services/api/test/helpers/users_test_helper.rb

   1 # Copyright (C) The Arvados Authors. All rights reserved.
   2 #
   3 # SPDX-License-Identifier: AGPL-3.0
   4
   5 module UsersTestHelper
   6   def verify_link(response_items, link_object_name, expect_link, link_class,
   7         link_name, head_uuid, tail_uuid, head_kind, fetch_object, class_name)
   8     link = find_obj_in_resp response_items, 'arvados#link', link_object_name
   9
  10     if !expect_link
  11       assert_nil link, "Expected no link for #{link_object_name}"
  12       return
  13     end
  14
  15     assert_not_nil link, "Expected link for #{link_object_name}"
  16
  17     if fetch_object
  18       object = Object.const_get(class_name).where(name: head_uuid)
  19       assert [] != object, "expected #{class_name} with name #{head_uuid}"
  20       head_uuid = object.first[:uuid]
  21     end
  22     assert_equal link_class, link['link_class'],
  23         "did not find expected link_class for #{link_object_name}"
  24
  25     assert_equal link_name, link['name'],
  26         "did not find expected link_name for #{link_object_name}"
  27
  28     assert_equal tail_uuid, link['tail_uuid'],
  29         "did not find expected tail_uuid for #{link_object_name}"
  30
  31     assert_equal head_kind, link['head_kind'],
  32         "did not find expected head_kind for #{link_object_name}"
  33
  34     assert_equal head_uuid, link['head_uuid'],
  35         "did not find expected head_uuid for #{link_object_name}"
  36   end
  37
  38   def verify_system_group_permission_link_for user_uuid
  39     assert_equal 1, Link.where(link_class: 'permission',
  40                                name: 'can_manage',
  41                                tail_uuid: system_group_uuid,
  42                                head_uuid: user_uuid).count
  43   end
  44
  45   def verify_link_existence uuid, email, expect_oid_login_perms,
  46       expect_repo_perms, expect_vm_perms, expect_group_perms, expect_signatures
  47     # verify that all links are deleted for the user
  48     oid_login_perms = Link.where(tail_uuid: email,
  49                                  link_class: 'permission',
  50                                  name: 'can_login').where("head_uuid like ?", User.uuid_like_pattern)
  51
  52     # these don't get added any more!  they shouldn't appear ever.
  53     assert !oid_login_perms.any?, "expected all oid_login_perms deleted"
  54
  55     repo_perms = Link.where(tail_uuid: uuid,
  56                             link_class: 'permission',
  57                             name: 'can_manage').where("head_uuid like ?", Repository.uuid_like_pattern)
  58     if expect_repo_perms
  59       assert repo_perms.any?, "expected repo_perms"
  60     else
  61       assert !repo_perms.any?, "expected all repo_perms deleted"
  62     end
  63
  64     vm_login_perms = Link.
  65       where(tail_uuid: uuid,
  66             link_class: 'permission',
  67             name: 'can_login').
  68       where("head_uuid like ?",
  69             VirtualMachine.uuid_like_pattern).
  70       where('uuid <> ?',
  71             links(:auto_setup_vm_login_username_can_login_to_test_vm).uuid)
  72     if expect_vm_perms
  73       assert vm_login_perms.any?, "expected vm_login_perms"
  74     else
  75       assert !vm_login_perms.any?, "expected all vm_login_perms deleted"
  76     end
  77
  78     group = Group.where(name: 'All users').select do |g|
  79       g[:uuid].match(/-f+$/)
  80     end.first
  81     group_read_perms = Link.where(tail_uuid: uuid,
  82                                   head_uuid: group[:uuid],
  83                                   link_class: 'permission',
  84                                   name: 'can_read')
  85     if expect_group_perms
  86       assert group_read_perms.any?, "expected all users group read perms"
  87     else
  88       assert !group_read_perms.any?, "expected all users group perm deleted"
  89     end
  90
  91     signed_uuids = Link.where(link_class: 'signature',
  92                               tail_uuid: uuid)
  93
  94     if expect_signatures
  95       assert signed_uuids.any?, "expected signatures"
  96     else
  97       assert !signed_uuids.any?, "expected all signatures deleted"
  98     end
  99
 100   end
 101
 102 end