mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2025-02-25 18:55:28 -06:00
Test adding noaci/system permissions to privileges
Part of the work for: https://fedorahosted.org/freeipa/ticket/4034
This commit is contained in:
parent
d38748d64f
commit
423bb38965
@ -2054,6 +2054,27 @@ def _make_permission_flag_tests(flags, expected_message):
|
|||||||
expected=errors.ACIError(info=expected_message),
|
expected=errors.ACIError(info=expected_message),
|
||||||
),
|
),
|
||||||
|
|
||||||
|
dict(
|
||||||
|
desc='Add %r to %r' % (permission1, privilege1),
|
||||||
|
command=('privilege_add_permission', [privilege1],
|
||||||
|
{'permission': permission1}),
|
||||||
|
expected=dict(
|
||||||
|
completed=1,
|
||||||
|
failed=dict(
|
||||||
|
member=dict(
|
||||||
|
permission=[],
|
||||||
|
),
|
||||||
|
),
|
||||||
|
result={
|
||||||
|
'dn': privilege1_dn,
|
||||||
|
'cn': [privilege1],
|
||||||
|
'description': [u'privilege desc. 1'],
|
||||||
|
'memberof_permission': [permission1],
|
||||||
|
'objectclass': objectclasses.privilege,
|
||||||
|
}
|
||||||
|
),
|
||||||
|
),
|
||||||
|
|
||||||
dict(
|
dict(
|
||||||
desc='Delete %r with --force' % permission1,
|
desc='Delete %r with --force' % permission1,
|
||||||
command=('permission_del', [permission1], {'force': True}),
|
command=('permission_del', [permission1], {'force': True}),
|
||||||
@ -2070,9 +2091,28 @@ class test_permission_flags(Declarative):
|
|||||||
"""Test that permission flags are handled correctly"""
|
"""Test that permission flags are handled correctly"""
|
||||||
cleanup_commands = [
|
cleanup_commands = [
|
||||||
('permission_del', [permission1], {'force': True}),
|
('permission_del', [permission1], {'force': True}),
|
||||||
|
('privilege_del', [privilege1], {}),
|
||||||
]
|
]
|
||||||
|
|
||||||
tests = (
|
tests = [
|
||||||
|
dict(
|
||||||
|
desc='Create %r' % privilege1,
|
||||||
|
command=('privilege_add', [privilege1],
|
||||||
|
dict(description=u'privilege desc. 1')
|
||||||
|
),
|
||||||
|
expected=dict(
|
||||||
|
value=privilege1,
|
||||||
|
summary=u'Added privilege "%s"' % privilege1,
|
||||||
|
result=dict(
|
||||||
|
dn=privilege1_dn,
|
||||||
|
cn=[privilege1],
|
||||||
|
description=[u'privilege desc. 1'],
|
||||||
|
objectclass=objectclasses.privilege,
|
||||||
|
),
|
||||||
|
),
|
||||||
|
),
|
||||||
|
|
||||||
|
] + (
|
||||||
_make_permission_flag_tests(
|
_make_permission_flag_tests(
|
||||||
[u'SYSTEM'],
|
[u'SYSTEM'],
|
||||||
'A SYSTEM permission may not be modified or removed') +
|
'A SYSTEM permission may not be modified or removed') +
|
||||||
|
Loading…
Reference in New Issue
Block a user