package jnpf.dmsPermission;
|
|
import jnpf.dmsEntity.permission.model.DmsSubjectSet;
|
import jnpf.dmsMapper.DmsPermissionGroupMapper;
|
import jnpf.permission.entity.PermissionGroupEntity;
|
import org.junit.jupiter.api.Test;
|
|
import java.util.Arrays;
|
import java.util.Collections;
|
|
import static org.junit.jupiter.api.Assertions.assertEquals;
|
import static org.junit.jupiter.api.Assertions.assertThrows;
|
import static org.mockito.Mockito.mock;
|
import static org.mockito.Mockito.times;
|
import static org.mockito.Mockito.verify;
|
import static org.mockito.Mockito.when;
|
|
class DmsPermissionGroupMembershipResolverTest {
|
|
@Test
|
void resolvesMultipleSubjectsWithOneGroupLoad() {
|
DmsPermissionGroupMapper mapper = mock(DmsPermissionGroupMapper.class);
|
DmsPermissionGroupMembershipResolver resolver =
|
new DmsPermissionGroupMembershipResolver(mapper);
|
when(mapper.selectEnabled(11)).thenReturn(Arrays.asList(
|
group("group-all", 0, null),
|
group("group-user-1", 1, "user-1--user"),
|
group("group-position-2", 1, "position-2--pos")));
|
DmsSubjectSet first = subject("user-1", null);
|
DmsSubjectSet second = subject("user-2", "position-2");
|
|
resolver.resolveAll(Arrays.asList(first, second), 10);
|
|
assertEquals(set("group-all", "group-user-1"), first.getPermissionGroupIds());
|
assertEquals(set("group-all", "group-position-2"), second.getPermissionGroupIds());
|
verify(mapper, times(1)).selectEnabled(11);
|
}
|
|
@Test
|
void singleSubjectEntryPointRemainsCompatible() {
|
DmsPermissionGroupMapper mapper = mock(DmsPermissionGroupMapper.class);
|
DmsPermissionGroupMembershipResolver resolver =
|
new DmsPermissionGroupMembershipResolver(mapper);
|
when(mapper.selectEnabled(6)).thenReturn(Collections.singletonList(
|
group("group-user", 1, "user-1--user")));
|
DmsSubjectSet subject = subject("user-1", null);
|
|
resolver.resolveAll(subject, 5);
|
|
assertEquals(set("group-user"), subject.getPermissionGroupIds());
|
verify(mapper, times(1)).selectEnabled(6);
|
}
|
|
@Test
|
void rejectsGroupScanOverflowBeforeMutatingSubjects() {
|
DmsPermissionGroupMapper mapper = mock(DmsPermissionGroupMapper.class);
|
DmsPermissionGroupMembershipResolver resolver =
|
new DmsPermissionGroupMembershipResolver(mapper);
|
when(mapper.selectEnabled(2)).thenReturn(Arrays.asList(
|
group("group-1", 0, null), group("group-2", 0, null)));
|
DmsSubjectSet subject = subject("user-1", null);
|
|
DmsPermissionException error = assertThrows(DmsPermissionException.class,
|
() -> resolver.resolveAll(Collections.singletonList(subject), 1));
|
|
assertEquals(DmsPermissionError.INVALID_REQUEST, error.getError());
|
assertEquals(Collections.emptySet(), subject.getPermissionGroupIds());
|
}
|
|
@Test
|
void matchesPlatformHierarchyScopesWithoutTreatingAncestorsAsDirectMembers() {
|
DmsPermissionGroupMapper mapper = mock(DmsPermissionGroupMapper.class);
|
DmsPermissionGroupMembershipResolver resolver =
|
new DmsPermissionGroupMembershipResolver(mapper);
|
when(mapper.selectEnabled(30)).thenReturn(Arrays.asList(
|
group("raw-user", 1, "user-1"),
|
group("raw-org", 1, "org-child"),
|
group("raw-position", 1, "position-child"),
|
group("direct-org", 1, "org-child--org"),
|
group("parent-not-direct-org", 1, "org-parent--org"),
|
group("parent-sub-org", 1, "org-parent--subOrg"),
|
group("root-not-sub-org", 1, "org-root--subOrg"),
|
group("root-progeny-org", 1, "org-root--progenyOrg"),
|
group("direct-position", 1, "position-child--pos"),
|
group("parent-not-direct-position", 1, "position-parent--pos"),
|
group("parent-sub-position", 1, "position-parent--subPos"),
|
group("root-not-sub-position", 1, "position-root--subPos"),
|
group("root-progeny-position", 1, "position-root--progenyPos"),
|
group("direct-user-role", 1, "role-direct--role"),
|
group("effective-only-role", 1, "role-inherited--role"),
|
group("platform-group", 1, "platform-group-1--group")));
|
DmsSubjectSet subject = subject("user-1", "position-child");
|
subject.getDirectOrgIds().add("org-child");
|
subject.getImmediateParentOrgIds().add("org-parent");
|
subject.getAncestorOrgIds().addAll(Arrays.asList("org-root", "org-parent", "org-child"));
|
subject.getImmediateParentPositionIds().add("position-parent");
|
subject.getAncestorPositionIds().addAll(Arrays.asList(
|
"position-root", "position-parent", "position-child"));
|
subject.getRoleIds().addAll(Arrays.asList("role-direct", "role-inherited"));
|
subject.getDirectUserRoleIds().add("role-direct");
|
subject.getPlatformGroupIds().add("platform-group-1");
|
|
resolver.resolveAll(subject, 29);
|
|
assertEquals(set("raw-user", "direct-org", "parent-sub-org", "root-progeny-org",
|
"direct-position", "parent-sub-position", "root-progeny-position",
|
"direct-user-role", "platform-group"), subject.getPermissionGroupIds());
|
}
|
|
private DmsSubjectSet subject(String userId, String positionId) {
|
DmsSubjectSet result = new DmsSubjectSet();
|
result.setUserId(userId);
|
if (positionId != null) {
|
result.getPositionIds().add(positionId);
|
}
|
return result;
|
}
|
|
private PermissionGroupEntity group(String id, Integer type, String members) {
|
PermissionGroupEntity result = new PermissionGroupEntity();
|
result.setId(id);
|
result.setType(type);
|
result.setPermissionMember(members);
|
return result;
|
}
|
|
private java.util.LinkedHashSet<String> set(String... values) {
|
return new java.util.LinkedHashSet<>(Arrays.asList(values));
|
}
|
}
|
