From 423bb38965ce361c3a4d373ddc03008842f110ac Mon Sep 17 00:00:00 2001
From: Petr Viktorin <pviktori@redhat.com>
Date: Fri, 13 Dec 2013 11:28:22 +0100
Subject: Test adding noaci/system permissions to privileges

Part of the work for: https://fedorahosted.org/freeipa/ticket/4034
---
 ipatests/test_xmlrpc/test_permission_plugin.py | 42 +++++++++++++++++++++++++-
 1 file changed, 41 insertions(+), 1 deletion(-)

(limited to 'ipatests')

diff --git a/ipatests/test_xmlrpc/test_permission_plugin.py b/ipatests/test_xmlrpc/test_permission_plugin.py
index 6259fc831..e1a7cd8ee 100644
--- a/ipatests/test_xmlrpc/test_permission_plugin.py
+++ b/ipatests/test_xmlrpc/test_permission_plugin.py
@@ -2054,6 +2054,27 @@ def _make_permission_flag_tests(flags, expected_message):
             expected=errors.ACIError(info=expected_message),
         ),
 
+        dict(
+            desc='Add %r to %r' % (permission1, privilege1),
+            command=('privilege_add_permission', [privilege1],
+                     {'permission': permission1}),
+            expected=dict(
+                completed=1,
+                failed=dict(
+                    member=dict(
+                        permission=[],
+                    ),
+                ),
+                result={
+                    'dn': privilege1_dn,
+                    'cn': [privilege1],
+                    'description': [u'privilege desc. 1'],
+                    'memberof_permission': [permission1],
+                    'objectclass': objectclasses.privilege,
+                }
+            ),
+        ),
+
         dict(
             desc='Delete %r with --force' % permission1,
             command=('permission_del', [permission1], {'force': True}),
@@ -2070,9 +2091,28 @@ class test_permission_flags(Declarative):
     """Test that permission flags are handled correctly"""
     cleanup_commands = [
         ('permission_del', [permission1], {'force': True}),
+        ('privilege_del', [privilege1], {}),
     ]
 
-    tests = (
+    tests = [
+        dict(
+            desc='Create %r' % privilege1,
+            command=('privilege_add', [privilege1],
+                dict(description=u'privilege desc. 1')
+            ),
+            expected=dict(
+                value=privilege1,
+                summary=u'Added privilege "%s"' % privilege1,
+                result=dict(
+                    dn=privilege1_dn,
+                    cn=[privilege1],
+                    description=[u'privilege desc. 1'],
+                    objectclass=objectclasses.privilege,
+                ),
+            ),
+        ),
+
+    ] + (
         _make_permission_flag_tests(
             [u'SYSTEM'],
             'A SYSTEM permission may not be modified or removed') +
-- 
cgit