summaryrefslogtreecommitdiff
path: root/src/zope/security/tests/test_zcml.py
blob: 0cf9616d0d4ba7eff1e5790fd34e54375fb3715c (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
##############################################################################
#
# Copyright (c) 2013 Zope Foundation and Contributors.
# All Rights Reserved.
#
# This software is subject to the provisions of the Zope Public License,
# Version 2.1 (ZPL).  A copy of the ZPL should accompany this distribution.
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY AND ALL EXPRESS OR IMPLIED
# WARRANTIES ARE DISCLAIMED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
# WARRANTIES OF TITLE, MERCHANTABILITY, AGAINST INFRINGEMENT, AND FITNESS
# FOR A PARTICULAR PURPOSE.
#
##############################################################################
import unittest
from zope.security.interfaces import PUBLIC_PERMISSION_NAME as zope_Public


class ConformsToIFromUnicode(object):

    def test_class_conforms_to_IFromUnicode(self):
        from zope.interface.verify import verifyClass
        from zope.schema.interfaces import IFromUnicode
        verifyClass(IFromUnicode, self._getTargetClass())

    def test_instance_conforms_to_IFromUnicode(self):
        from zope.interface.verify import verifyObject
        from zope.schema.interfaces import IFromUnicode
        verifyObject(IFromUnicode, self._makeOne())


class PermissionTests(unittest.TestCase,
                      ConformsToIFromUnicode,
                      ):

    def _getTargetClass(self):
        from zope.security.zcml import Permission
        return Permission

    def _makeOne(self, context=None):
        if context is None:
            context = DummyZCMLContext()
        permission = self._getTargetClass()()
        permission.context = context
        return permission

    def test_fromUnicode_miss(self):
        permission = self._makeOne()
        self.assertEqual(permission.fromUnicode('nonesuch.permission'),
                         'nonesuch.permission')

    def test_fromUnicode_hit(self):
        permission = self._makeOne()
        p_obj = object()
        permission.context.permission_mapping = {'extant.permission': p_obj}
        self.assertTrue(permission.fromUnicode('extant.permission') is p_obj)

    def test__validate_w_public(self):
        context = DummyZCMLContext()
        permission = self._makeOne(context)
        permission._validate(zope_Public)
        self.assertEqual(len(context._actions), 0)

    def test__validate_w_non_public(self):
        from zope.security.permission import checkPermission
        context = DummyZCMLContext()
        permission = self._makeOne(context)
        permission._validate('a.permission')
        self.assertEqual(len(context._actions), 1)
        self.assertEqual(context._actions[0]['discriminator'], None)
        self.assertEqual(context._actions[0]['callable'], checkPermission)
        self.assertEqual(context._actions[0]['args'],
                         (None, 'a.permission'))


class Test_securityPolicy(unittest.TestCase):

    def _callFUT(self, _context, component):
        from zope.security.zcml import securityPolicy
        return securityPolicy(_context, component)

    def test_it(self):
        from zope.security.management import setSecurityPolicy
        context = DummyZCMLContext()
        component = object()
        self._callFUT(context, component)
        self.assertEqual(len(context._actions), 1)
        self.assertEqual(context._actions[0]['discriminator'], 'defaultPolicy')
        self.assertEqual(context._actions[0]['callable'], setSecurityPolicy)
        self.assertEqual(context._actions[0]['args'], (component,))


class Test_permission(unittest.TestCase):

    def _callFUT(self, _context, id, title, description=None):
        from zope.security.zcml import permission
        if description is None:
            return permission(_context, id, title)
        return permission(_context, id, title, description)

    def test_wo_description(self):
        from zope.component.interface import provideInterface
        from zope.component.zcml import handler
        from zope.security.interfaces import IPermission
        context = DummyZCMLContext()
        context.info = 'INFO'
        self._callFUT(context, 'a.permission', 'TITLE')
        self.assertEqual(len(context._actions), 2)
        self.assertEqual(context._actions[0]['discriminator'],
                         ('utility', IPermission, 'a.permission'))
        self.assertEqual(context._actions[0]['callable'], handler)
        args = context._actions[0]['args']
        self.assertEqual(args[0], 'registerUtility')
        permission = args[1]
        self.assertEqual(permission.id, 'a.permission')
        self.assertEqual(permission.title, 'TITLE')
        self.assertEqual(permission.description, '')
        self.assertTrue(context._actions[1]['discriminator'] is None)
        self.assertTrue(context._actions[1]['callable'] is provideInterface)
        self.assertEqual(context._actions[1]['args'], ('', IPermission))

    def test_w_description(self):
        from zope.component.interface import provideInterface
        from zope.component.zcml import handler
        from zope.security.interfaces import IPermission
        context = DummyZCMLContext()
        context.info = 'INFO'
        self._callFUT(context, 'a.permission', 'TITLE', 'DESCRIPTION')
        self.assertEqual(len(context._actions), 2)
        self.assertEqual(context._actions[0]['discriminator'],
                         ('utility', IPermission, 'a.permission'))
        self.assertEqual(context._actions[0]['callable'], handler)
        args = context._actions[0]['args']
        self.assertEqual(args[0], 'registerUtility')
        permission = args[1]
        self.assertEqual(permission.id, 'a.permission')
        self.assertEqual(permission.title, 'TITLE')
        self.assertEqual(permission.description, 'DESCRIPTION')
        self.assertTrue(context._actions[1]['discriminator'] is None)
        self.assertTrue(context._actions[1]['callable'] is provideInterface)
        self.assertEqual(context._actions[1]['args'], ('', IPermission))


class Test_redefinePermission(unittest.TestCase):

    def _callFUT(self, _context, from_, to):
        from zope.security.zcml import redefinePermission
        return redefinePermission(_context, from_, to)

    def test_wo_existing_mapping(self):
        z_context = DummyZCMLContext()

        class Context(object):
            pass
        context = z_context.context = Context()
        after = object()
        self._callFUT(z_context, 'before.permission', after)
        self.assertIs(context.permission_mapping['before.permission'], after)

    def test_w_existing_mapping_wo_existing_key(self):
        z_context = DummyZCMLContext()

        class Context(object):
            pass
        context = z_context.context = Context()
        mapping = context.permission_mapping = {}
        after = object()
        self._callFUT(z_context, 'before.permission', after)
        self.assertIs(context.permission_mapping, mapping)
        self.assertIs(context.permission_mapping['before.permission'], after)

    def test_w_existing_mapping_w_existing_key(self):
        z_context = DummyZCMLContext()

        class Context(object):
            pass
        context = z_context.context = Context()
        mapping = context.permission_mapping = {}
        mapping['before.permission'] = object()
        after = object()
        self._callFUT(z_context, 'before.permission', after)
        self.assertIs(context.permission_mapping, mapping)
        self.assertIs(context.permission_mapping['before.permission'], after)


class DummyZCMLContext(object):

    def __init__(self):
        self._actions = []

    def action(self, **kw):
        self._actions.append(kw)


def test_suite():
    return unittest.TestSuite((
        unittest.defaultTestLoader.loadTestsFromTestCase(PermissionTests),
        unittest.defaultTestLoader.loadTestsFromTestCase(Test_securityPolicy),
        unittest.defaultTestLoader.loadTestsFromTestCase(Test_permission),
        unittest.defaultTestLoader.loadTestsFromTestCase(Test_redefinePermission),
    ))