete_metering_label_rule(self): + self.assertRaises( + base_policy.PolicyNotAuthorized, + policy.enforce, + self.context, 'delete_metering_label_rule', self.target) + self.assertRaises( + base_policy.PolicyNotAuthorized, + policy.enforce, + self.context, 'delete_metering_label_rule', self.alt_target) + + +class SystemReaderTests(SystemMemberTests): + + def setUp(self): + super(SystemReaderTests, self).setUp() + self.context = self.system_reader_ctx + + +class ProjectAdminTests(MeteringAPITestCase): + + def setUp(self): + super(ProjectAdminTests, self).setUp() + self.context = self.project_admin_ctx + + def test_create_metering_label(self): + self.assertRaises( + base_policy.PolicyNotAuthorized, + policy.enforce, + self.context, 'create_metering_label', self.target) + self.assertRaises( + base_policy.PolicyNotAuthorized, + policy.enforce, + self.context, 'create_metering_label', self.alt_target) + + def test_get_metering_label(self): + self.assertRaises( + base_policy.PolicyNotAuthorized, + policy.enforce, + self.context, 'get_metering_label', self.target) + self.assertRaises( + base_policy.PolicyNotAuthorized, + policy.enforce, + self.context, 'get_metering_label', self.alt_target) + + def test_delete_metering_label(self): + self.assertRaises( + base_policy.PolicyNotAuthorized, + policy.enforce, + self.context, 'delete_metering_label', self.target) + self.assertRaises( + base_policy.PolicyNotAuthorized, + policy.enforce, + self.context, 'delete_metering_label', self.alt_target) + + def test_create_metering_label_rule(self): + self.assertRaises( + base_policy.PolicyNotAuthorized, + policy.enforce, + self.context, 'create_metering_label_rule', self.target) + self.assertRaises( + base_policy.PolicyNotAuthorized, + policy.enforce, + self.context, 'create_metering_label_rule', self.alt_target) + + def test_get_metering_label_rule(self): + self.assertRaises( + base_policy.PolicyNotAuthorized, + policy.enforce, + self.context, 'get_metering_label_rule', self.target) + self.assertRaises( + base_policy.PolicyNotAuthorized, + policy.enforce, + self.context, 'get_metering_label_rule', self.alt_target) + + def test_delete_metering_label_rule(self): + self.assertRaises( + base_policy.PolicyNotAuthorized, + policy.enforce, + self.context, 'delete_metering_label_rule', self.target) + self.assertRaises( + base_policy.PolicyNotAuthorized, + policy.enforce, + self.context, 'delete_metering_label_rule', self.alt_target) + + +class ProjectMemberTests(ProjectAdminTests): + + def setUp(self): + super(ProjectMemberTests, self).setUp() + self.context = self.project_member_ctx + + +class ProjectReaderTests(ProjectMemberTests): + + def setUp(self): + super(ProjectReaderTests, self).setUp() + self.context = self.project_reader_ctx |