HasPermissionTest.java

/**
 * Copyright (C) 2011  JTalks.org Team
 * This library is free software; you can redistribute it and/or
 * modify it under the terms of the GNU Lesser General Public
 * License as published by the Free Software Foundation; either
 * version 2.1 of the License, or (at your option) any later version.
 * This library is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 * Lesser General Public License for more details.
 * You should have received a copy of the GNU Lesser General Public
 * License along with this library; if not, write to the Free Software
 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301  USA
 */
package org.jtalks.jcommune.web.tags;

import static org.mockito.Mockito.*;
import static org.mockito.MockitoAnnotations.initMocks;
import static org.junit.Assert.assertEquals;

import java.io.Serializable;

import javax.servlet.ServletContext;
import javax.servlet.jsp.JspException;
import javax.servlet.jsp.tagext.Tag;

import org.jtalks.common.service.security.SecurityContextFacade;
import org.junit.Before;
import org.junit.Test;
import org.mockito.Matchers;
import org.mockito.Mock;
import org.springframework.beans.BeanUtils;
import org.springframework.mock.web.MockPageContext;
import org.springframework.mock.web.MockServletContext;
import org.springframework.security.access.PermissionEvaluator;
import org.springframework.security.core.Authentication;
import org.springframework.security.core.context.SecurityContext;
import org.springframework.web.context.WebApplicationContext;
import org.springframework.web.context.support.GenericWebApplicationContext;

/**
 * @author Vyacheslav Mishcheryakov
 */
public class HasPermissionTest {

    private static final Long TARGET_ID = 1L;
    private static final String TARGET_TYPE = "BRANCH";
    private static final String PERMISSION = "PERMISSION";
    
    
    private HasPermission tag;
    
    private MockPageContext pageContext;
    
    @Mock
    private PermissionEvaluator aclEvaluator;
    
    @Mock
    private SecurityContextFacade securityContextFacade;
    
    @Mock
    private SecurityContext securityContext;
    
    @Mock
    private Authentication authentication;
    
    @Before
    public void setUp() {
        initMocks(this);
        when(securityContextFacade.getContext()).thenReturn(securityContext);
        
        ServletContext servletContext = new MockServletContext();
        GenericWebApplicationContext wac = (GenericWebApplicationContext) BeanUtils
                .instantiateClass(GenericWebApplicationContext.class);
        wac.getBeanFactory().registerSingleton("aclEvaluator", aclEvaluator);
        wac.getBeanFactory().registerSingleton("securityContextFacade", 
                securityContextFacade);
        servletContext.setAttribute(
                WebApplicationContext.ROOT_WEB_APPLICATION_CONTEXT_ATTRIBUTE, wac);
        pageContext = new MockPageContext(servletContext);
        
        tag = new HasPermission();
        
        tag.setPageContext(pageContext);
        
    }
    
    @Test(expected=JspException.class)
    public void testTargetIdNotSpecified() throws JspException {
        tag.setTargetType(TARGET_TYPE);
        tag.setPermission(PERMISSION);
        tag.doStartTag();
    }
    
    @Test(expected=JspException.class)
    public void testTargetTypeNotSpecified() throws JspException {
        tag.setTargetId(TARGET_ID);
        tag.setPermission(PERMISSION);
        tag.doStartTag();
    }
    
    @Test(expected=JspException.class)
    public void testTargetTypeBlank() throws JspException {
        tag.setTargetId(TARGET_ID);
        tag.setTargetType("");
        tag.setPermission(PERMISSION);
        tag.doStartTag();
    }
    
    @Test(expected=JspException.class)
    public void testPermissionNotSpecified() throws JspException {
        tag.setTargetId(1L);
        tag.setTargetType("BRANCH");
        tag.doStartTag();
    }
    
    @Test(expected=JspException.class)
    public void testPermissionBlank() throws JspException {
        tag.setTargetId(1L);
        tag.setTargetType("BRANCH");
        tag.setPermission("");
        tag.doStartTag();
    }
    
    @Test
    public void testHasNoPermission() throws JspException {
        when(aclEvaluator.hasPermission(
                Matchers.any(Authentication.class), 
                Matchers.any(Serializable.class), 
                Matchers.anyString(), 
                Matchers.anyString()))
                .thenReturn(false);
        tag.setTargetId(1L);
        tag.setTargetType("BRANCH");
        tag.setPermission("PERMISSION");
        
        assertEquals(tag.doStartTag(), Tag.SKIP_BODY);
    }
    
    @Test
    public void testHasPermission() throws JspException {
        when(securityContextFacade.getContext().getAuthentication()).thenReturn(authentication);
        when(aclEvaluator.hasPermission(
                Matchers.any(Authentication.class), 
                Matchers.any(Serializable.class), 
                Matchers.anyString(), 
                Matchers.anyString()))
                .thenReturn(true);
        tag.setTargetId(1L);
        tag.setTargetType("BRANCH");
        tag.setPermission("PERMISSION");
        
        assertEquals(tag.doStartTag(), Tag.EVAL_BODY_INCLUDE);
    }
    
    @Test
    public void testHasPermissionWithNullAuthentication() throws JspException {
        when(securityContextFacade.getContext().getAuthentication()).thenReturn(null);
        when(aclEvaluator.hasPermission(
                Matchers.any(Authentication.class), 
                Matchers.any(Serializable.class), 
                Matchers.anyString(), 
                Matchers.anyString()))
                .thenReturn(true);
        tag.setTargetId(1L);
        tag.setTargetType("BRANCH");
        tag.setPermission("PERMISSION");
        
        assertEquals(tag.doStartTag(), Tag.SKIP_BODY);
    }
    
}