forked from datahub-project/datahub
-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
fix(tokens) Adds non-admin tests for access tokens (datahub-project#5174
- Loading branch information
1 parent
e51c721
commit c56541b
Showing
8 changed files
with
454 additions
and
89 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Empty file.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,223 @@ | ||
| import time | ||
| import pytest | ||
| import requests | ||
| from tests.utils import get_frontend_url | ||
| from datahub.cli.docker import check_local_docker_containers | ||
|
|
||
| TEST_POLICY_NAME = "Updated Platform Policy" | ||
|
|
||
| @pytest.fixture(scope="session") | ||
| def wait_for_healthchecks(): | ||
| # Simply assert that everything is healthy, but don't wait. | ||
| assert not check_local_docker_containers() | ||
| yield | ||
|
|
||
|
|
||
| @pytest.mark.dependency() | ||
| def test_healthchecks(wait_for_healthchecks): | ||
| # Call to wait_for_healthchecks fixture will do the actual functionality. | ||
| pass | ||
|
|
||
|
|
||
| @pytest.fixture(scope="session") | ||
| def frontend_session(wait_for_healthchecks): | ||
| session = requests.Session() | ||
|
|
||
| headers = { | ||
| "Content-Type": "application/json", | ||
| } | ||
| data = '{"username":"datahub", "password":"datahub"}' | ||
| response = session.post(f"{get_frontend_url()}/logIn", headers=headers, data=data) | ||
| response.raise_for_status() | ||
|
|
||
| yield session | ||
|
|
||
| @pytest.mark.dependency(depends=["test_healthchecks"]) | ||
| @pytest.fixture(scope='class', autouse=True) | ||
| def test_frontend_list_policies(frontend_session): | ||
| """Fixture to execute setup before and tear down after all tests are run""" | ||
| res_data = listPolicies(frontend_session) | ||
|
|
||
| assert res_data | ||
| assert res_data["data"] | ||
| assert res_data["data"]["listPolicies"] | ||
| assert res_data["data"]["listPolicies"]["start"] == 0 | ||
| assert res_data["data"]["listPolicies"]["count"] > 0 | ||
| assert len(res_data["data"]["listPolicies"]["policies"]) > 0 | ||
|
|
||
| # Verify that policy to be created does not exist before the test. | ||
| # If it does, this test class's state is tainted | ||
| result = filter( | ||
| lambda x: x["name"] == TEST_POLICY_NAME, | ||
| res_data["data"]["listPolicies"]["policies"], | ||
| ) | ||
| assert len(list(result)) == 0 | ||
|
|
||
| # Run remaining tests. | ||
| yield | ||
|
|
||
| res_data = listPolicies(frontend_session) | ||
|
|
||
| assert res_data | ||
| assert res_data["data"] | ||
| assert res_data["data"]["listPolicies"] | ||
|
|
||
| # Verify that policy that was created is no longer in the list | ||
| result = filter( | ||
| lambda x: x["name"] == TEST_POLICY_NAME, | ||
| res_data["data"]["listPolicies"]["policies"], | ||
| ) | ||
| assert len(list(result)) == 0 | ||
|
|
||
| @pytest.mark.dependency(depends=["test_healthchecks"]) | ||
| def test_frontend_policy_operations(frontend_session): | ||
|
|
||
| json = { | ||
| "query": """mutation createPolicy($input: PolicyUpdateInput!) {\n | ||
| createPolicy(input: $input) }""", | ||
| "variables": { | ||
| "input": { | ||
| "type": "METADATA", | ||
| "name": "Test Metadata Policy", | ||
| "description": "My Metadaata Policy", | ||
| "state": "ACTIVE", | ||
| "resources": {"type": "dataset", "allResources": True}, | ||
| "privileges": ["EDIT_ENTITY_TAGS"], | ||
| "actors": { | ||
| "users": ["urn:li:corpuser:datahub"], | ||
| "resourceOwners": False, | ||
| "allUsers": False, | ||
| "allGroups": False, | ||
| }, | ||
| } | ||
| }, | ||
| } | ||
|
|
||
| response = frontend_session.post(f"{get_frontend_url()}/api/v2/graphql", json=json) | ||
| response.raise_for_status() | ||
| res_data = response.json() | ||
|
|
||
| assert res_data | ||
| assert res_data["data"] | ||
| assert res_data["data"]["createPolicy"] | ||
|
|
||
| new_urn = res_data["data"]["createPolicy"] | ||
|
|
||
| # Sleep for eventual consistency | ||
| time.sleep(3) | ||
|
|
||
| update_json = { | ||
| "query": """mutation updatePolicy($urn: String!, $input: PolicyUpdateInput!) {\n | ||
| updatePolicy(urn: $urn, input: $input) }""", | ||
| "variables": { | ||
| "urn": new_urn, | ||
| "input": { | ||
| "type": "METADATA", | ||
| "state": "ACTIVE", | ||
| "name": "Test Metadata Policy", | ||
| "description": "Updated Metadaata Policy", | ||
| "privileges": ["EDIT_ENTITY_TAGS", "EDIT_ENTITY_GLOSSARY_TERMS"], | ||
| "actors": { | ||
| "resourceOwners": False, | ||
| "allUsers": True, | ||
| "allGroups": False, | ||
| }, | ||
| }, | ||
| }, | ||
| } | ||
|
|
||
| response = frontend_session.post(f"{get_frontend_url()}/api/v2/graphql", json=update_json) | ||
| response.raise_for_status() | ||
| res_data = response.json() | ||
|
|
||
| # Check updated was submitted successfully | ||
| assert res_data | ||
| assert res_data["data"] | ||
| assert res_data["data"]["updatePolicy"] | ||
| assert res_data["data"]["updatePolicy"] == new_urn | ||
|
|
||
| # Sleep for eventual consistency | ||
| time.sleep(3) | ||
|
|
||
| res_data = listPolicies(frontend_session) | ||
|
|
||
| assert res_data | ||
| assert res_data["data"] | ||
| assert res_data["data"]["listPolicies"] | ||
|
|
||
| # Verify that the updated policy appears in the list and has the appropriate changes | ||
| result = list(filter( | ||
| lambda x: x["urn"] == new_urn, res_data["data"]["listPolicies"]["policies"] | ||
| )) | ||
| print(result) | ||
|
|
||
| assert len(result) == 1 | ||
| assert result[0]["description"] == "Updated Metadaata Policy" | ||
| assert result[0]["privileges"] == ["EDIT_ENTITY_TAGS", "EDIT_ENTITY_GLOSSARY_TERMS"] | ||
| assert result[0]["actors"]["allUsers"] == True | ||
|
|
||
| # Now test that the policy can be deleted | ||
| json = { | ||
| "query": """mutation deletePolicy($urn: String!) {\n | ||
| deletePolicy(urn: $urn) }""", | ||
| "variables": {"urn": new_urn}, | ||
| } | ||
|
|
||
| response = frontend_session.post(f"{get_frontend_url()}/api/v2/graphql", json=json) | ||
| response.raise_for_status() | ||
| res_data = response.json() | ||
|
|
||
| res_data = listPolicies(frontend_session) | ||
|
|
||
| assert res_data | ||
| assert res_data["data"] | ||
| assert res_data["data"]["listPolicies"] | ||
|
|
||
| # Verify that the URN is no longer in the list | ||
| result = filter( | ||
| lambda x: x["urn"] == new_urn, | ||
| res_data["data"]["listPolicies"]["policies"], | ||
| ) | ||
| assert len(list(result)) == 0 | ||
|
|
||
| def listPolicies(session): | ||
| json = { | ||
| "query": """query listPolicies($input: ListPoliciesInput!) {\n | ||
| listPolicies(input: $input) {\n | ||
| start\n | ||
| count\n | ||
| total\n | ||
| policies {\n | ||
| urn\n | ||
| type\n | ||
| name\n | ||
| description\n | ||
| state\n | ||
| resources {\n | ||
| type\n | ||
| allResources\n | ||
| resources\n | ||
| }\n | ||
| privileges\n | ||
| actors {\n | ||
| users\n | ||
| groups\n | ||
| allUsers\n | ||
| allGroups\n | ||
| resourceOwners\n | ||
| }\n | ||
| editable\n | ||
| }\n | ||
| }\n | ||
| }""", | ||
| "variables": { | ||
| "input": { | ||
| "start": "0", | ||
| "count": "20", | ||
| } | ||
| }, | ||
| } | ||
| response = session.post(f"{get_frontend_url()}/api/v2/graphql", json=json) | ||
| response.raise_for_status() | ||
|
|
||
| return response.json() |
Oops, something went wrong.