Examples with ObjectStore com.yahoo.athenz.zms.store.ObjectStore used on opensource projects

Example 16 with ObjectStore

use of com.yahoo.athenz.zms.store.ObjectStore in project athenz by yahoo.

the class DBServiceTest method testUpdatePrincipalByStateFromAuthorityExceptionUpdateRoleMembership.

@Test
public void testUpdatePrincipalByStateFromAuthorityExceptionUpdateRoleMembership() {
    JDBCConnection jdbcConn = Mockito.mock(JDBCConnection.class);
    Mockito.when(mockObjStore.getConnection(true, true)).thenReturn(jdbcConn);
    ObjectStore savedStore = zms.dbService.store;
    zms.dbService.store = mockObjStore;
    Mockito.when(jdbcConn.updatePrincipal("user.user3", 2)).thenReturn(true);
    Mockito.when(jdbcConn.updatePrincipal("user.user4", 2)).thenReturn(true);
    Mockito.when(jdbcConn.getPrincipalRoles("user.user3", null)).thenThrow(new ResourceException(ResourceException.NOT_FOUND, "not found"));
    Mockito.when(jdbcConn.getPrincipalRoles("user.user4", null)).thenThrow(new ResourceException(ResourceException.CONFLICT, "conflict"));
    List<Principal> changedPrincipals = new ArrayList<>();
    changedPrincipals.add(ZMSUtils.createPrincipalForName("user.user3", "user", null));
    changedPrincipals.add(ZMSUtils.createPrincipalForName("user.user4", "user", null));
    try {
        zms.dbService.updatePrincipalByStateFromAuthority(changedPrincipals, true);
        fail();
    } catch (ResourceException rex) {
        assertEquals(rex.getCode(), ResourceException.CONFLICT);
    }
    Mockito.verify(jdbcConn, atLeastOnce()).getPrincipalRoles("user.user3", null);
    Mockito.verify(jdbcConn, atLeastOnce()).getPrincipalRoles("user.user4", null);
    zms.dbService.store = savedStore;
}

Example 17 with ObjectStore

use of com.yahoo.athenz.zms.store.ObjectStore in project athenz by yahoo.

the class DBServiceTest method testExecuteSetActivePolicyFailure.

@Test
public void testExecuteSetActivePolicyFailure() {
    String domainName = "policy-set-active-failure";
    String policyName = "policy1";
    Domain domain = new Domain().setAuditEnabled(false);
    Mockito.when(mockObjStore.getConnection(false, true)).thenReturn(mockJdbcConn);
    Mockito.when(mockJdbcConn.getDomain(domainName)).thenReturn(domain);
    Policy policy = createPolicyObject(domainName, policyName);
    Mockito.when(mockJdbcConn.getPolicy(eq(domainName), eq(policyName), isNull())).thenReturn(policy);
    Mockito.when(mockJdbcConn.getPolicy(eq(domainName), eq(policyName), eq("1"))).thenReturn(policy);
    Mockito.when(mockJdbcConn.setActivePolicyVersion(eq(domainName), eq(policyName), eq("1"))).thenReturn(false);
    ObjectStore saveStore = zms.dbService.store;
    zms.dbService.store = mockObjStore;
    int saveRetryCount = zms.dbService.defaultRetryCount;
    zms.dbService.defaultRetryCount = 2;
    try {
        zms.dbService.executeSetActivePolicy(mockDomRsrcCtx, domainName, policyName, "1", auditRef, "setActivePolicy");
        fail();
    } catch (Exception ex) {
        assertEquals(ex.getMessage(), "ResourceException (500): {code: 500, message: \"unable to set active policy version: 1 for policy: policy1 in domain: policy-set-active-failure\"}");
    }
    zms.dbService.defaultRetryCount = saveRetryCount;
    zms.dbService.store = saveStore;
}

Example 18 with ObjectStore

use of com.yahoo.athenz.zms.store.ObjectStore in project athenz by yahoo.

the class DBServiceTest method testUpdatePrincipalByStateFromAuthorityExceptionUpdateGroupMembership.

@Test
public void testUpdatePrincipalByStateFromAuthorityExceptionUpdateGroupMembership() {
    JDBCConnection jdbcConn = Mockito.mock(JDBCConnection.class);
    Mockito.when(mockObjStore.getConnection(true, true)).thenReturn(jdbcConn);
    ObjectStore savedStore = zms.dbService.store;
    zms.dbService.store = mockObjStore;
    Mockito.when(jdbcConn.updatePrincipal("user.user1", 2)).thenReturn(true);
    Mockito.when(jdbcConn.updatePrincipal("user.user2", 2)).thenReturn(true);
    DomainRoleMember drm = new DomainRoleMember();
    List<MemberRole> memberRoles = new ArrayList<>();
    drm.setMemberRoles(memberRoles);
    Mockito.when(jdbcConn.getPrincipalRoles("user.user1", null)).thenReturn(drm);
    Mockito.when(jdbcConn.getPrincipalRoles("user.user2", null)).thenReturn(drm);
    Mockito.when(jdbcConn.getPrincipalGroups("user.user1", null)).thenThrow(new ResourceException(ResourceException.NOT_FOUND, "not found"));
    Mockito.when(jdbcConn.getPrincipalGroups("user.user2", null)).thenThrow(new ResourceException(ResourceException.CONFLICT, "conflict"));
    List<Principal> changedPrincipals = new ArrayList<>();
    changedPrincipals.add(ZMSUtils.createPrincipalForName("user.user1", "user", null));
    changedPrincipals.add(ZMSUtils.createPrincipalForName("user.user2", "user", null));
    try {
        zms.dbService.updatePrincipalByStateFromAuthority(changedPrincipals, true);
        fail();
    } catch (ResourceException rex) {
        assertEquals(rex.getCode(), ResourceException.CONFLICT);
    }
    Mockito.verify(jdbcConn, atLeastOnce()).getPrincipalGroups("user.user1", null);
    Mockito.verify(jdbcConn, atLeastOnce()).getPrincipalGroups("user.user2", null);
    zms.dbService.store = savedStore;
}

Example 19 with ObjectStore

use of com.yahoo.athenz.zms.store.ObjectStore in project athenz by yahoo.

the class DBServiceTest method testUpdatePrincipalByStateFromAuthorityInvalidUpdatePrincipal.

@Test
public void testUpdatePrincipalByStateFromAuthorityInvalidUpdatePrincipal() {
    Mockito.when(mockObjStore.getConnection(true, true)).thenReturn(mockJdbcConn);
    ObjectStore savedStore = zms.dbService.store;
    zms.dbService.store = mockObjStore;
    Mockito.when(mockJdbcConn.updatePrincipal(anyString(), anyInt())).thenReturn(false).thenReturn(false);
    List<Principal> changedPrincipals = new ArrayList<>();
    changedPrincipals.add(ZMSUtils.createPrincipalForName("user.user3", "user", null));
    changedPrincipals.add(ZMSUtils.createPrincipalForName("user.user4", "user", null));
    try {
        zms.dbService.updatePrincipalByStateFromAuthority(changedPrincipals, true);
        zms.dbService.updatePrincipalByStateFromAuthority(changedPrincipals, false);
    } catch (ResourceException rex) {
        fail();
    }
    Mockito.verify(mockJdbcConn, atLeast(4)).updatePrincipal(anyString(), anyInt());
    zms.dbService.store = savedStore;
}

Example 20 with ObjectStore

use of com.yahoo.athenz.zms.store.ObjectStore in project athenz by yahoo.

the class DBServiceTest method testEnforceGroupUserAuthorityExpiryRestrictionsUpdate.

@Test
public void testEnforceGroupUserAuthorityExpiryRestrictionsUpdate() {
    Authority savedAuthority = zms.dbService.zmsConfig.getUserAuthority();
    Authority authority = Mockito.mock(Authority.class);
    Mockito.when(authority.getDateAttribute("user.joe", "elevated-clearance")).thenReturn(null);
    zms.dbService.zmsConfig.setUserAuthority(authority);
    final String domainName = "authority-test";
    final String groupName = "auth-group";
    ObjectStoreConnection mockConn = Mockito.mock(ObjectStoreConnection.class);
    Mockito.when(mockConn.insertGroupMember(Mockito.anyString(), Mockito.anyString(), Mockito.any(), Mockito.any(), Mockito.anyString())).thenReturn(true);
    Mockito.when(mockConn.updateDomainModTimestamp(domainName)).thenReturn(true);
    Mockito.when(mockObjStore.getConnection(true, true)).thenReturn(mockConn);
    // first we're going to return a null group and then a group
    // with no members - in both cases we return without processing
    // any code
    Group group = new Group().setUserAuthorityExpiration("elevated-clearance");
    List<GroupMember> groupMembers = new ArrayList<>();
    groupMembers.add(new GroupMember().setMemberName("user.joe"));
    Mockito.when(mockConn.getGroup(domainName, groupName)).thenReturn(group);
    Mockito.when(mockConn.listGroupMembers(domainName, groupName, false)).thenReturn(groupMembers);
    ObjectStore savedStore = zms.dbService.store;
    zms.dbService.store = mockObjStore;
    // the request should complete successfully
    zms.dbService.enforceGroupUserAuthorityRestrictions(domainName, groupName, null);
    zms.dbService.zmsConfig.setUserAuthority(savedAuthority);
    zms.dbService.store = savedStore;
}