|
|
# Copyright (C) 2010-2024 RhodeCode GmbH
|
|
|
#
|
|
|
# This program is free software: you can redistribute it and/or modify
|
|
|
# it under the terms of the GNU Affero General Public License, version 3
|
|
|
# (only), as published by the Free Software Foundation.
|
|
|
#
|
|
|
# This program is distributed in the hope that it will be useful,
|
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
|
# GNU General Public License for more details.
|
|
|
#
|
|
|
# You should have received a copy of the GNU Affero General Public License
|
|
|
# along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
|
#
|
|
|
# This program is dual-licensed. If you wish to learn more about the
|
|
|
# RhodeCode Enterprise Edition, including its added features, Support services,
|
|
|
# and proprietary license terms, please see https://rhodecode.com/licenses/
|
|
|
|
|
|
from rhodecode.lib.auth import AuthUser
|
|
|
from rhodecode.model.db import RepoGroup, Repository, User
|
|
|
from rhodecode.model.meta import Session
|
|
|
from rhodecode.model.repo_group import RepoGroupModel
|
|
|
from rhodecode.model.repo import RepoModel
|
|
|
from rhodecode.model.user import UserModel
|
|
|
from rhodecode.tests.fixture import Fixture
|
|
|
|
|
|
|
|
|
fixture = Fixture()
|
|
|
|
|
|
|
|
|
def _destroy_project_tree(test_u1_id):
|
|
|
Session.remove()
|
|
|
repo_group = RepoGroup.get_by_group_name(group_name='g0')
|
|
|
for el in reversed(repo_group.recursive_groups_and_repos()):
|
|
|
if isinstance(el, Repository):
|
|
|
RepoModel().delete(el)
|
|
|
elif isinstance(el, RepoGroup):
|
|
|
RepoGroupModel().delete(el, force_delete=True)
|
|
|
|
|
|
u = User.get(test_u1_id)
|
|
|
Session().delete(u)
|
|
|
Session().commit()
|
|
|
|
|
|
|
|
|
def _create_project_tree():
|
|
|
"""
|
|
|
Creates a tree of groups and repositories to test permissions
|
|
|
|
|
|
structure
|
|
|
[g0] - group `g0` with 3 subgroups
|
|
|
|
|
|
|
|__[g0_1] group g0_1 with 2 groups 0 repos
|
|
|
| |
|
|
|
| |__[g0_1_1] group g0_1_1 with 1 group 2 repos
|
|
|
| | |__<g0/g0_1/g0_1_1/g0_1_1_r1>
|
|
|
| | |__<g0/g0_1/g0_1_1/g0_1_1_r2>
|
|
|
| |__<g0/g0_1/g0_1_r1>
|
|
|
|
|
|
|
|__[g0_2] 2 repos
|
|
|
| |
|
|
|
| |__<g0/g0_2/g0_2_r1>
|
|
|
| |__<g0/g0_2/g0_2_r2>
|
|
|
|
|
|
|
|__[g0_3] 1 repo
|
|
|
|
|
|
|
|_<g0/g0_3/g0_3_r1>
|
|
|
|_<g0/g0_3/g0_3_r2_private>
|
|
|
|
|
|
"""
|
|
|
test_u1 = UserModel().create_or_update(
|
|
|
username='test_u1', password='qweqwe',
|
|
|
email='test_u1@rhodecode.org', firstname='test_u1',
|
|
|
lastname='test_u1')
|
|
|
|
|
|
fixture.create_repo_group('g0')
|
|
|
g0_1 = fixture.create_repo_group('g0/g0_1')
|
|
|
g0_1_1 = fixture.create_repo_group('g0/g0_1/g0_1_1')
|
|
|
fixture.create_repo('g0/g0_1/g0_1_1/g0_1_1_r1', repo_group=g0_1_1)
|
|
|
fixture.create_repo('g0/g0_1/g0_1_1/g0_1_1_r2', repo_group=g0_1_1)
|
|
|
fixture.create_repo('g0/g0_1/g0_1_r1', repo_group=g0_1)
|
|
|
g0_2 = fixture.create_repo_group('g0/g0_2')
|
|
|
fixture.create_repo('g0/g0_2/g0_2_r1', repo_group=g0_2)
|
|
|
fixture.create_repo('g0/g0_2/g0_2_r2', repo_group=g0_2)
|
|
|
g0_3 = fixture.create_repo_group('g0/g0_3')
|
|
|
fixture.create_repo('g0/g0_3/g0_3_r1', repo_group=g0_3)
|
|
|
fixture.create_repo('g0/g0_3/g0_3_r1_private', repo_group=g0_3, repo_private=True)
|
|
|
return test_u1
|
|
|
|
|
|
|
|
|
def expected_count(group_name, objects=False):
|
|
|
repo_group = RepoGroup.get_by_group_name(group_name=group_name)
|
|
|
objs = repo_group.recursive_groups_and_repos()
|
|
|
if objects:
|
|
|
return objs
|
|
|
return len(objs)
|
|
|
|
|
|
|
|
|
def _check_expected_count(items, repo_items, expected):
|
|
|
should_be = len(items + repo_items)
|
|
|
there_are = len(expected)
|
|
|
assert should_be == there_are, f'{(items + repo_items)} != {expected}'
|
|
|
|
|
|
|
|
|
def check_tree_perms(obj_name, repo_perm, prefix, expected_perm, default_user=False):
|
|
|
if 'r1_private' in obj_name and default_user:
|
|
|
# private repo must be private even if "recursive" permissions apply
|
|
|
expected_perm = 'repository.none'
|
|
|
assert repo_perm == expected_perm, f'obj:`{obj_name}` got perm:`{repo_perm}` should:`{expected_perm}`'
|
|
|
|
|
|
|
|
|
def _get_perms(filter_='', recursive=None, key=None, test_u1_id=None):
|
|
|
test_u1 = AuthUser(user_id=test_u1_id)
|
|
|
for k, v in test_u1.permissions[key].items():
|
|
|
if recursive in ['all', 'repos', 'groups'] and k.startswith(filter_):
|
|
|
yield k, v
|
|
|
elif recursive in ['none']:
|
|
|
if k == filter_:
|
|
|
yield k, v
|
|
|
|
