Influxdata
/
chronograf
mirror of https://github.com/influxdata/chronograf.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

feat(server): check that enteprise db allowed permissions start all allowed permissions

pull/5921/head
Pavel Zavora 2022-05-25 16:32:03 +02:00
parent ae5cc215c3
commit 2d781fcab9
1 changed files with 39 additions and 44 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

83
enterprise/enterprise_test.go
View File

@ -202,54 +202,49 @@ func Test_Enterprise_ComplainsIfNotOpened(t *testing.T) {
}
func TestClient_Permissions(t *testing.T) {
tests := []struct {
name string
want chronograf.Permissions
}{
want := chronograf.Permissions{
{
name: "All possible enterprise permissions",
want: chronograf.Permissions{
{
Scope: chronograf.AllScope,
Allowed: chronograf.Allowances{
"NoPermissions",
"ReadData",
"WriteData",
"DropData",
"ManageContinuousQuery",
"ManageQuery",
"ManageSubscription",
"ViewAdmin",
"CreateDatabase",
"DropDatabase",
"CreateUserAndRole",
"CopyShard",
"ManageShard",
"Rebalance",
"AddRemoveNode",
"Monitor",
},
},
{
Scope: chronograf.DBScope,
Allowed: chronograf.Allowances{
"NoPermissions",
"ReadData",
"WriteData",
"DropData",
"ManageContinuousQuery",
"ManageQuery",
"ManageSubscription",
},
},
Scope: chronograf.AllScope,
Allowed: chronograf.Allowances{
"NoPermissions",
"ReadData",
"WriteData",
"DropData",
"ManageContinuousQuery",
"ManageQuery",
"ManageSubscription",
"ViewAdmin",
"CreateDatabase",
"DropDatabase",
"CreateUserAndRole",
"CopyShard",
"ManageShard",
"Rebalance",
"AddRemoveNode",
"Monitor",
},
},
{
Scope: chronograf.DBScope,
Allowed: chronograf.Allowances{
"NoPermissions",
"ReadData",
"WriteData",
"DropData",
"ManageContinuousQuery",
"ManageQuery",
"ManageSubscription",
},
},
}
for _, tt := range tests {
c := &enterprise.Client{}
if got := c.Permissions(context.Background()); !reflect.DeepEqual(got, tt.want) {
t.Errorf("%q. Client.Permissions() = %v, want %v", tt.name, got, tt.want)
c := &enterprise.Client{}
if got := c.Permissions(context.Background()); !reflect.DeepEqual(got, want) {
t.Errorf("Client.Permissions() = %v, want %v", got, want)
dbAllowed := got[1].Allowed
allCommonAllowed := got[0].Allowed[0:len(dbAllowed)]
if !reflect.DeepEqual(allCommonAllowed, dbAllowed) {
t.Errorf("Database allowed permissions do not start all allowed permissions = %v, want %v", got, want)
}
}
}