Merge "Add test for enforce with rule doesn't exist"

1 files changed, 10 insertions, 0 deletions

diff --git a/oslo_policy/tests/test_policy.py b/oslo_policy/tests/test_policy.py
index 52a793c..ccfcdf5 100644
--- a/oslo_policy/tests/test_policy.py
+++ b/oslo_policy/tests/test_policy.py
@@ -481,6 +481,16 @@ class CheckFunctionTestCase(base.PolicyBaseTestCase):
 
         self.assertEqual(('target', 'creds', self.enforcer), result)
 
+    def test_check_rule_not_exist_not_empty_policy_file(self):
+        # If the rule doesn't exist, then enforce() fails rather than KeyError.
+
+        # This test needs a non-empty file otherwise the code short-circuits.
+        self.create_config_file('policy.json', jsonutils.dumps({"a_rule": []}))
+        self.enforcer.default_rule = None
+        self.enforcer.load_rules()
+        result = self.enforcer.enforce('rule', 'target', 'creds')
+        self.assertFalse(result)
+
     def test_check_raise_default(self):
         # When do_raise=True and exc is not used then PolicyNotAuthorized is
         # raised.