(t *testing.T)
| 186 | } |
| 187 | |
| 188 | func TestNotUsedRBACModelInMemory(t *testing.T) { |
| 189 | m := model.NewModel() |
| 190 | m.AddDef("r", "r", "sub, obj, act") |
| 191 | m.AddDef("p", "p", "sub, obj, act") |
| 192 | m.AddDef("g", "g", "_, _") |
| 193 | m.AddDef("e", "e", "some(where (p.eft == allow))") |
| 194 | m.AddDef("m", "m", "g(r.sub, p.sub) && r.obj == p.obj && r.act == p.act") |
| 195 | |
| 196 | e, _ := NewEnforcer(m) |
| 197 | |
| 198 | _, _ = e.AddPermissionForUser("alice", "data1", "read") |
| 199 | _, _ = e.AddPermissionForUser("bob", "data2", "write") |
| 200 | |
| 201 | testEnforce(t, e, "alice", "data1", "read", true) |
| 202 | testEnforce(t, e, "alice", "data1", "write", false) |
| 203 | testEnforce(t, e, "alice", "data2", "read", false) |
| 204 | testEnforce(t, e, "alice", "data2", "write", false) |
| 205 | testEnforce(t, e, "bob", "data1", "read", false) |
| 206 | testEnforce(t, e, "bob", "data1", "write", false) |
| 207 | testEnforce(t, e, "bob", "data2", "read", false) |
| 208 | testEnforce(t, e, "bob", "data2", "write", true) |
| 209 | } |
| 210 | |
| 211 | func TestMatcherUsingInOperator(t *testing.T) { |
| 212 | // From file config |
nothing calls this directly
no test coverage detected
searching dependent graphs…