YunoHost/yunohost
1
0
Fork 0
mirror of https://github.com/YunoHost/yunohost.git synced 2024-09-03 20:06:10 +02:00
Code Issues Projects Releases Packages Wiki Activity

Implement helper function to test if we're able to access a webpage being logged in (or not) as user

Browse source
This commit is contained in:
Alexandre Aubin 2019-09-17 23:38:17 +02:00
parent 821a3ac4ff
commit 64e388fa7d
1 changed files with 41 additions and 15 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

56
src/yunohost/tests/test_permission.py
View file

@ -1,3 +1,4 @@
import requests
import pytest
from yunohost.app import app_install, app_remove, app_change_url, app_list, app_map
@ -11,6 +12,7 @@ from yunohost.utils.error import YunohostError
# Get main domain
maindomain = _get_maindomain()
dummy_password = "test123Ynh"
def clean_user_groups_permission():
for u in user_list()['users']:
@ -27,8 +29,8 @@ def clean_user_groups_permission():
def setup_function(function):
clean_user_groups_permission()
user_create("alice", "Alice", "White", "alice@" + maindomain, "test123Ynh")
user_create("bob", "Bob", "Snow", "bob@" + maindomain, "test123Ynh")
user_create("alice", "Alice", "White", "alice@" + maindomain, dummy_password)
user_create("bob", "Bob", "Snow", "bob@" + maindomain, dummy_password)
permission_create("wiki.main", urls=[maindomain + "/wiki"], sync_perm=False)
permission_create("blog.main", sync_perm=False)
user_permission_update("blog.main", remove="all_users", add="alice")
@ -156,6 +158,30 @@ def check_permission_for_apps():
assert installed_apps == app_perms_prefix
def can_access_webpage(webpath, logged_as=None):
webpath = webpath.rstrip("/")
webroot = webpath.rsplit("/", 1)[0]
sso_url = webroot+"/yunohost/sso"
# Anonymous access
if not logged_as:
r = requests.get(webpath, verify=False)
# Login as a user using dummy password
else:
with requests.Session() as session:
session.post(sso_url,
data={"user": logged_as,
"password": dummy_password},
headers={"Referer": sso_url,
"Content-Type": "application/x-www-form-urlencoded"},
verify=False)
r = session.get(webpath, verify=False)
# If we can't access it, we got redirected to the sso
return not r.url.startswith(sso_url)
#
# List functions
#
@ -396,21 +422,21 @@ def test_permission_app_propagation_on_ssowat():
res = user_permission_list(full=True)['permissions']
assert res['permissions_app.main']['allowed'] == ["all_users"]
assert can_access(maindomain + "/urlpermissionapp", logged_as=None)
assert can_access(maindomain + "/urlpermissionapp", logged_as="alice")
assert can_access_webpage(maindomain + "/urlpermissionapp", logged_as=None)
assert can_access_webpage(maindomain + "/urlpermissionapp", logged_as="alice")
user_permission_update("permissions_app.main", remove="visitors", add="bob")
res = user_permission_list(full=True)['permissions']
assert cannot_access(maindomain + "/urlpermissionapp", logged_as=None)
assert cannot_access(maindomain + "/urlpermissionapp", logged_as="alice")
assert can_access(maindomain + "/urlpermissionapp", logged_as="bob")
assert not can_access_webpage(maindomain + "/urlpermissionapp", logged_as=None)
assert not can_access_webpage(maindomain + "/urlpermissionapp", logged_as="alice")
assert can_access_webpage(maindomain + "/urlpermissionapp", logged_as="bob")
# Test admin access, as configured during install, only alice should be able to access it
assert cannot_access(maindomain + "/urlpermissionapp/admin", logged_as=None)
assert cannot_access(maindomain + "/urlpermissionapp/admin", logged_as="alice")
assert can_access(maindomain + "/urlpermissionapp/admin", logged_as="bob")
assert not can_access_webpage(maindomain + "/urlpermissionapp/admin", logged_as=None)
assert not can_access_webpage(maindomain + "/urlpermissionapp/admin", logged_as="alice")
assert can_access_webpage(maindomain + "/urlpermissionapp/admin", logged_as="bob")
def test_permission_legacy_app_propagation_on_ssowat():
@ -424,13 +450,13 @@ def test_permission_legacy_app_propagation_on_ssowat():
# It should automatically be migrated during the install
assert res['permissions_app.main']['allowed'] == ["visitors"]
assert can_access(maindomain + "/legacy", logged_as=None)
assert can_access(maindomain + "/legacy", logged_as="alice")
assert can_access_webpage(maindomain + "/legacy", logged_as=None)
assert can_access_webpage(maindomain + "/legacy", logged_as="alice")
# Try to update the permission and check that permissions are still consistent
user_permission_update("legacy_app.main", remove="visitors", add="bob")
res = user_permission_list(full=True)['permissions']
assert cannot_access(maindomain + "/legacy", logged_as=None)
assert cannot_access(maindomain + "/legacy", logged_as="alice")
assert can_access(maindomain + "/legacy", logged_as="bob")
assert not can_access_webpage(maindomain + "/legacy", logged_as=None)
assert not can_access_webpage(maindomain + "/legacy", logged_as="alice")
assert can_access_webpage(maindomain + "/legacy", logged_as="bob")