Matheus Macabu
88 lines
2.5 KiB
Go
88 lines
2.5 KiB
Go
package investigations
|
|
|
|
import (
|
|
"context"
|
|
"testing"
|
|
|
|
"github.com/grafana/grafana/pkg/apimachinery/identity"
|
|
"github.com/grafana/grafana/pkg/services/accesscontrol"
|
|
"github.com/stretchr/testify/assert"
|
|
"k8s.io/apiserver/pkg/authorization/authorizer"
|
|
)
|
|
|
|
func TestGetAuthorizer(t *testing.T) {
|
|
tests := []struct {
|
|
name string
|
|
ctx context.Context
|
|
attr authorizer.Attributes
|
|
expectedDecision authorizer.Decision
|
|
expectedReason string
|
|
expectedErr error
|
|
}{
|
|
{
|
|
name: "non-resource request",
|
|
ctx: context.TODO(),
|
|
attr: &mockAttributes{resourceRequest: false},
|
|
expectedDecision: authorizer.DecisionNoOpinion,
|
|
expectedReason: "",
|
|
expectedErr: nil,
|
|
},
|
|
{
|
|
name: "user has datasources:explore permission",
|
|
ctx: identity.WithRequester(context.TODO(), &mockUser{permissions: map[string][]string{accesscontrol.ActionDatasourcesExplore: {}}}),
|
|
attr: &mockAttributes{resourceRequest: true},
|
|
expectedDecision: authorizer.DecisionAllow,
|
|
expectedReason: "",
|
|
expectedErr: nil,
|
|
},
|
|
{
|
|
name: "user does not have datasources:explore permission",
|
|
ctx: identity.WithRequester(context.TODO(), &mockUser{}),
|
|
attr: &mockAttributes{resourceRequest: true},
|
|
expectedDecision: authorizer.DecisionDeny,
|
|
expectedReason: "no permissions",
|
|
expectedErr: nil,
|
|
},
|
|
{
|
|
name: "user does not have datasources:explore permission",
|
|
ctx: identity.WithRequester(context.TODO(), &mockUser{permissions: map[string][]string{"foo": {}}}),
|
|
attr: &mockAttributes{resourceRequest: true},
|
|
expectedDecision: authorizer.DecisionNoOpinion,
|
|
expectedReason: "",
|
|
expectedErr: nil,
|
|
},
|
|
}
|
|
|
|
for _, tt := range tests {
|
|
t.Run(tt.name, func(t *testing.T) {
|
|
auth := GetAuthorizer()
|
|
decision, reason, err := auth.Authorize(tt.ctx, tt.attr)
|
|
assert.Equal(t, tt.expectedDecision, decision)
|
|
assert.Equal(t, tt.expectedReason, reason)
|
|
assert.Equal(t, tt.expectedErr, err)
|
|
})
|
|
}
|
|
}
|
|
|
|
type mockAttributes struct {
|
|
authorizer.Attributes
|
|
resourceRequest bool
|
|
}
|
|
|
|
func (m *mockAttributes) IsResourceRequest() bool {
|
|
return m.resourceRequest
|
|
}
|
|
|
|
// Implement other methods of authorizer.Attributes as needed
|
|
|
|
type mockUser struct {
|
|
identity.Requester
|
|
permissions map[string][]string
|
|
}
|
|
|
|
func (m *mockUser) GetPermissions() map[string][]string {
|
|
return m.permissions
|
|
}
|
|
|
|
// Implement other methods of identity.Requester as needed
|