services/api/test/unit/owner_test.rb

   1 # Copyright (C) The Arvados Authors. All rights reserved.
   2 #
   3 # SPDX-License-Identifier: AGPL-3.0
   4
   5 require 'test_helper'
   6
   7 # Test referential integrity: ensure we cannot leave any object
   8 # without owners by deleting a user or group.
   9 #
  10 # "o" is an owner.
  11 # "i" is an item.
  12
  13 class OwnerTest < ActiveSupport::TestCase
  14   fixtures :users, :groups, :specimens
  15
  16   setup do
  17     set_user_from_auth :admin_trustedclient
  18   end
  19
  20   User.all
  21   Group.all
  22   [User, Group].each do |o_class|
  23     test "create object with legit #{o_class} owner" do
  24       o = o_class.create!
  25       i = Specimen.create(owner_uuid: o.uuid)
  26       assert i.valid?, "new item should pass validation"
  27       assert i.uuid, "new item should have an ID"
  28       assert Specimen.where(uuid: i.uuid).any?, "new item should really be in DB"
  29     end
  30
  31     test "create object with non-existent #{o_class} owner" do
  32       assert_raises(ActiveRecord::RecordInvalid,
  33                     "create should fail with random owner_uuid") do
  34         Specimen.create!(owner_uuid: o_class.generate_uuid)
  35       end
  36
  37       i = Specimen.create(owner_uuid: o_class.generate_uuid)
  38       assert !i.valid?, "object with random owner_uuid should not be valid?"
  39
  40       i = Specimen.new(owner_uuid: o_class.generate_uuid)
  41       assert !i.valid?, "new item should not pass validation"
  42       assert !i.uuid, "new item should not have an ID"
  43     end
  44
  45     [User, Group].each do |new_o_class|
  46       test "change owner from legit #{o_class} to legit #{new_o_class} owner" do
  47         o = o_class.create!
  48         i = Specimen.create!(owner_uuid: o.uuid)
  49         new_o = new_o_class.create!
  50         assert(Specimen.where(uuid: i.uuid).any?,
  51                "new item should really be in DB")
  52         assert(i.update_attributes(owner_uuid: new_o.uuid),
  53                "should change owner_uuid from #{o.uuid} to #{new_o.uuid}")
  54       end
  55     end
  56
  57     test "delete #{o_class} that owns nothing" do
  58       o = o_class.create!
  59       assert(o_class.where(uuid: o.uuid).any?,
  60              "new #{o_class} should really be in DB")
  61       assert(o.destroy, "should delete #{o_class} that owns nothing")
  62       assert_equal(false, o_class.where(uuid: o.uuid).any?,
  63                    "#{o.uuid} should not be in DB after deleting")
  64     end
  65
  66     test "change uuid of #{o_class} that owns nothing" do
  67       # (we're relying on our admin credentials here)
  68       o = o_class.create!
  69       assert(o_class.where(uuid: o.uuid).any?,
  70              "new #{o_class} should really be in DB")
  71       old_uuid = o.uuid
  72       new_uuid = o.uuid.sub(/..........$/, rand(2**256).to_s(36)[0..9])
  73       puts "//Changing//"
  74       if o.respond_to? :update_uuid
  75         o.update_uuid(new_uuid: new_uuid)
  76       else
  77         assert(o.update_attributes(uuid: new_uuid),
  78                "should change #{o_class} uuid from #{old_uuid} to #{new_uuid}")
  79       end
  80       assert_equal(false, o_class.where(uuid: old_uuid).any?,
  81                    "#{old_uuid} should disappear when renamed to #{new_uuid}")
  82     end
  83   end
  84
  85   ['users(:active)', 'groups(:aproject)'].each do |ofixt|
  86     test "delete #{ofixt} that owns other objects" do
  87       o = eval ofixt
  88       assert_equal(true, Specimen.where(owner_uuid: o.uuid).any?,
  89                    "need something to be owned by #{o.uuid} for this test")
  90
  91       assert_raises(ActiveRecord::DeleteRestrictionError,
  92                     "should not delete #{ofixt} that owns objects") do
  93         o.destroy
  94       end
  95     end
  96
  97     test "change uuid of #{ofixt} that owns other objects" do
  98       o = eval ofixt
  99       assert_equal(true, Specimen.where(owner_uuid: o.uuid).any?,
 100                    "need something to be owned by #{o.uuid} for this test")
 101       new_uuid = o.uuid.sub(/..........$/, rand(2**256).to_s(36)[0..9])
 102       assert(!o.update_attributes(uuid: new_uuid),
 103              "should not change uuid of #{ofixt} that owns objects")
 104     end
 105   end
 106
 107   test "delete User that owns self" do
 108     o = User.create!
 109     assert User.where(uuid: o.uuid).any?, "new User should really be in DB"
 110     assert_equal(true, o.update_attributes(owner_uuid: o.uuid),
 111                  "setting owner to self should work")
 112     assert(o.destroy, "should delete User that owns self")
 113     assert_equal(false, User.where(uuid: o.uuid).any?,
 114                  "#{o.uuid} should not be in DB after deleting")
 115   end
 116
 117   test "change uuid of User that owns self" do
 118     o = User.create!
 119     assert User.where(uuid: o.uuid).any?, "new User should really be in DB"
 120     assert_equal(true, o.update_attributes(owner_uuid: o.uuid),
 121                  "setting owner to self should work")
 122     old_uuid = o.uuid
 123     new_uuid = o.uuid.sub(/..........$/, rand(2**256).to_s(36)[0..9])
 124     o.update_uuid(new_uuid: new_uuid)
 125     o = User.find_by_uuid(new_uuid)
 126     assert_equal(false, User.where(uuid: old_uuid).any?,
 127                  "#{old_uuid} should not be in DB after deleting")
 128     assert_equal(true, User.where(uuid: new_uuid).any?,
 129                  "#{new_uuid} should be in DB after renaming")
 130     assert_equal(new_uuid, User.where(uuid: new_uuid).first.owner_uuid,
 131                  "#{new_uuid} should be its own owner in DB after renaming")
 132   end
 133
 134 end