151 lines
4.4 KiB
Kotlin
151 lines
4.4 KiB
Kotlin
package unit.security
|
|
|
|
import fr.dcproject.common.security.AccessDecision.DENIED
|
|
import fr.dcproject.common.security.AccessDecision.GRANTED
|
|
import fr.dcproject.component.article.database.ArticleForView
|
|
import fr.dcproject.component.auth.database.User
|
|
import fr.dcproject.component.auth.database.UserCreator
|
|
import fr.dcproject.component.auth.database.UserI
|
|
import fr.dcproject.component.citizen.database.Citizen
|
|
import fr.dcproject.component.citizen.database.CitizenCreator
|
|
import fr.dcproject.component.citizen.database.CitizenI
|
|
import fr.dcproject.component.follow.FollowAccessControl
|
|
import fr.dcproject.component.follow.database.FollowForView
|
|
import org.amshove.kluent.`should be`
|
|
import org.joda.time.DateTime
|
|
import org.junit.jupiter.api.Tag
|
|
import org.junit.jupiter.api.Tags
|
|
import org.junit.jupiter.api.Test
|
|
import org.junit.jupiter.api.TestInstance
|
|
import org.junit.jupiter.api.parallel.Execution
|
|
import org.junit.jupiter.api.parallel.ExecutionMode.CONCURRENT
|
|
import java.util.UUID
|
|
|
|
@TestInstance(TestInstance.Lifecycle.PER_CLASS)
|
|
@Execution(CONCURRENT)
|
|
@Tags(Tag("security"), Tag("unit"), Tag("follow"))
|
|
internal class `Follow Access Control` {
|
|
private val tesla = CitizenCreator(
|
|
user = UserCreator(
|
|
username = "nicolas-tesla",
|
|
),
|
|
email = "tesla@best.com",
|
|
name = CitizenI.Name("Nicolas", "Tesla"),
|
|
followAnonymous = false
|
|
)
|
|
private val tesla2 = Citizen(
|
|
user = User(
|
|
username = "nicolas-tesla",
|
|
roles = listOf(UserI.Roles.ROLE_USER)
|
|
),
|
|
birthday = DateTime.now(),
|
|
email = "tesla@best.com",
|
|
name = CitizenI.Name("Nicolas", "Tesla"),
|
|
followAnonymous = false
|
|
)
|
|
|
|
private val einstein = CitizenCreator(
|
|
id = UUID.fromString("319f1226-8f47-4df3-babd-2c7671ad0fbc"),
|
|
user = UserCreator(
|
|
username = "albert-einstein",
|
|
),
|
|
email = "einstein@best.com",
|
|
name = CitizenI.Name("Albert", "Einstein"),
|
|
followAnonymous = true
|
|
)
|
|
|
|
private val einstein2 = CitizenCreator(
|
|
id = UUID.fromString("319f1226-8f47-4df3-babd-2c7671ad0fbc"),
|
|
user = UserCreator(
|
|
username = "albert-einstein",
|
|
),
|
|
name = CitizenI.Name("Albert", "Einstein"),
|
|
email = "albert-einstein@email.com"
|
|
)
|
|
|
|
private val einstein3 = Citizen(
|
|
id = UUID.fromString("319f1226-8f47-4df3-babd-2c7671ad0fbc"),
|
|
user = User(
|
|
username = "albert-einstein",
|
|
roles = listOf(UserI.Roles.ROLE_USER)
|
|
),
|
|
birthday = DateTime.now(),
|
|
email = "einstein@best.com",
|
|
name = CitizenI.Name("Albert", "Einstein"),
|
|
followAnonymous = true
|
|
)
|
|
|
|
private val article1 = ArticleForView(
|
|
content = "Hi",
|
|
createdBy = einstein2,
|
|
description = "blablabla",
|
|
title = "Super article"
|
|
)
|
|
|
|
private val follow1 = FollowForView(
|
|
createdBy = tesla,
|
|
target = article1
|
|
)
|
|
|
|
private val followAnon = FollowForView(
|
|
createdBy = einstein,
|
|
target = article1
|
|
)
|
|
|
|
@Test
|
|
fun `can be view the follow`() {
|
|
FollowAccessControl()
|
|
.canView(follow1, tesla2)
|
|
.decision `should be` GRANTED
|
|
}
|
|
|
|
@Test
|
|
fun `can be view the follow list`() {
|
|
FollowAccessControl()
|
|
.canView(listOf(follow1), tesla2)
|
|
.decision `should be` GRANTED
|
|
}
|
|
|
|
@Test
|
|
fun `can be view your anonymous follow`() {
|
|
FollowAccessControl()
|
|
.canView(followAnon, einstein3)
|
|
.decision `should be` GRANTED
|
|
}
|
|
|
|
@Test
|
|
fun `can not be view the anonymous follow of other`() {
|
|
FollowAccessControl()
|
|
.canView(followAnon, tesla2)
|
|
.decision `should be` DENIED
|
|
}
|
|
|
|
@Test
|
|
fun `can be follow article`() {
|
|
FollowAccessControl()
|
|
.canCreate(follow1, tesla2)
|
|
.decision `should be` GRANTED
|
|
}
|
|
|
|
@Test
|
|
fun `can not be follow article if not connected`() {
|
|
FollowAccessControl()
|
|
.canCreate(follow1, null)
|
|
.decision `should be` DENIED
|
|
}
|
|
|
|
@Test
|
|
fun `can be unfollow article`() {
|
|
FollowAccessControl()
|
|
.canDelete(follow1, tesla2)
|
|
.decision `should be` GRANTED
|
|
}
|
|
|
|
@Test
|
|
fun `can not be unfollow article if not connected`() {
|
|
FollowAccessControl()
|
|
.canDelete(follow1, null)
|
|
.decision `should be` DENIED
|
|
}
|
|
}
|