Search in sources :

Example 1 with Result

use of com.thoughtworks.go.config.policy.Result in project gocd by gocd.

the class ClusterProfilesAllowDirectiveTest method forViewOfAllClusterProfiles.

@Test
void forViewOfAllClusterProfiles() {
    Allow directive = new Allow("view", "cluster_profile", "*");
    Result viewAllElasticAgentProfiles = directive.apply("view", ElasticProfile.class, "*", null);
    Result viewAllClusterProfiles = directive.apply("view", ClusterProfile.class, "*", null);
    Result administerAllElasticAgentProfiles = directive.apply("administer", ElasticProfile.class, "*", null);
    Result administerAllClusterProfiles = directive.apply("administer", ClusterProfile.class, "*", null);
    assertThat(viewAllElasticAgentProfiles).isEqualTo(Result.ALLOW);
    assertThat(viewAllClusterProfiles).isEqualTo(Result.ALLOW);
    assertThat(administerAllElasticAgentProfiles).isEqualTo(Result.SKIP);
    assertThat(administerAllClusterProfiles).isEqualTo(Result.SKIP);
}
Also used : Allow(com.thoughtworks.go.config.policy.Allow) Result(com.thoughtworks.go.config.policy.Result) Test(org.junit.jupiter.api.Test)

Example 2 with Result

use of com.thoughtworks.go.config.policy.Result in project gocd by gocd.

the class ClusterProfilesDenyDirectiveTest method forViewOfAllClusterProfiles.

@Test
void forViewOfAllClusterProfiles() {
    Deny directive = new Deny("view", "cluster_profile", "*");
    Result viewAllElasticAgentProfiles = directive.apply("view", ElasticProfile.class, "*", null);
    Result viewAllClusterProfiles = directive.apply("view", ClusterProfile.class, "*", null);
    Result administerAllElasticAgentProfiles = directive.apply("administer", ElasticProfile.class, "*", null);
    Result administerAllClusterProfiles = directive.apply("administer", ClusterProfile.class, "*", null);
    assertThat(viewAllElasticAgentProfiles).isEqualTo(Result.DENY);
    assertThat(viewAllClusterProfiles).isEqualTo(Result.DENY);
    assertThat(administerAllElasticAgentProfiles).isEqualTo(Result.SKIP);
    assertThat(administerAllClusterProfiles).isEqualTo(Result.SKIP);
}
Also used : Deny(com.thoughtworks.go.config.policy.Deny) Result(com.thoughtworks.go.config.policy.Result) Test(org.junit.jupiter.api.Test)

Example 3 with Result

use of com.thoughtworks.go.config.policy.Result in project gocd by gocd.

the class ClusterProfilesDenyDirectiveTest method forViewOfWildcardDefinedClusterProfile.

@Test
void forViewOfWildcardDefinedClusterProfile() {
    Deny directive = new Deny("view", "cluster_profile", "team1_*");
    Result viewAllElasticAgentProfiles = directive.apply("view", ElasticProfile.class, "*", null);
    Result viewAllElasticAgentProfilesUnderTeam1 = directive.apply("view", ElasticProfile.class, "*", "team1_uat");
    Result viewAllElasticAgentProfilesUnderTeam2 = directive.apply("view", ElasticProfile.class, "*", "team2_uat");
    Result viewAllClusterProfiles = directive.apply("view", ClusterProfile.class, "*", null);
    Result viewTeam1ClusterProfile = directive.apply("view", ClusterProfile.class, "team1_uat", null);
    Result viewTeam2ClusterProfile = directive.apply("view", ClusterProfile.class, "team2_uat", null);
    Result administerAllElasticAgentProfiles = directive.apply("administer", ElasticProfile.class, "*", null);
    Result administerAllElasticAgentProfilesUnderTeam1 = directive.apply("administer", ElasticProfile.class, "*", "team1_uat");
    Result administerAllElasticAgentProfilesUnderTeam2 = directive.apply("administer", ElasticProfile.class, "*", "team2_uat");
    Result administerAllClusterProfiles = directive.apply("administer", ClusterProfile.class, "*", null);
    Result administerTeam1ClusterProfile = directive.apply("administer", ClusterProfile.class, "team1_uat", null);
    Result administerTeam2ClusterProfile = directive.apply("administer", ClusterProfile.class, "team2_uat", null);
    assertThat(viewAllElasticAgentProfiles).isEqualTo(Result.SKIP);
    assertThat(viewAllElasticAgentProfilesUnderTeam1).isEqualTo(Result.DENY);
    assertThat(viewAllElasticAgentProfilesUnderTeam2).isEqualTo(Result.SKIP);
    assertThat(viewAllClusterProfiles).isEqualTo(Result.SKIP);
    assertThat(viewTeam1ClusterProfile).isEqualTo(Result.DENY);
    assertThat(viewTeam2ClusterProfile).isEqualTo(Result.SKIP);
    assertThat(administerAllElasticAgentProfiles).isEqualTo(Result.SKIP);
    assertThat(administerAllElasticAgentProfilesUnderTeam1).isEqualTo(Result.SKIP);
    assertThat(administerAllElasticAgentProfilesUnderTeam2).isEqualTo(Result.SKIP);
    assertThat(administerAllClusterProfiles).isEqualTo(Result.SKIP);
    assertThat(administerTeam1ClusterProfile).isEqualTo(Result.SKIP);
    assertThat(administerTeam2ClusterProfile).isEqualTo(Result.SKIP);
}
Also used : Deny(com.thoughtworks.go.config.policy.Deny) Result(com.thoughtworks.go.config.policy.Result) Test(org.junit.jupiter.api.Test)

Example 4 with Result

use of com.thoughtworks.go.config.policy.Result in project gocd by gocd.

the class ClusterProfilesAllowDirectiveTest method forAdministerOfWildcardDefinedClusterProfile.

@Test
void forAdministerOfWildcardDefinedClusterProfile() {
    Allow directive = new Allow("administer", "cluster_profile", "team1_*");
    Result viewAllElasticAgentProfiles = directive.apply("view", ElasticProfile.class, "*", null);
    Result viewAllElasticAgentProfilesUnderTeam1 = directive.apply("view", ElasticProfile.class, "*", "team1_uat");
    Result viewAllElasticAgentProfilesUnderTeam2 = directive.apply("view", ElasticProfile.class, "*", "team2_uat");
    Result viewAllClusterProfiles = directive.apply("view", ClusterProfile.class, "*", null);
    Result viewTeam1ClusterProfile = directive.apply("view", ClusterProfile.class, "team1_uat", null);
    Result viewTeam2ClusterProfile = directive.apply("view", ClusterProfile.class, "team2_uat", null);
    Result administerAllElasticAgentProfiles = directive.apply("administer", ElasticProfile.class, "*", null);
    Result administerAllElasticAgentProfilesUnderTeam1 = directive.apply("administer", ElasticProfile.class, "*", "team1_uat");
    Result administerAllElasticAgentProfilesUnderTeam2 = directive.apply("administer", ElasticProfile.class, "*", "team2_uat");
    Result administerAllClusterProfiles = directive.apply("administer", ClusterProfile.class, "*", null);
    Result administerTeam1ClusterProfile = directive.apply("administer", ClusterProfile.class, "team1_uat", null);
    Result administerTeam2ClusterProfile = directive.apply("administer", ClusterProfile.class, "team2_uat", null);
    assertThat(viewAllElasticAgentProfiles).isEqualTo(Result.SKIP);
    assertThat(viewAllElasticAgentProfilesUnderTeam1).isEqualTo(Result.ALLOW);
    assertThat(viewAllElasticAgentProfilesUnderTeam2).isEqualTo(Result.SKIP);
    assertThat(viewAllClusterProfiles).isEqualTo(Result.SKIP);
    assertThat(viewTeam1ClusterProfile).isEqualTo(Result.ALLOW);
    assertThat(viewTeam2ClusterProfile).isEqualTo(Result.SKIP);
    assertThat(administerAllElasticAgentProfiles).isEqualTo(Result.SKIP);
    assertThat(administerAllElasticAgentProfilesUnderTeam1).isEqualTo(Result.ALLOW);
    assertThat(administerAllElasticAgentProfilesUnderTeam2).isEqualTo(Result.SKIP);
    assertThat(administerAllClusterProfiles).isEqualTo(Result.SKIP);
    assertThat(administerTeam1ClusterProfile).isEqualTo(Result.ALLOW);
    assertThat(administerTeam2ClusterProfile).isEqualTo(Result.SKIP);
}
Also used : Allow(com.thoughtworks.go.config.policy.Allow) Result(com.thoughtworks.go.config.policy.Result) Test(org.junit.jupiter.api.Test)

Example 5 with Result

use of com.thoughtworks.go.config.policy.Result in project gocd by gocd.

the class ClusterProfilesAllowDirectiveTest method forAdministerOfAllClusterProfiles.

@Test
void forAdministerOfAllClusterProfiles() {
    Allow directive = new Allow("administer", "cluster_profile", "*");
    Result viewAllElasticAgentProfiles = directive.apply("view", ElasticProfile.class, "*", null);
    Result viewAllClusterProfiles = directive.apply("view", ClusterProfile.class, "*", null);
    Result administerAllElasticAgentProfiles = directive.apply("administer", ElasticProfile.class, "*", null);
    Result administerAllClusterProfiles = directive.apply("administer", ClusterProfile.class, "*", null);
    assertThat(viewAllElasticAgentProfiles).isEqualTo(Result.ALLOW);
    assertThat(viewAllClusterProfiles).isEqualTo(Result.ALLOW);
    assertThat(administerAllElasticAgentProfiles).isEqualTo(Result.ALLOW);
    assertThat(administerAllClusterProfiles).isEqualTo(Result.ALLOW);
}
Also used : Allow(com.thoughtworks.go.config.policy.Allow) Result(com.thoughtworks.go.config.policy.Result) Test(org.junit.jupiter.api.Test)

Aggregations

Result (com.thoughtworks.go.config.policy.Result)8 Test (org.junit.jupiter.api.Test)8 Allow (com.thoughtworks.go.config.policy.Allow)4 Deny (com.thoughtworks.go.config.policy.Deny)4