1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
|
#####################################################################
#
# testLDAPUserSatellite Tests for the LDAPUserSatellite
#
# This software is governed by a license. See
# LICENSE.txt for the terms of this license.
#
#####################################################################
__version__='$Revision: 1333 $'[11:-2]
# General Python imports
import unittest, sys
# Zope imports
from OFS.Folder import manage_addFolder
# Do some namespace manipulation to make use of FakeLDAP
from Products.LDAPUserFolder.tests import FakeLDAP
# LDAPUserFolder package imports
from Products.LDAPUserFolder import manage_addLDAPUserSatellite
# Tests imports
from Products.LDAPUserFolder.tests.base.testcase import LDAPTest
from Products.LDAPUserFolder.tests.config import user
from Products.LDAPUserFolder.tests.config import satellite_defaults
ug = user.get
sg = satellite_defaults.get
class TestLDAPUserSatellite(LDAPTest):
def setUp(self):
LDAPTest.setUp(self)
luf = self.folder.acl_users
luf._implicit_mapping = True
FakeLDAP.addTreeItems(sg('groups_base'))
manage_addFolder(self.folder, 'lustest')
self.lustest = self.folder.lustest
manage_addLDAPUserSatellite( self.lustest
, sg('luf')
, sg('title')
, sg('recurse')
)
self.lus = self.lustest.acl_satellite
acl = self.folder.acl_users
for role in ug('user_roles'):
acl.manage_addGroup(role)
for group in ug('ldap_groups'):
acl.manage_addGroup(group)
acl.manage_addUser(REQUEST=None, kwargs=user)
def testInstantiation(self):
lus = getattr(self.lustest, 'acl_satellite').__of__(self.lustest)
ae = self.assertEqual
ae(lus._luf, sg('luf'))
ae(lus.title, sg('title'))
ae(lus.recurse, sg('recurse'))
ae(len(lus.getCache()), 0)
ae(len(lus.getGroupMappings()), 0)
ae(len(lus.getGroups()), 0)
ae(len(lus.getGroupedUsers()), 0)
luf = lus.getLUF()
ae('/'.join(luf.getPhysicalPath()), sg('luf'))
def testEdit(self):
lus = self.lus
ae = self.assertEqual
lus.manage_edit( '/acl_users'
, sg('groups_base')
, sg('groups_scope')
, title='New Title'
, recurse=1
)
ae(lus.title, 'New Title')
ae(lus.recurse, 1)
ae(lus._luf, '/acl_users')
ae(lus.groups_base, sg('groups_base'))
ae(lus.groups_scope, sg('groups_scope'))
def testRoleMapping(self):
lus = self.lus
ae = self.assertEqual
ae(len(lus.getGroupMappings()), 0)
lus.manage_addGroupMapping('Manager', ['Privileged'])
lus.manage_addGroupMapping('Group2', ['MorePrivileged'])
ae(len(lus.getGroupMappings()), 2)
user = self.folder.acl_users.getUser('test')
# Nasty quick hack
user._ldap_groups = ug('ldap_groups')
roles = lus.getAdditionalRoles(user)
ae(len(lus.getCache()), 1)
ae(roles, ['MorePrivileged', 'Privileged'])
lus.manage_deleteGroupMappings(['Manager'])
lus.manage_deleteGroupMappings(['Group2'])
ae(len(lus.getGroupMappings()), 0)
roles = lus.getAdditionalRoles(user)
ae(len(roles), 0)
def testLDAPRoleAdding(self):
lus = self.lus
ae = self.assertEqual
acl = lus.getLUF()
user = self.folder.acl_users.getUser('test')
acl._delegate.insert( sg('groups_base')
, 'cn=Privileged'
, { 'objectClass' : ['top', 'groupOfUniqueNames']
, 'cn' : ['Privileged']
, 'uniqueMember' : user.getUserDN()
}
)
lus.manage_edit( sg('luf')
, sg('groups_base')
, sg('groups_scope')
)
ae(len(lus.getGroups()), 1)
roles = lus.getAdditionalRoles(user)
ae(roles, ['Privileged'])
ae(len(lus.getGroupedUsers()), 1)
ae(len(lus.getCache()), 1)
def test_suite():
suite = unittest.TestSuite()
suite.addTest(unittest.makeSuite(TestLDAPUserSatellite))
return suite
if __name__ == '__main__':
unittest.main(defaultTest='test_suite')
|
