Nexus3011DeletePrivilegeIT.java

/**
 * Copyright (c) 2008-2011 Sonatype, Inc.
 * All rights reserved. Includes the third-party code listed at http://www.sonatype.com/products/nexus/attributions.
 *
 * This program is free software: you can redistribute it and/or modify it only under the terms of the GNU Affero General
 * Public License Version 3 as published by the Free Software Foundation.
 *
 * This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied
 * warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU Affero General Public License Version 3
 * for more details.
 *
 * You should have received a copy of the GNU Affero General Public License Version 3 along with this program.  If not, see
 * http://www.gnu.org/licenses.
 *
 * Sonatype Nexus (TM) Open Source Version is available from Sonatype, Inc. Sonatype and Sonatype Nexus are trademarks of
 * Sonatype, Inc. Apache Maven is a trademark of the Apache Foundation. M2Eclipse is a trademark of the Eclipse Foundation.
 * All other trademarks are the property of their respective owners.
 */
package org.sonatype.nexus.integrationtests.nexus3011;

import static org.hamcrest.CoreMatchers.not;
import static org.hamcrest.collection.IsCollectionContaining.hasItems;
import static org.sonatype.nexus.integrationtests.ITGroups.SECURITY;

import org.hamcrest.MatcherAssert;
import org.restlet.data.MediaType;
import org.sonatype.nexus.integrationtests.AbstractNexusIntegrationTest;
import org.sonatype.nexus.test.utils.PrivilegesMessageUtil;
import org.sonatype.nexus.test.utils.RoleMessageUtil;
import org.sonatype.nexus.test.utils.XStreamFactory;
import org.sonatype.security.rest.model.RoleResource;
import org.testng.Assert;
import org.testng.annotations.Test;

public class Nexus3011DeletePrivilegeIT
    extends AbstractNexusIntegrationTest
{

    private static final String ROLE_ID = "nexus3011-role";

    private PrivilegesMessageUtil privUtil = new PrivilegesMessageUtil( this, XStreamFactory.getXmlXStream(),
                                                                        MediaType.APPLICATION_XML );

    private RoleMessageUtil roleUtil = new RoleMessageUtil( this, XStreamFactory.getXmlXStream(),
                                                            MediaType.APPLICATION_XML );

    private static final String READ_PRIV_ID = "999a27d0bf1";

    private static final String CREATE_PRIV_ID = "999a15cfb91";

    private static final String UPDATE_PRIV_ID = "999a2d10b38";

    private static final String DELETE_PRIV_ID = "999a35c0ab5";

    private static final String[] PRIVS = new String[] { READ_PRIV_ID, CREATE_PRIV_ID, UPDATE_PRIV_ID, DELETE_PRIV_ID };

    @Test(groups = SECURITY)
    public void deletePriv()
        throws Exception
    {
        RoleResource role = roleUtil.getRole( ROLE_ID );
        Assert.assertNotNull( role );
        MatcherAssert.assertThat( role.getPrivileges(), hasItems( PRIVS ) );
        privUtil.assertExists( PRIVS );

        // remove read
        Assert.assertTrue( privUtil.delete( READ_PRIV_ID ).getStatus().isSuccess() );
        role = roleUtil.getRole( ROLE_ID );
        MatcherAssert.assertThat( role.getPrivileges(), not( hasItems( READ_PRIV_ID ) ) );
        MatcherAssert.assertThat( role.getPrivileges(), hasItems( CREATE_PRIV_ID, UPDATE_PRIV_ID, DELETE_PRIV_ID ) );

        // remove create
        Assert.assertTrue( privUtil.delete( CREATE_PRIV_ID ).getStatus().isSuccess() );
        role = roleUtil.getRole( ROLE_ID );
        MatcherAssert.assertThat( role.getPrivileges(), not( hasItems( READ_PRIV_ID, CREATE_PRIV_ID ) ) );
        MatcherAssert.assertThat( role.getPrivileges(), hasItems( UPDATE_PRIV_ID, DELETE_PRIV_ID ) );

        // remove update
        Assert.assertTrue( privUtil.delete( UPDATE_PRIV_ID ).getStatus().isSuccess() );
        role = roleUtil.getRole( ROLE_ID );
        MatcherAssert.assertThat( role.getPrivileges(), not( hasItems( READ_PRIV_ID, CREATE_PRIV_ID, UPDATE_PRIV_ID ) ) );
        MatcherAssert.assertThat( role.getPrivileges(), hasItems( DELETE_PRIV_ID ) );

        // remove delete
        Assert.assertTrue( privUtil.delete( DELETE_PRIV_ID ).getStatus().isSuccess() );
        role = roleUtil.getRole( ROLE_ID );
        MatcherAssert.assertThat( role.getPrivileges(),
                           not( hasItems( READ_PRIV_ID, CREATE_PRIV_ID, UPDATE_PRIV_ID, DELETE_PRIV_ID ) ) );
        Assert.assertTrue( role.getPrivileges().isEmpty() );

        privUtil.assertNotExists( PRIVS );
    }
}