|
require 'test_helper'
|
|
|
|
class UsergroupTest < ActiveSupport::TestCase
|
|
|
|
setup do
|
|
User.current = User.find_by_login("admin")
|
|
end
|
|
|
|
test "usergroups should be creatable" do
|
|
assert FactoryGirl.build(:usergroup).valid?
|
|
end
|
|
|
|
test "name should be unique" do
|
|
one = FactoryGirl.create(:usergroup)
|
|
two = FactoryGirl.build(:usergroup, :name => one.name)
|
|
|
|
assert !two.valid?
|
|
end
|
|
|
|
test "name is unique across user as well as usergroup" do
|
|
user = User.create :auth_source => auth_sources(:one), :login => "user", :mail => "user@someware.com"
|
|
usergroup = FactoryGirl.build(:usergroup, :name => user.login)
|
|
|
|
assert !usergroup.valid?
|
|
end
|
|
|
|
def populate_usergroups
|
|
@u1 = User.find_or_create_by_login :login => "u1", :mail => "u1@someware.com", :firstname => "u1", :auth_source => auth_sources(:one)
|
|
@u2 = User.find_or_create_by_login :login => "u2", :mail => "u2@someware.com", :firstname => "u2", :auth_source => auth_sources(:one)
|
|
@u3 = User.find_or_create_by_login :login => "u3", :mail => "u3@someware.com", :firstname => "u3", :auth_source => auth_sources(:one)
|
|
@u4 = User.find_or_create_by_login :login => "u4", :mail => "u4@someware.com", :firstname => "u4", :auth_source => auth_sources(:one)
|
|
@u5 = User.find_or_create_by_login :login => "u5", :mail => "u5@someware.com", :firstname => "u5", :auth_source => auth_sources(:one)
|
|
@u6 = User.find_or_create_by_login :login => "u6", :mail => "u6@someware.com", :firstname => "u6", :auth_source => auth_sources(:one)
|
|
|
|
@ug1 = Usergroup.find_or_create_by_name :name => "ug1"
|
|
@ug2 = Usergroup.find_or_create_by_name :name => "ug2"
|
|
@ug3 = Usergroup.find_or_create_by_name :name => "ug3"
|
|
@ug4 = Usergroup.find_or_create_by_name :name => "ug4"
|
|
@ug5 = Usergroup.find_or_create_by_name :name => "ug5"
|
|
@ug6 = Usergroup.find_or_create_by_name :name => "ug6"
|
|
|
|
@ug1.users = [@u1, @u2]
|
|
@ug2.users = [@u2, @u3]
|
|
@ug3.users = [@u3, @u4]
|
|
@ug3.usergroups = [@ug1]
|
|
@ug4.usergroups = [@ug1, @ug2]
|
|
@ug5.usergroups = [@ug1, @ug3, @ug4]
|
|
@ug5.users = [@u5]
|
|
end
|
|
|
|
test "hosts should be retrieved from recursive/complex usergroup definitions" do
|
|
populate_usergroups
|
|
domain = domains(:mydomain)
|
|
disable_orchestration
|
|
|
|
Host.with_options :architecture => architectures(:x86_64), :environment => environments(:production), :operatingsystem => operatingsystems(:redhat),
|
|
:ptable => ptables(:one), :subnet => subnets(:one), :puppet_proxy => smart_proxies(:puppetmaster) do |object|
|
|
@h1 = object.find_or_create_by_name :name => "h1.someware.com", :ip => "2.3.4.10", :mac => "223344556601", :owner => @u1, :domain => domain
|
|
@h2 = object.find_or_create_by_name :name => "h2.someware.com", :ip => "2.3.4.11", :mac => "223344556602", :owner => @ug2, :domain => domain
|
|
@h3 = object.find_or_create_by_name :name => "h3.someware.com", :ip => "2.3.4.12", :mac => "223344556603", :owner => @u3, :domain => domain
|
|
@h4 = object.find_or_create_by_name :name => "h4.someware.com", :ip => "2.3.4.13", :mac => "223344556604", :owner => @ug5, :domain => domain
|
|
@h5 = object.find_or_create_by_name :name => "h5.someware.com", :ip => "2.3.4.14", :mac => "223344556605", :owner => @u2, :domain => domain
|
|
@h6 = object.find_or_create_by_name :name => "h6.someware.com", :ip => "2.3.4.15", :mac => "223344556606", :owner => @ug3, :domain => domain
|
|
end
|
|
assert_equal @u1.hosts.sort, [@h1]
|
|
assert_equal @u2.hosts.sort, [@h2, @h5]
|
|
assert_equal @u3.hosts.sort, [@h2, @h3, @h6]
|
|
assert_equal @u4.hosts.sort, [@h6]
|
|
assert_equal @u5.hosts.sort, [@h2, @h4, @h6]
|
|
assert_equal @u6.hosts.sort, []
|
|
end
|
|
|
|
test "addresses should be retrieved from recursive/complex usergroup definitions" do
|
|
populate_usergroups
|
|
|
|
assert_equal @ug1.recipients.sort, %w{u1@someware.com u2@someware.com}
|
|
assert_equal @ug2.recipients.sort, %w{u2@someware.com u3@someware.com}
|
|
assert_equal @ug3.recipients.sort, %w{u1@someware.com u2@someware.com u3@someware.com u4@someware.com}
|
|
assert_equal @ug4.recipients.sort, %w{u1@someware.com u2@someware.com u3@someware.com}
|
|
assert_equal @ug5.recipients.sort, %w{u1@someware.com u2@someware.com u3@someware.com u4@someware.com u5@someware.com}
|
|
end
|
|
|
|
test "cannot be destroyed when in use by a host" do
|
|
disable_orchestration
|
|
@ug1 = Usergroup.find_or_create_by_name :name => "ug1"
|
|
@h1 = hosts(:one)
|
|
@h1.update_attributes :owner => @ug1
|
|
@ug1.destroy
|
|
assert_equal @ug1.errors.full_messages[0], "ug1 is used by #{@h1}"
|
|
end
|
|
|
|
test "can be destroyed when in use by another usergroup, it removes association automatically" do
|
|
@ug1 = Usergroup.find_or_create_by_name :name => "ug1"
|
|
@ug2 = Usergroup.find_or_create_by_name :name => "ug2"
|
|
@ug1.usergroups = [@ug2]
|
|
assert @ug1.destroy
|
|
assert @ug2.reload
|
|
assert_empty UsergroupMember.where(:member_id => @ug2.id)
|
|
end
|
|
|
|
test "removes user join model records" do
|
|
ug1 = Usergroup.find_or_create_by_name :name => "ug1"
|
|
u1 = User.find_or_create_by_login :login => "u1", :mail => "u1@someware.com", :auth_source => auth_sources(:one)
|
|
ug1.users = [u1]
|
|
assert_difference('UsergroupMember.count', -1) do
|
|
ug1.destroy
|
|
end
|
|
end
|
|
|
|
test "removes all cached_user_roles when roles are disassociated" do
|
|
user = FactoryGirl.create(:user)
|
|
record = FactoryGirl.create(:usergroup)
|
|
record.users = [user]
|
|
one = FactoryGirl.create(:role)
|
|
two = FactoryGirl.create(:role)
|
|
|
|
record.roles = [one, two]
|
|
assert_equal 2, user.reload.cached_user_roles.size
|
|
|
|
assert record.update_attributes(:role_ids => [ two.id ])
|
|
assert_equal 1, user.reload.cached_user_roles.size
|
|
|
|
record.role_ids = [ ]
|
|
assert_equal 0, user.reload.cached_user_roles.size
|
|
|
|
assert record.update_attribute(:role_ids, [ one.id ])
|
|
assert_equal 1, user.reload.cached_user_roles.size
|
|
|
|
record.roles<< two
|
|
assert_equal 2, user.reload.cached_user_roles.size
|
|
end
|
|
|
|
# TODO test who can modify usergroup roles and who can assign users!!! possible privileges escalation
|
|
|
|
end
|
