Search in sources :

Example 1 with JobSecurityException

use of javax.batch.operations.JobSecurityException in project wildfly by wildfly.

the class BatchSubsystemSecurityTestCase method testStart_NotAllowed.

/**
 * Try running a job as a user who doesn't have the permission to run jobs. It should not succeed.
 */
@Test
public void testStart_NotAllowed() throws Exception {
    final SecurityIdentity user2 = getSecurityIdentity("user2", "password2");
    try {
        user2.runAs((Callable<Long>) () -> operator.start("assert-identity", new Properties()));
        Assert.fail("user2 shouldn't be allowed to start batch jobs");
    } catch (JobSecurityException e) {
    // OK
    }
}
Also used : SecurityIdentity(org.wildfly.security.auth.server.SecurityIdentity) JobSecurityException(javax.batch.operations.JobSecurityException) Properties(java.util.Properties) Test(org.junit.Test)

Example 2 with JobSecurityException

use of javax.batch.operations.JobSecurityException in project wildfly by wildfly.

the class BatchSubsystemSecurityTestCase method testRestart_NotAllowed.

/**
 * Test restarting failed jobs by a user who doesn't have the permission to do it.
 */
@Test
public void testRestart_NotAllowed() throws Exception {
    final SecurityIdentity user1 = getSecurityIdentity("user1", "password1");
    final SecurityIdentity user2 = getSecurityIdentity("user2", "password2");
    Properties params = new Properties();
    params.put("should.fail", "true");
    final Long executionId = user1.runAs((Callable<Long>) () -> operator.start("failing-batchlet", params));
    waitForJobEnd(executionId, 10);
    Assert.assertEquals(BatchStatus.FAILED, operator.getJobExecution(executionId).getBatchStatus());
    try {
        user2.runAs((Callable<Long>) () -> operator.restart(executionId, params));
        Assert.fail("user2 shouldn't be allowed to restart batch jobs");
    } catch (JobSecurityException e) {
    // OK
    }
}
Also used : SecurityIdentity(org.wildfly.security.auth.server.SecurityIdentity) JobSecurityException(javax.batch.operations.JobSecurityException) Properties(java.util.Properties) Test(org.junit.Test)

Example 3 with JobSecurityException

use of javax.batch.operations.JobSecurityException in project wildfly by wildfly.

the class BatchSubsystemSecurityTestCase method testStop_NotAllowed.

/**
 * Stopping an execution by a user who doesn't have the permission to do it.
 */
@Test
public void testStop_NotAllowed() throws Exception {
    final SecurityIdentity user1 = getSecurityIdentity("user1", "password1");
    final SecurityIdentity user3 = getSecurityIdentity("user3", "password3");
    final Long id = user1.runAs((Callable<Long>) () -> operator.start("long-running-batchlet", null));
    TimeUnit.SECONDS.sleep(1);
    try {
        user3.runAs(() -> operator.stop(id));
        Assert.fail("user2 should not be allowed to stop job executions");
    } catch (JobSecurityException e) {
    // OK
    }
    Assert.assertNotEquals(BatchStatus.STOPPED, operator.getJobExecution(id).getBatchStatus());
}
Also used : SecurityIdentity(org.wildfly.security.auth.server.SecurityIdentity) JobSecurityException(javax.batch.operations.JobSecurityException) Test(org.junit.Test)

Example 4 with JobSecurityException

use of javax.batch.operations.JobSecurityException in project wildfly by wildfly.

the class BatchSubsystemSecurityTestCase method testRead_NotAllowed.

/**
 * Test reading execution metadata by a user who doesn't have the permission to do it.
 * User1 runs a job and then user2 tries to read its metadata.
 */
@Test
public void testRead_NotAllowed() throws Exception {
    final SecurityIdentity user1 = getSecurityIdentity("user1", "password1");
    final SecurityIdentity user2 = getSecurityIdentity("user2", "password2");
    final Long executionId = user1.runAs((Callable<Long>) () -> operator.start("assert-identity", new Properties()));
    try {
        user2.runAs((Callable<Properties>) () -> operator.getJobExecution(executionId).getJobParameters());
        Assert.fail("user2 shouldn't be allowed to read batch job metadata");
    } catch (JobSecurityException e) {
    // OK
    }
}
Also used : SecurityIdentity(org.wildfly.security.auth.server.SecurityIdentity) JobSecurityException(javax.batch.operations.JobSecurityException) Properties(java.util.Properties) Test(org.junit.Test)

Example 5 with JobSecurityException

use of javax.batch.operations.JobSecurityException in project eap-additional-testsuite by jboss-set.

the class BatchSubsystemSecurityTestCase method testAbandon_NotAllowed.

/**
 * Abandoning an execution by a user who doesn't have the permission to do it.
 */
@Test
public void testAbandon_NotAllowed() throws Exception {
    final SecurityIdentity user1 = getSecurityIdentity("user1", "password1");
    final SecurityIdentity user2 = getSecurityIdentity("user2", "password2");
    final Long id = user1.runAs((Callable<Long>) () -> operator.start("assert-identity", new Properties()));
    waitForJobEnd(id, 10);
    try {
        user2.runAs(() -> operator.abandon(id));
        Assert.fail("user2 should not be allowed to abandon job executions");
    } catch (JobSecurityException e) {
    // OK
    }
    Assert.assertEquals(operator.getJobExecution(id).getBatchStatus(), BatchStatus.COMPLETED);
}
Also used : SecurityIdentity(org.wildfly.security.auth.server.SecurityIdentity) JobSecurityException(javax.batch.operations.JobSecurityException) Properties(java.util.Properties) Test(org.junit.Test)

Aggregations

JobSecurityException (javax.batch.operations.JobSecurityException)12 Test (org.junit.Test)10 SecurityIdentity (org.wildfly.security.auth.server.SecurityIdentity)10 Properties (java.util.Properties)9 JobOperator (javax.batch.operations.JobOperator)2 JsonProcessingException (com.fasterxml.jackson.core.JsonProcessingException)1 ObjectMapper (com.fasterxml.jackson.databind.ObjectMapper)1 AuthenticatedUser (edu.harvard.iq.dataverse.authorization.users.AuthenticatedUser)1 JobExecutionEntity (edu.harvard.iq.dataverse.batch.entities.JobExecutionEntity)1 CommandException (edu.harvard.iq.dataverse.engine.command.exception.CommandException)1 IllegalCommandException (edu.harvard.iq.dataverse.engine.command.exception.IllegalCommandException)1 File (java.io.File)1 Timestamp (java.sql.Timestamp)1 Date (java.util.Date)1 JobStartException (javax.batch.operations.JobStartException)1 NoSuchJobExecutionException (javax.batch.operations.NoSuchJobExecutionException)1 JobExecution (javax.batch.runtime.JobExecution)1 JsonObjectBuilder (javax.json.JsonObjectBuilder)1