Author: sohil.shah(a)jboss.com Date: 2009-05-15 16:37:32 -0400 (Fri, 15 May 2009) New Revision: 13379 Modified: modules/authorization/trunk/policy-server/src/test/java/org/jboss/security/authz/policy/server/TestImpliesHierarchialPropagation.java Log: testing implies function integrated with hierarchial tree of resources Modified: modules/authorization/trunk/policy-server/src/test/java/org/jboss/security/authz/policy/server/TestImpliesHierarchialPropagation.java =================================================================== --- modules/authorization/trunk/policy-server/src/test/java/org/jboss/security/authz/policy/server/TestImpliesHierarchialPropagation.java 2009-05-15 20:20:17 UTC (rev 13378) +++ modules/authorization/trunk/policy-server/src/test/java/org/jboss/security/authz/policy/server/TestImpliesHierarchialPropagation.java 2009-05-15 20:37:32 UTC (rev 13379) @@ -32,7 +32,6 @@ import org.jboss.security.authz.components.resource.URIResource; import org.jboss.security.authz.components.subject.Roles; -import org.jboss.security.authz.components.action.Operation; import org.jboss.security.authz.components.action.Read; import org.jboss.security.authz.components.action.Write; import org.jboss.security.authz.components.action.Manage; @@ -60,12 +59,12 @@ { } - public void testExplicitPermit() throws Exception + public void testExplicitPermitReadImpliedWithWrite() throws Exception { //SetUp Resource URIResource resource = new URIResource(); resource.setUri(new URI("/root/level1/level2/index.html")); - resource.setOperation(new Read()); + resource.setOperation(new Write()); resource.addAllowed("user"); //Provision the new policy @@ -81,13 +80,13 @@ this.enforce(this.createRequest(contextResource), true); } - /*public void testExplicitDeny() throws Exception + public void testExplicitDenyWriteNotImpliedWithRead() throws Exception { //SetUp Resource URIResource resource = new URIResource(); resource.setUri(new URI("/root/level1/level2/index.html")); resource.setOperation(new Read()); - resource.addDenied("user"); + resource.addAllowed("user"); //Provision the new policy PolicyMetaData metadata = resource.getPolicyMetaData(); @@ -96,18 +95,18 @@ //Go ahead and produce a RequestContext for a "Permit" Enforcement URIResource contextResource = new URIResource(); contextResource.setUri(new URI("/root/level1/level2/index.html")); - contextResource.setOperation(new Read()); + contextResource.setOperation(new Write()); //Perform enforcement this.enforce(this.createRequest(contextResource), false); } - public void testPermitInheritance() throws Exception + public void testPermitInheritanceWriteImpliedWithManage() throws Exception { //SetUp Resource URIResource resource = new URIResource(); resource.setUri(new URI("/root/level1")); - resource.setOperation(new Read()); + resource.setOperation(new Manage()); resource.addAllowed("user"); //Provision the new policy @@ -117,19 +116,19 @@ //Go ahead and produce a RequestContext for a "Permit" Enforcement URIResource contextResource = new URIResource(); contextResource.setUri(new URI("/root/level1/level2/index.html")); - contextResource.setOperation(new Read()); + contextResource.setOperation(new Write()); //Perform enforcement this.enforce(this.createRequest(contextResource), true); } - public void testDenyInheritance() throws Exception + public void testDenyInheritanceManageNotImpliedWithWrite() throws Exception { //SetUp Resource URIResource resource = new URIResource(); resource.setUri(new URI("/root/level1")); - resource.setOperation(new Read()); - resource.addDenied("user"); + resource.setOperation(new Write()); + resource.addAllowed("user"); //Provision the new policy PolicyMetaData metadata = resource.getPolicyMetaData(); @@ -138,7 +137,7 @@ //Go ahead and produce a RequestContext for a "Permit" Enforcement URIResource contextResource = new URIResource(); contextResource.setUri(new URI("/root/level1/level2/index.html")); - contextResource.setOperation(new Read()); + contextResource.setOperation(new Manage()); //Perform enforcement this.enforce(this.createRequest(contextResource), false); @@ -146,55 +145,35 @@ public void testDenyOverridesPermitInheritance() throws Exception { - //SetUp Permit policy + //SetUp Permit policy...User can write to level1 URIResource resource = new URIResource(); resource.setUri(new URI("/root/level1")); - resource.setOperation(new Read()); + resource.setOperation(new Write()); resource.addAllowed("user"); //Provision the new policy PolicyMetaData metadata = resource.getPolicyMetaData(); policyServer.newPolicy(metadata); - //Setup denied policy + //Setup denied policy....User can only read level2 resource = new URIResource(); resource.setUri(new URI("/root/level1/level2")); resource.setOperation(new Read()); - resource.addDenied("user"); + resource.addAllowed("user"); //Provision the new policy metadata = resource.getPolicyMetaData(); policyServer.newPolicy(metadata); //Go ahead and produce a RequestContext for a "Permit" Enforcement + //Trying to "Write" to level2 should be Denied URIResource contextResource = new URIResource(); contextResource.setUri(new URI("/root/level1/level2/index.html")); - contextResource.setOperation(new Read()); + contextResource.setOperation(new Write()); //Perform enforcement this.enforce(this.createRequest(contextResource), false); - } - - public void testNotApplicable() throws Exception - { - //SetUp Resource - URIResource resource = new URIResource(); - resource.setUri(new URI("/root2")); - resource.setOperation(new Read()); - resource.addAllowed("user"); - - //Provision the new policy - PolicyMetaData metadata = resource.getPolicyMetaData(); - policyServer.newPolicy(metadata); - - //Go ahead and produce a RequestContext for a "Permit" Enforcement - URIResource contextResource = new URIResource(); - contextResource.setUri(new URI("/root/level1/level2/index.html")); - contextResource.setOperation(new Read()); - - //Perform enforcement - this.enforce(this.createRequest(contextResource), false); - }*/ + } //------------------------------------------------------------------------------------------------------------------------------------------------------ private Request createRequest(URIResource uriResource) throws Exception {