Nexus3546ValidateTransitivePrivsOnGroupsIT.java

/**
 * Copyright (c) 2008-2011 Sonatype, Inc.
 * All rights reserved. Includes the third-party code listed at http://www.sonatype.com/products/nexus/attributions.
 *
 * This program is free software: you can redistribute it and/or modify it only under the terms of the GNU Affero General
 * Public License Version 3 as published by the Free Software Foundation.
 *
 * This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied
 * warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU Affero General Public License Version 3
 * for more details.
 *
 * You should have received a copy of the GNU Affero General Public License Version 3 along with this program.  If not, see
 * http://www.gnu.org/licenses.
 *
 * Sonatype Nexus (TM) Open Source Version is available from Sonatype, Inc. Sonatype and Sonatype Nexus are trademarks of
 * Sonatype, Inc. Apache Maven is a trademark of the Apache Foundation. M2Eclipse is a trademark of the Eclipse Foundation.
 * All other trademarks are the property of their respective owners.
 */
package org.sonatype.nexus.integrationtests.nexus3546;

import java.io.File;

import org.apache.maven.index.artifact.Gav;
import org.restlet.data.Status;
import org.sonatype.nexus.integrationtests.AbstractPrivilegeTest;
import org.sonatype.nexus.integrationtests.TestContainer;
import org.sonatype.nexus.jsecurity.realms.TargetPrivilegeDescriptor;
import org.sonatype.nexus.rest.model.RepositoryGroupMemberRepository;
import org.sonatype.nexus.rest.model.RepositoryGroupResource;
import org.sonatype.nexus.test.utils.GavUtil;
import org.sonatype.nexus.test.utils.TaskScheduleUtil;
import org.testng.Assert;
import org.testng.annotations.Test;

public class Nexus3546ValidateTransitivePrivsOnGroupsIT
    extends AbstractPrivilegeTest
{
    private static final String GROUP_1_ID = "nexus3546group1";
    private static final String GROUP_2_ID = "nexus3546group2";
    
    @Test
    public void validateGroupsInGroups()
        throws Exception
    {
        Gav gav = GavUtil.newGav( "nexus3546", "artifact", "1.0.0" );
        
        prepare( gav );
        
        TestContainer.getInstance().getTestContext().setUsername( TEST_USER_NAME );
        TestContainer.getInstance().getTestContext().setPassword( TEST_USER_PASSWORD );
        
        // should be able to download from repo
        File downloaded = downloadArtifactFromRepository( REPO_TEST_HARNESS_RELEASE_REPO, gav, "./target/downloaded-jars/from-repo" );
        Assert.assertTrue( downloaded.exists() );
        
        // and parent group of repo
        downloaded = downloadArtifactFromGroup( GROUP_1_ID, gav, "./target/downloaded-jars/from-group-1" );
        Assert.assertTrue( downloaded.exists() );
        
        // and parent group of group
        downloaded = downloadArtifactFromGroup( GROUP_2_ID, gav, "./target/downloaded-jars/from-group-2" );
        
        Assert.assertTrue( downloaded.exists() );
    }
    
    private void prepare( Gav gav ) 
        throws Exception
    {        
        //use admin for this part
        TestContainer.getInstance().getTestContext().useAdminForRequests();
        
        File artifact = getTestFile( "artifact.jar" );

        int code = getDeployUtils().deployUsingGavWithRest( REPO_TEST_HARNESS_RELEASE_REPO, gav, artifact );
        Assert.assertTrue( Status.isSuccess( code ), "Unable to deploy artifact " + code );
        
        //create group 1
        RepositoryGroupResource group = new RepositoryGroupResource();
        group.setId( GROUP_1_ID );
        group.setFormat( "maven2" );
        group.setProvider( "maven2" );
        group.setName( GROUP_1_ID );
        group.setExposed( true );
        RepositoryGroupMemberRepository repo = new RepositoryGroupMemberRepository();
        repo.setId( REPO_TEST_HARNESS_RELEASE_REPO );
        group.addRepository( repo );
        groupUtil.createGroup( group );
        
        TaskScheduleUtil.waitForAllTasksToStop();
        
        //create group 2
        group = new RepositoryGroupResource();
        group.setId( GROUP_2_ID );
        group.setFormat( "maven2" );
        group.setProvider( "maven2" );
        group.setName( GROUP_2_ID );
        group.setExposed( true );
        repo = new RepositoryGroupMemberRepository();
        repo.setId( GROUP_1_ID );
        group.addRepository( repo );
        groupUtil.createGroup( group );
        
        TaskScheduleUtil.waitForAllTasksToStop();
        
        resetTestUserPrivs();
        addPriv( TEST_USER_NAME, "nexus3546priv", TargetPrivilegeDescriptor.TYPE, "1", null,
                 GROUP_2_ID, "read" );
        
        TaskScheduleUtil.waitForAllTasksToStop();
    }
}