/* * JBoss, Home of Professional Open Source * * Copyright 2013 Red Hat, Inc. and/or its affiliates. * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ package org.picketlink.test.idm.relationship; import org.junit.Test; import org.picketlink.idm.RelationshipManager; import org.picketlink.idm.model.Account; import org.picketlink.idm.model.Partition; import org.picketlink.idm.model.basic.BasicModel; import org.picketlink.idm.model.basic.Group; import org.picketlink.idm.model.basic.Role; import org.picketlink.idm.model.basic.User; import org.picketlink.test.idm.Configuration; import org.picketlink.test.idm.testers.FileStoreConfigurationTester; import org.picketlink.test.idm.testers.IdentityConfigurationTester; import org.picketlink.test.idm.testers.JPAStoreConfigurationTester; import org.picketlink.test.idm.testers.LDAPStoreConfigurationTester; import org.picketlink.test.idm.testers.LDAPUserGroupJPARoleConfigurationTester; import org.picketlink.test.idm.testers.SingleConfigLDAPJPAStoreConfigurationTester; import static junit.framework.Assert.assertFalse; import static junit.framework.Assert.assertTrue; /** * <p> * Test case for the relationship between {@link User} and {@link Role} types. * * @author <a href="mailto:psilva@redhat.com">Pedro Silva</a> * */ @Configuration(include= {JPAStoreConfigurationTester.class, FileStoreConfigurationTester.class, LDAPStoreConfigurationTester.class, SingleConfigLDAPJPAStoreConfigurationTester.class, LDAPUserGroupJPARoleConfigurationTester.class}) public class UserGrantRelationshipTestCase extends AbstractGrantRelationshipTestCase<User> { public UserGrantRelationshipTestCase(IdentityConfigurationTester builder) { super(builder); } @Override protected User createIdentityType(String name) { return createIdentityType(name, null); } /** * <p> * Tests if roles are inherited from groups. * </p> * * @throws Exception */ @Test public void testInheritedRolesFromGroup() throws Exception { User someUser = createIdentityType("someUser"); Role someRole = createRole("someRole"); Group someGroup = createGroup("someGroup"); Group someAnotherGroup = createGroup("someAnotherGroup"); RelationshipManager relationshipManager = getPartitionManager().createRelationshipManager(); BasicModel.addToGroup(relationshipManager, someUser, someGroup); BasicModel.addToGroup(relationshipManager, someUser, someAnotherGroup); assertTrue(BasicModel.isMember(relationshipManager, someUser, someGroup)); assertTrue(BasicModel.isMember(relationshipManager, someUser, someAnotherGroup)); assertFalse(BasicModel.hasRole(relationshipManager, someGroup, someRole)); assertFalse(BasicModel.hasRole(relationshipManager, someAnotherGroup, someRole)); assertFalse(BasicModel.hasRole(relationshipManager, someUser, someRole)); BasicModel.grantRole(relationshipManager, someGroup, someRole); assertTrue(BasicModel.hasRole(relationshipManager, someGroup, someRole)); assertTrue(BasicModel.hasRole(relationshipManager, someUser, someRole)); assertFalse(BasicModel.hasRole(relationshipManager, someAnotherGroup, someRole)); BasicModel.removeFromGroup(relationshipManager, someUser, someGroup); assertFalse(BasicModel.hasRole(relationshipManager, someUser, someRole)); BasicModel.grantRole(relationshipManager, someAnotherGroup, someRole); assertTrue(BasicModel.hasRole(relationshipManager, someUser, someRole)); BasicModel.revokeRole(relationshipManager, someAnotherGroup, someRole); assertFalse(BasicModel.hasRole(relationshipManager, someAnotherGroup, someRole)); assertFalse(BasicModel.hasRole(relationshipManager, someUser, someRole)); } @Override protected User createIdentityType(String name, Partition partition) { if (name == null) { name = "someUser"; } if (partition != null) { return createUser(name, partition); } else { return createUser(name); } } @Override protected User getIdentityType() { return getUser("someUser"); } }