Examples with PolicyGraph org.forgerock.openam.uma.rest.PolicyGraph used on opensource projects

Example 1 with PolicyGraph

use of org.forgerock.openam.uma.rest.PolicyGraph in project OpenAM by OpenRock.

the class PolicyGraphTest method shouldCreatePolicyWhenMakingValid.

/*
      Alice had removed Dave's ability to VIEW, EDIT and DELETE, so Dave's resharing
      policies to Ed had been made inactive. Alice has re-granted Dave's VIEW and DELETE,
      so those need to be active, while EDIT stays inactive.
     */
@Test
public void shouldCreatePolicyWhenMakingValid() throws Exception {
    // Given
    List<ResourceResponse> policies = excludePolicies(DAVE, ED);
    policies.add(makePolicy(DAVE, ED, false, VIEW, DELETE, EDIT));
    PolicyGraph graph = makePolicyGraph(policies);
    graph.computeGraph();
    given(resourceSetStore.read(anyString(), anyString())).willReturn(new ResourceSetDescription(RESOURCE_SET_ID, "RESOURCE_SERVER_ID", ALICE, null));
    given(delegate.updatePolicies(isNull(Context.class), anySet())).willReturn(Promises.<List<ResourceResponse>, ResourceException>newResultPromise(Collections.<ResourceResponse>emptyList()));
    given(delegate.createPolicies(isNull(Context.class), anySet())).willReturn(Promises.<List<ResourceResponse>, ResourceException>newResultPromise(Collections.<ResourceResponse>emptyList()));
    // When
    Promise<List<List<ResourceResponse>>, ResourceException> promise = graph.update(null, delegate);
    // Then
    AssertJPromiseAssert.assertThat(promise).succeeded();
    JsonValue created = policyCreated();
    assertThat(UmaPolicyUtils.getPolicyScopes(created)).containsOnly(VIEW, DELETE);
    assertThat(created.get("active").asBoolean()).isTrue();
    assertThat(UmaPolicyUtils.getPolicyScopes(policyUpdated())).containsOnly(EDIT);
    verifyNoMoreInteractions(delegate);
}

Example 2 with PolicyGraph

use of org.forgerock.openam.uma.rest.PolicyGraph in project OpenAM by OpenRock.

the class PolicyGraphTest method shouldDetectInvalidRightsTree.

/*
      VIEW scope is accessible to Dave, so his VIEW reshare to Ed should be active, not inactive.
     */
@Test
public void shouldDetectInvalidRightsTree() throws Exception {
    // Given
    List<ResourceResponse> policies = excludePolicies(DAVE, ED);
    policies.add(makePolicy(DAVE, ED, true, DELETE));
    policies.add(makePolicy(DAVE, ED, false, VIEW));
    PolicyGraph graph = makePolicyGraph(policies);
    // When
    graph.computeGraph();
    // Then
    assertThat(graph.isValid()).isFalse();
}

Example 3 with PolicyGraph

use of org.forgerock.openam.uma.rest.PolicyGraph in project OpenAM by OpenRock.

the class PolicyGraphTest method shouldDetectValidRights.

@Test
public void shouldDetectValidRights() throws Exception {
    // Given
    List<ResourceResponse> policies = VALID_POLICIES;
    PolicyGraph graph = makePolicyGraph(policies);
    // When
    graph.computeGraph();
    // Then
    assertThat(graph.isValid()).isTrue();
}

Example 4 with PolicyGraph

use of org.forgerock.openam.uma.rest.PolicyGraph in project OpenAM by OpenRock.

the class PolicyGraphTest method shouldRequireComputeGraphCall.

@Test(expectedExceptions = IllegalStateException.class)
public void shouldRequireComputeGraphCall() throws Exception {
    // Given
    PolicyGraph graph = new PolicyGraph(RESOURCE_SET);
    // When
    graph.isValid();
}

Example 5 with PolicyGraph

use of org.forgerock.openam.uma.rest.PolicyGraph in project OpenAM by OpenRock.

the class PolicyGraphTest method shouldRemoveLostRights.

/*
      Alice has removed Dave's rights to EDIT, so EDIT needs removing from the
      active Dave -> Ed policy, and adding to an inactive policy.
     */
@Test
public void shouldRemoveLostRights() throws Exception {
    // Given
    List<ResourceResponse> policies = excludePolicies(DAVE, ED);
    policies.add(makePolicy(DAVE, ED, true, VIEW, DELETE, EDIT));
    PolicyGraph graph = makePolicyGraph(policies);
    graph.computeGraph();
    given(resourceSetStore.read(anyString(), anyString())).willReturn(new ResourceSetDescription(RESOURCE_SET_ID, "RESOURCE_SERVER_ID", ALICE, null));
    given(delegate.updatePolicies(isNull(Context.class), anySet())).willReturn(Promises.<List<ResourceResponse>, ResourceException>newResultPromise(Collections.<ResourceResponse>emptyList()));
    given(delegate.createPolicies(isNull(Context.class), anySet())).willReturn(Promises.<List<ResourceResponse>, ResourceException>newResultPromise(Collections.<ResourceResponse>emptyList()));
    // When
    Promise<List<List<ResourceResponse>>, ResourceException> promise = graph.update(null, delegate);
    // Then
    AssertJPromiseAssert.assertThat(promise).succeeded();
    JsonValue created = policyCreated();
    assertThat(UmaPolicyUtils.getPolicyScopes(created)).containsOnly(EDIT);
    assertThat(created.get("active").asBoolean()).isFalse();
    assertThat(UmaPolicyUtils.getPolicyScopes(policyUpdated())).containsOnly(VIEW, DELETE);
    verifyNoMoreInteractions(delegate);
}