workflow-cli/_tests/perms_test.go at e43d93b5d0a9e4a72894cc43b0e3bd98aae55bfd · drycc/workflow-cli · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
package _tests_test

import (
	. "github.com/onsi/ginkgo"
	. "github.com/onsi/gomega"
)

var _ = Describe("Perms", func() {
	Context("when logged in as an admin user", func() {
		BeforeEach(func() {
			login(url, testAdminUser, testAdminPassword)
		})

		It("can create, list, and delete admin permissions", func() {
			output, err := execute("deis perms:create %s --admin", testUser)
			Expect(err).NotTo(HaveOccurred())
			Expect(output).To(
				ContainSubstring("Adding %s to system administrators... done\n", testUser))
			output, err = execute("deis perms:list --admin")
			Expect(err).NotTo(HaveOccurred())
			Expect(output).To(SatisfyAll(
				HavePrefix("=== Administrators"),
				ContainSubstring(testUser),
				ContainSubstring(testAdminUser)))
			output, err = execute("deis perms:delete %s --admin", testUser)
			Expect(err).NotTo(HaveOccurred())
			Expect(output).To(
				ContainSubstring("Removing %s from system administrators... done", testUser))
			output, err = execute("deis perms:list --admin")
			Expect(err).NotTo(HaveOccurred())
			Expect(output).To(SatisfyAll(
				HavePrefix("=== Administrators"),
				ContainSubstring(testAdminUser)))
			Expect(output).NotTo(ContainSubstring(testUser))
		})

		// TODO: need an app already deployed--do this in BeforeSuite
		XIt("can create, list, and delete app permissions", func() {
			// "deis perms:create %s --app=%s", user, app
			// "deis perms:list --app=%s", app
			// "deis perms:delete %s --app=%s", user, app
			// "deis perms:list --app=%s", app
		})
	})

	Context("when logged in as a normal user", func() {
		BeforeEach(func() {
			login(url, testUser, testPassword)
		})

		It("can't create, list, or delete admin permissions", func() {
			output, err := execute("deis perms:create %s --admin", testAdminUser)
			Expect(err).To(HaveOccurred())
			Expect(output).To(ContainSubstring("403 FORBIDDEN"))
			output, err = execute("deis perms:list --admin")
			Expect(err).To(HaveOccurred())
			Expect(output).To(ContainSubstring("403 FORBIDDEN"))
			output, err = execute("deis perms:delete %s --admin", testAdminUser)
			Expect(err).To(HaveOccurred())
			Expect(output).To(ContainSubstring("403 FORBIDDEN"))
			output, err = execute("deis perms:list --admin")
			Expect(err).To(HaveOccurred())
			Expect(output).To(ContainSubstring("403 FORBIDDEN"))
		})

		// TODO: need an app already deployed--do this in BeforeSuite
		XIt("can create, list, and delete app permissions", func() {
			// "deis perms:create %s --app=%s", user, app
			// "deis perms:list --app=%s", app
			// "deis perms:delete %s --app=%s", user, app
			// "deis perms:list --app=%s", app
		})
	})
})