Function TestRoleInheritance

auth/auth_test.go:539–572

(t *testing.T)

}

func TestRoleInheritance(t *testing.T) {
	ctx := base.TestCtx(t)
	// Create some roles:
	bucket := base.GetTestBucket(t)
	defer bucket.Close(ctx)
	dataStore := bucket.GetSingleDataStore()
	auth := NewTestAuthenticator(t, dataStore, nil, DefaultAuthenticatorOptions(base.TestCtx(t)))
	role, err := auth.NewRole("square", ch.BaseSetOf(t, "dull", "duller", "dullest"))
	require.NoError(t, err)
	require.NoError(t, auth.Save(role))
	role, err = auth.NewRole("frood", ch.BaseSetOf(t, "hoopy", "hoopier", "hoopiest"))
	require.NoError(t, err)
	assert.Equal(t, nil, auth.Save(role))

	user, err := auth.NewUser("arthur", "password", ch.BaseSetOf(t, "britain"))
	require.NoError(t, err)
	userImpl, ok := user.(*userImpl)
	require.True(t, ok)
	// Directly set the roles, bypassing the usual SetRoles method, so we can set the "since" value:
	userImpl.setRolesSince(ch.TimedSet{"square": ch.NewVbSimpleSequence(0x3), "nonexistent": ch.NewVbSimpleSequence(0x42), "frood": ch.NewVbSimpleSequence(0x4)})
	assert.Equal(t, ch.TimedSet{"square": ch.NewVbSimpleSequence(0x3), "nonexistent": ch.NewVbSimpleSequence(0x42), "frood": ch.NewVbSimpleSequence(0x4)}, user.RoleNames())
	require.NoError(t, auth.Save(user))

	user2, err := auth.GetUser("arthur")
	require.NoError(t, err)
	log.Printf("Channels = %s", user2.Channels())
	user2Channels, err := user2.inheritedChannels()
	require.NoError(t, err)
	assert.Equal(t, ch.AtSequence(ch.BaseSetOf(t, "!", "britain"), 1), user2.Channels())
	assert.Equal(t, ch.TimedSet{"!": ch.NewVbSimpleSequence(0x1), "britain": ch.NewVbSimpleSequence(0x1), "dull": ch.NewVbSimpleSequence(0x3), "duller": ch.NewVbSimpleSequence(0x3), "dullest": ch.NewVbSimpleSequence(0x3), "hoopy": ch.NewVbSimpleSequence(0x4), "hoopier": ch.NewVbSimpleSequence(0x4), "hoopiest": ch.NewVbSimpleSequence(0x4)}, user2Channels)

	requireCanSeeChannels(t, user2, "britain", "duller", "hoopy")
	require.NoError(t, user2.authorizeAllChannels(ch.BaseSetOf(t, "britain", "dull", "hoopiest")))
}

func TestRegisterUser(t *testing.T) {
	ctx := base.TestCtx(t)