4d458c4f8c
Also refactored & did some cleanup in the code Signed-off-by: Benjamin Perez <benjamin@bexsoft.net> Co-authored-by: Benjamin Perez <benjamin@bexsoft.net> Co-authored-by: Daniel Valdivia <18384552+dvaldivia@users.noreply.github.com>
119 lines
2.3 KiB
Go
119 lines
2.3 KiB
Go
// This file is part of MinIO Console Server
|
|
// Copyright (c) 2021 MinIO, Inc.
|
|
//
|
|
// This program is free software: you can redistribute it and/or modify
|
|
// it under the terms of the GNU Affero General Public License as published by
|
|
// the Free Software Foundation, either version 3 of the License, or
|
|
// (at your option) any later version.
|
|
//
|
|
// This program is distributed in the hope that it will be useful,
|
|
// but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
// GNU Affero General Public License for more details.
|
|
//
|
|
// You should have received a copy of the GNU Affero General Public License
|
|
// along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
|
|
package acl
|
|
|
|
import (
|
|
"reflect"
|
|
"testing"
|
|
)
|
|
|
|
type args struct {
|
|
actions []string
|
|
}
|
|
|
|
type endpoint struct {
|
|
name string
|
|
args args
|
|
want int
|
|
}
|
|
|
|
func validateEndpoints(t *testing.T, configs []endpoint) {
|
|
for _, tt := range configs {
|
|
t.Run(tt.name, func(t *testing.T) {
|
|
if got := GetAuthorizedEndpoints(tt.args.actions); !reflect.DeepEqual(len(got), tt.want) {
|
|
t.Errorf("GetAuthorizedEndpoints() = %v, want %v", len(got), tt.want)
|
|
}
|
|
})
|
|
}
|
|
}
|
|
|
|
func TestGetAuthorizedEndpoints(t *testing.T) {
|
|
tests := []endpoint{
|
|
{
|
|
name: "dashboard endpoint",
|
|
args: args{
|
|
[]string{"admin:ServerInfo"},
|
|
},
|
|
want: 9,
|
|
},
|
|
{
|
|
name: "policies endpoint",
|
|
args: args{
|
|
[]string{
|
|
"admin:CreatePolicy",
|
|
"admin:DeletePolicy",
|
|
"admin:GetPolicy",
|
|
"admin:AttachUserOrGroupPolicy",
|
|
"admin:ListUserPolicies",
|
|
},
|
|
},
|
|
want: 9,
|
|
},
|
|
{
|
|
name: "all admin endpoints",
|
|
args: args{
|
|
[]string{
|
|
"admin:*",
|
|
},
|
|
},
|
|
want: 29,
|
|
},
|
|
{
|
|
name: "all s3 endpoints",
|
|
args: args{
|
|
[]string{
|
|
"s3:*",
|
|
},
|
|
},
|
|
want: 9,
|
|
},
|
|
{
|
|
name: "all admin and s3 endpoints",
|
|
args: args{
|
|
[]string{
|
|
"admin:*",
|
|
"s3:*",
|
|
},
|
|
},
|
|
want: 31,
|
|
},
|
|
{
|
|
name: "Console User - default endpoints",
|
|
args: args{
|
|
[]string{},
|
|
},
|
|
want: 7,
|
|
},
|
|
}
|
|
|
|
validateEndpoints(t, tests)
|
|
}
|
|
|
|
func TestOperatorOnlyEndpoints(t *testing.T) {
|
|
operatorOnly = true
|
|
|
|
tests := []endpoint{
|
|
{
|
|
name: "Operator Only - all admin endpoints",
|
|
args: args{},
|
|
want: 17,
|
|
},
|
|
}
|
|
|
|
validateEndpoints(t, tests)
|
|
}
|