Examples with RangerPolicy org.apache.ranger.plugin.model.RangerPolicy used on opensource projects

Example 26 with RangerPolicy

use of org.apache.ranger.plugin.model.RangerPolicy in project ranger by apache.

the class TestServiceREST method test30getPolicyFromEventTime.

@Test
public void test30getPolicyFromEventTime() throws Exception {
    HttpServletRequest request = Mockito.mock(HttpServletRequest.class);
    String strdt = new Date().toString();
    String userName = "Admin";
    Set<String> userGroupsList = new HashSet<String>();
    userGroupsList.add("group1");
    userGroupsList.add("group2");
    Mockito.when(request.getParameter("eventTime")).thenReturn(strdt);
    Mockito.when(request.getParameter("policyId")).thenReturn("1");
    RangerPolicy policy = new RangerPolicy();
    Map<String, RangerPolicyResource> resources = new HashMap<String, RangerPolicy.RangerPolicyResource>();
    policy.setService("services");
    policy.setResources(resources);
    Mockito.when(svcStore.getPolicyFromEventTime(strdt, 1l)).thenReturn(policy);
    Mockito.when(bizUtil.isAdmin()).thenReturn(false);
    Mockito.when(bizUtil.getCurrentUserLoginId()).thenReturn(userName);
    Mockito.when(restErrorUtil.createRESTException(Matchers.anyInt(), Matchers.anyString(), Matchers.anyBoolean())).thenThrow(new WebApplicationException());
    thrown.expect(WebApplicationException.class);
    RangerPolicy dbRangerPolicy = serviceREST.getPolicyFromEventTime(request);
    Assert.assertNull(dbRangerPolicy);
    Mockito.verify(request).getParameter("eventTime");
    Mockito.verify(request).getParameter("policyId");
}

Example 27 with RangerPolicy

use of org.apache.ranger.plugin.model.RangerPolicy in project ranger by apache.

the class TestRangerPolicyValidator method test_isPolicyResourceUnique.

@Test
public final void test_isPolicyResourceUnique() throws Exception {
    // if store does not contain any matching policies then check should succeed
    RangerPolicyResourceSignature signature = mock(RangerPolicyResourceSignature.class);
    String hash = "hash-1";
    when(signature.getSignature()).thenReturn(hash);
    when(_factory.createPolicyResourceSignature(_policy)).thenReturn(signature);
    when(_policy.getService()).thenReturn("service-name");
    List<RangerPolicy> policies = null;
    when(_store.getPoliciesByResourceSignature("service-name", hash, true)).thenReturn(policies);
    policies = new ArrayList<>();
    for (Action action : cu) {
        Assert.assertTrue(_validator.isPolicyResourceUnique(_policy, _failures, action));
        Assert.assertTrue(_validator.isPolicyResourceUnique(_policy, _failures, action));
    }
    /*
		 * If store has a policy with matching signature then the check should fail with appropriate error message.
		 * - For create any match is a problem
		 * - Signature check can never fail for disabled policies!
		 */
    RangerPolicy policy1 = mock(RangerPolicy.class);
    policies.add(policy1);
    when(_store.getPoliciesByResourceSignature("service-name", hash, true)).thenReturn(policies);
    // ensure policy is enabled
    when(_policy.getIsEnabled()).thenReturn(true);
    _failures.clear();
    Assert.assertFalse(_validator.isPolicyResourceUnique(_policy, _failures, Action.CREATE));
    _utils.checkFailureForSemanticError(_failures, "resources");
    // same check should pass if the policy is disabled
    when(_policy.getIsEnabled()).thenReturn(false);
    _failures.clear();
    Assert.assertTrue(_validator.isPolicyResourceUnique(_policy, _failures, Action.CREATE));
    Assert.assertTrue("failures collection wasn't empty!", _failures.isEmpty());
    // For Update match with itself is not a problem as long as it isn't itself, i.e. same id.
    // ensure policy is enabled
    when(_policy.getIsEnabled()).thenReturn(true);
    when(policy1.getId()).thenReturn(103L);
    when(_policy.getId()).thenReturn(103L);
    Assert.assertTrue(_validator.isPolicyResourceUnique(_policy, _failures, Action.UPDATE));
    // matching policy can't be some other policy (i.e. different id) because that implies a conflict.
    when(policy1.getId()).thenReturn(104L);
    Assert.assertFalse(_validator.isPolicyResourceUnique(_policy, _failures, Action.UPDATE));
    _utils.checkFailureForSemanticError(_failures, "resources");
    // same check should pass if the policy is disabled
    when(_policy.getIsEnabled()).thenReturn(false);
    _failures.clear();
    Assert.assertTrue(_validator.isPolicyResourceUnique(_policy, _failures, Action.UPDATE));
    Assert.assertTrue("failures collection wasn't empty!", _failures.isEmpty());
    // And validation should never pass if there are more than one policies with matching signature, regardless of their ID!!
    RangerPolicy policy2 = mock(RangerPolicy.class);
    // has same id as the policy being tested (_policy)
    when(policy2.getId()).thenReturn(103L);
    policies.add(policy2);
    // ensure policy is enabled
    when(_policy.getIsEnabled()).thenReturn(true);
    Assert.assertFalse(_validator.isPolicyResourceUnique(_policy, _failures, Action.UPDATE));
    _utils.checkFailureForSemanticError(_failures, "resources");
    // same check should pass if the policy is disabled
    when(_policy.getIsEnabled()).thenReturn(false);
    _failures.clear();
    Assert.assertTrue(_validator.isPolicyResourceUnique(_policy, _failures, Action.UPDATE));
    Assert.assertTrue("failures collection wasn't empty!", _failures.isEmpty());
}

Example 28 with RangerPolicy

use of org.apache.ranger.plugin.model.RangerPolicy in project ranger by apache.

the class TestRangerValidator method test_getPolicyResources.

@Test
public void test_getPolicyResources() {
    Set<String> result;
    RangerPolicy policy = null;
    // null policy
    result = _validator.getPolicyResources(null);
    Assert.assertTrue(result != null);
    Assert.assertTrue(result.isEmpty());
    // null resource map
    policy = mock(RangerPolicy.class);
    when(policy.getResources()).thenReturn(null);
    result = _validator.getPolicyResources(null);
    Assert.assertTrue(result != null);
    Assert.assertTrue(result.isEmpty());
    // empty resource map
    Map<String, RangerPolicyResource> input = Maps.newHashMap();
    when(policy.getResources()).thenReturn(input);
    result = _validator.getPolicyResources(policy);
    Assert.assertTrue(result != null);
    Assert.assertTrue(result.isEmpty());
    // known resource map
    input.put("r1", mock(RangerPolicyResource.class));
    input.put("R2", mock(RangerPolicyResource.class));
    result = _validator.getPolicyResources(policy);
    Assert.assertEquals(2, result.size());
    Assert.assertTrue("r1", result.contains("r1"));
    // result should lowercase the resource-names
    Assert.assertTrue("R2", result.contains("r2"));
}

Example 29 with RangerPolicy

use of org.apache.ranger.plugin.model.RangerPolicy in project ranger by apache.

the class TestRangerValidator method test_getIsAuditEnabled.

@Test
public void test_getIsAuditEnabled() {
    // null policy
    RangerPolicy policy = null;
    boolean result = _validator.getIsAuditEnabled(policy);
    Assert.assertFalse(result);
    // null isAuditEnabled Boolean is supposed to be TRUE!!
    policy = mock(RangerPolicy.class);
    when(policy.getIsAuditEnabled()).thenReturn(null);
    result = _validator.getIsAuditEnabled(policy);
    Assert.assertTrue(result);
    // non-null value
    when(policy.getIsAuditEnabled()).thenReturn(Boolean.FALSE);
    result = _validator.getIsAuditEnabled(policy);
    Assert.assertFalse(result);
    when(policy.getIsAuditEnabled()).thenReturn(Boolean.TRUE);
    result = _validator.getIsAuditEnabled(policy);
    Assert.assertTrue(result);
}

Example 30 with RangerPolicy

use of org.apache.ranger.plugin.model.RangerPolicy in project ranger by apache.

the class RangerBaseService method getDefaultPolicy.

private RangerPolicy getDefaultPolicy(List<RangerServiceDef.RangerResourceDef> resourceHierarchy) throws Exception {
    if (LOG.isDebugEnabled()) {
        LOG.debug("==> RangerBaseService.getDefaultPolicy()");
    }
    RangerPolicy policy = new RangerPolicy();
    String policyName = buildPolicyName(resourceHierarchy);
    policy.setIsEnabled(true);
    policy.setVersion(1L);
    policy.setName(policyName);
    policy.setService(service.getName());
    policy.setDescription("Policy for " + policyName);
    policy.setIsAuditEnabled(true);
    policy.setResources(createDefaultPolicyResource(resourceHierarchy));
    List<RangerPolicy.RangerPolicyItem> policyItems = new ArrayList<RangerPolicy.RangerPolicyItem>();
    // Create Default policy item for the service user
    RangerPolicy.RangerPolicyItem policyItem = createDefaultPolicyItem(policy.getResources());
    policyItems.add(policyItem);
    policy.setPolicyItems(policyItems);
    if (LOG.isDebugEnabled()) {
        LOG.debug("<== RangerBaseService.getDefaultPolicy()" + policy);
    }
    return policy;
}