diff options
author | Zuul <zuul@review.opendev.org> | 2023-05-11 02:58:24 +0000 |
---|---|---|
committer | Gerrit Code Review <review@openstack.org> | 2023-05-11 02:58:24 +0000 |
commit | 40e003ed84fe22612046afcdd6c5b6cca7cf3e31 (patch) | |
tree | 5bf1ca30fd33f5791437a7a583ec55a7ad19bb78 /neutron/tests/unit/conf/policies/test_floatingip_port_forwarding.py | |
parent | 64c5f5cdaaf78f5cb16856827b762b441a997c62 (diff) | |
parent | 4edff4fe8dff102f13e3da0a000c03538755337d (diff) | |
download | neutron-40e003ed84fe22612046afcdd6c5b6cca7cf3e31.tar.gz |
Merge "[S-RBAC] Fix new policies for FIP PFs APIs"
Diffstat (limited to 'neutron/tests/unit/conf/policies/test_floatingip_port_forwarding.py')
-rw-r--r-- | neutron/tests/unit/conf/policies/test_floatingip_port_forwarding.py | 347 |
1 files changed, 205 insertions, 142 deletions
diff --git a/neutron/tests/unit/conf/policies/test_floatingip_port_forwarding.py b/neutron/tests/unit/conf/policies/test_floatingip_port_forwarding.py index d72d61870e..ab1446e98d 100644 --- a/neutron/tests/unit/conf/policies/test_floatingip_port_forwarding.py +++ b/neutron/tests/unit/conf/policies/test_floatingip_port_forwarding.py @@ -28,16 +28,19 @@ class FloatingipPortForwardingAPITestCase(base.PolicyBaseTestCase): super(FloatingipPortForwardingAPITestCase, self).setUp() self.fip = { 'id': uuidutils.generate_uuid(), + 'tenant_id': self.project_id, 'project_id': self.project_id} + self.alt_fip = { + 'id': uuidutils.generate_uuid(), + 'tenant_id': self.alt_project_id, + 'project_id': self.alt_project_id} self.target = { - 'project_id': self.project_id, 'floatingip_id': self.fip['id'], 'ext_parent_floatingip_id': self.fip['id']} self.alt_target = { - 'project_id': self.alt_project_id, - 'floatingip_id': self.fip['id'], - 'ext_parent_floatingip_id': self.fip['id']} + 'floatingip_id': self.alt_fip['id'], + 'ext_parent_floatingip_id': self.alt_fip['id']} self.plugin_mock = mock.Mock() self.plugin_mock.get_floatingip.return_value = self.fip @@ -53,52 +56,68 @@ class SystemAdminTests(FloatingipPortForwardingAPITestCase): self.context = self.system_admin_ctx def test_create_fip_pf(self): - self.assertRaises( - base_policy.InvalidScope, - policy.enforce, - self.context, 'create_floatingip_port_forwarding', - self.target) - self.assertRaises( - base_policy.InvalidScope, - policy.enforce, - self.context, 'create_floatingip_port_forwarding', - self.alt_target) + with mock.patch.object(self.plugin_mock, 'get_floatingip', + return_value=self.fip): + self.assertRaises( + base_policy.InvalidScope, + policy.enforce, + self.context, 'create_floatingip_port_forwarding', + self.target) + with mock.patch.object(self.plugin_mock, 'get_floatingip', + return_value=self.alt_fip): + self.assertRaises( + base_policy.InvalidScope, + policy.enforce, + self.context, 'create_floatingip_port_forwarding', + self.alt_target) def test_get_fip_pf(self): - self.assertRaises( - base_policy.InvalidScope, - policy.enforce, - self.context, 'get_floatingip_port_forwarding', - self.target) - self.assertRaises( - base_policy.InvalidScope, - policy.enforce, - self.context, 'get_floatingip_port_forwarding', - self.alt_target) + with mock.patch.object(self.plugin_mock, 'get_floatingip', + return_value=self.fip): + self.assertRaises( + base_policy.InvalidScope, + policy.enforce, + self.context, 'get_floatingip_port_forwarding', + self.target) + with mock.patch.object(self.plugin_mock, 'get_floatingip', + return_value=self.alt_fip): + self.assertRaises( + base_policy.InvalidScope, + policy.enforce, + self.context, 'get_floatingip_port_forwarding', + self.alt_target) def test_update_fip_pf(self): - self.assertRaises( - base_policy.InvalidScope, - policy.enforce, - self.context, 'update_floatingip_port_forwarding', - self.target) - self.assertRaises( - base_policy.InvalidScope, - policy.enforce, - self.context, 'update_floatingip_port_forwarding', - self.alt_target) + with mock.patch.object(self.plugin_mock, 'get_floatingip', + return_value=self.fip): + self.assertRaises( + base_policy.InvalidScope, + policy.enforce, + self.context, 'update_floatingip_port_forwarding', + self.target) + with mock.patch.object(self.plugin_mock, 'get_floatingip', + return_value=self.alt_fip): + self.assertRaises( + base_policy.InvalidScope, + policy.enforce, + self.context, 'update_floatingip_port_forwarding', + self.alt_target) def test_delete_fip_pf(self): - self.assertRaises( - base_policy.InvalidScope, - policy.enforce, - self.context, 'delete_floatingip_port_forwarding', - self.target) - self.assertRaises( - base_policy.InvalidScope, - policy.enforce, - self.context, 'delete_floatingip_port_forwarding', - self.alt_target) + with mock.patch.object(self.plugin_mock, 'get_floatingip', + return_value=self.fip): + self.assertRaises( + base_policy.InvalidScope, + policy.enforce, + self.context, 'delete_floatingip_port_forwarding', + self.target) + with mock.patch.object(self.plugin_mock, 'get_floatingip', + return_value=self.alt_fip): + self.assertRaises( + base_policy.InvalidScope, + policy.enforce, + self.context, 'delete_floatingip_port_forwarding', + self.alt_target) class SystemMemberTests(SystemAdminTests): @@ -122,44 +141,60 @@ class AdminTests(FloatingipPortForwardingAPITestCase): self.context = self.project_admin_ctx def test_create_fip_pf(self): - self.assertTrue( - policy.enforce(self.context, - 'create_floatingip_port_forwarding', - self.target)) - self.assertTrue( - policy.enforce(self.context, - 'create_floatingip_port_forwarding', - self.alt_target)) + with mock.patch.object(self.plugin_mock, 'get_floatingip', + return_value=self.fip): + self.assertTrue( + policy.enforce(self.context, + 'create_floatingip_port_forwarding', + self.target)) + with mock.patch.object(self.plugin_mock, 'get_floatingip', + return_value=self.alt_fip): + self.assertTrue( + policy.enforce(self.context, + 'create_floatingip_port_forwarding', + self.alt_target)) def test_get_fip_pf(self): - self.assertTrue( - policy.enforce(self.context, - 'get_floatingip_port_forwarding', - self.target)) - self.assertTrue( - policy.enforce(self.context, - 'get_floatingip_port_forwarding', - self.alt_target)) + with mock.patch.object(self.plugin_mock, 'get_floatingip', + return_value=self.fip): + self.assertTrue( + policy.enforce(self.context, + 'get_floatingip_port_forwarding', + self.target)) + with mock.patch.object(self.plugin_mock, 'get_floatingip', + return_value=self.alt_fip): + self.assertTrue( + policy.enforce(self.context, + 'get_floatingip_port_forwarding', + self.alt_target)) def test_update_fip_pf(self): - self.assertTrue( - policy.enforce(self.context, - 'update_floatingip_port_forwarding', - self.target)) - self.assertTrue( - policy.enforce(self.context, - 'update_floatingip_port_forwarding', - self.alt_target)) + with mock.patch.object(self.plugin_mock, 'get_floatingip', + return_value=self.fip): + self.assertTrue( + policy.enforce(self.context, + 'update_floatingip_port_forwarding', + self.target)) + with mock.patch.object(self.plugin_mock, 'get_floatingip', + return_value=self.alt_fip): + self.assertTrue( + policy.enforce(self.context, + 'update_floatingip_port_forwarding', + self.alt_target)) def test_delete_fip_pf(self): - self.assertTrue( - policy.enforce(self.context, - 'delete_floatingip_port_forwarding', - self.target)) - self.assertTrue( - policy.enforce(self.context, - 'delete_floatingip_port_forwarding', - self.alt_target)) + with mock.patch.object(self.plugin_mock, 'get_floatingip', + return_value=self.fip): + self.assertTrue( + policy.enforce(self.context, + 'delete_floatingip_port_forwarding', + self.target)) + with mock.patch.object(self.plugin_mock, 'get_floatingip', + return_value=self.alt_fip): + self.assertTrue( + policy.enforce(self.context, + 'delete_floatingip_port_forwarding', + self.alt_target)) class ProjectMemberTests(AdminTests): @@ -169,48 +204,64 @@ class ProjectMemberTests(AdminTests): self.context = self.project_member_ctx def test_create_fip_pf(self): - self.assertTrue( - policy.enforce(self.context, - 'create_floatingip_port_forwarding', - self.target)) - self.assertRaises( - base_policy.PolicyNotAuthorized, - policy.enforce, - self.context, 'create_floatingip_port_forwarding', - self.alt_target) + with mock.patch.object(self.plugin_mock, 'get_floatingip', + return_value=self.fip): + self.assertTrue( + policy.enforce(self.context, + 'create_floatingip_port_forwarding', + self.target)) + with mock.patch.object(self.plugin_mock, 'get_floatingip', + return_value=self.alt_fip): + self.assertRaises( + base_policy.PolicyNotAuthorized, + policy.enforce, + self.context, 'create_floatingip_port_forwarding', + self.alt_target) def test_get_fip_pf(self): - self.assertTrue( - policy.enforce(self.context, - 'get_floatingip_port_forwarding', - self.target)) - self.assertRaises( - base_policy.PolicyNotAuthorized, - policy.enforce, - self.context, 'get_floatingip_port_forwarding', - self.alt_target) + with mock.patch.object(self.plugin_mock, 'get_floatingip', + return_value=self.fip): + self.assertTrue( + policy.enforce(self.context, + 'get_floatingip_port_forwarding', + self.target)) + with mock.patch.object(self.plugin_mock, 'get_floatingip', + return_value=self.alt_fip): + self.assertRaises( + base_policy.PolicyNotAuthorized, + policy.enforce, + self.context, 'get_floatingip_port_forwarding', + self.alt_target) def test_update_fip_pf(self): - self.assertTrue( - policy.enforce(self.context, - 'update_floatingip_port_forwarding', - self.target)) - self.assertRaises( - base_policy.PolicyNotAuthorized, - policy.enforce, - self.context, 'update_floatingip_port_forwarding', - self.alt_target) + with mock.patch.object(self.plugin_mock, 'get_floatingip', + return_value=self.fip): + self.assertTrue( + policy.enforce(self.context, + 'update_floatingip_port_forwarding', + self.target)) + with mock.patch.object(self.plugin_mock, 'get_floatingip', + return_value=self.alt_fip): + self.assertRaises( + base_policy.PolicyNotAuthorized, + policy.enforce, + self.context, 'update_floatingip_port_forwarding', + self.alt_target) def test_delete_fip_pf(self): - self.assertTrue( - policy.enforce(self.context, - 'delete_floatingip_port_forwarding', - self.target)) - self.assertRaises( - base_policy.PolicyNotAuthorized, - policy.enforce, - self.context, 'delete_floatingip_port_forwarding', - self.alt_target) + with mock.patch.object(self.plugin_mock, 'get_floatingip', + return_value=self.fip): + self.assertTrue( + policy.enforce(self.context, + 'delete_floatingip_port_forwarding', + self.target)) + with mock.patch.object(self.plugin_mock, 'get_floatingip', + return_value=self.alt_fip): + self.assertRaises( + base_policy.PolicyNotAuthorized, + policy.enforce, + self.context, 'delete_floatingip_port_forwarding', + self.alt_target) class ProjectReaderTests(ProjectMemberTests): @@ -220,37 +271,49 @@ class ProjectReaderTests(ProjectMemberTests): self.context = self.project_reader_ctx def test_create_fip_pf(self): - self.assertRaises( - base_policy.PolicyNotAuthorized, - policy.enforce, - self.context, 'create_floatingip_port_forwarding', - self.target) - self.assertRaises( - base_policy.PolicyNotAuthorized, - policy.enforce, - self.context, 'create_floatingip_port_forwarding', - self.alt_target) + with mock.patch.object(self.plugin_mock, 'get_floatingip', + return_value=self.fip): + self.assertRaises( + base_policy.PolicyNotAuthorized, + policy.enforce, + self.context, 'create_floatingip_port_forwarding', + self.target) + with mock.patch.object(self.plugin_mock, 'get_floatingip', + return_value=self.alt_fip): + self.assertRaises( + base_policy.PolicyNotAuthorized, + policy.enforce, + self.context, 'create_floatingip_port_forwarding', + self.alt_target) def test_update_fip_pf(self): - self.assertRaises( - base_policy.PolicyNotAuthorized, - policy.enforce, - self.context, 'update_floatingip_port_forwarding', - self.target) - self.assertRaises( - base_policy.PolicyNotAuthorized, - policy.enforce, - self.context, 'update_floatingip_port_forwarding', - self.alt_target) + with mock.patch.object(self.plugin_mock, 'get_floatingip', + return_value=self.fip): + self.assertRaises( + base_policy.PolicyNotAuthorized, + policy.enforce, + self.context, 'update_floatingip_port_forwarding', + self.target) + with mock.patch.object(self.plugin_mock, 'get_floatingip', + return_value=self.alt_fip): + self.assertRaises( + base_policy.PolicyNotAuthorized, + policy.enforce, + self.context, 'update_floatingip_port_forwarding', + self.alt_target) def test_delete_fip_pf(self): - self.assertRaises( - base_policy.PolicyNotAuthorized, - policy.enforce, - self.context, 'delete_floatingip_port_forwarding', - self.target) - self.assertRaises( - base_policy.PolicyNotAuthorized, - policy.enforce, - self.context, 'delete_floatingip_port_forwarding', - self.alt_target) + with mock.patch.object(self.plugin_mock, 'get_floatingip', + return_value=self.fip): + self.assertRaises( + base_policy.PolicyNotAuthorized, + policy.enforce, + self.context, 'delete_floatingip_port_forwarding', + self.target) + with mock.patch.object(self.plugin_mock, 'get_floatingip', + return_value=self.alt_fip): + self.assertRaises( + base_policy.PolicyNotAuthorized, + policy.enforce, + self.context, 'delete_floatingip_port_forwarding', + self.alt_target) |