summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorPetr Viktorin <pviktori@redhat.com>2013-12-13 11:28:22 +0100
committerMartin Kosek <mkosek@redhat.com>2013-12-13 15:08:52 +0100
commit423bb38965ce361c3a4d373ddc03008842f110ac (patch)
treeca9c33321ea2d40c5bded9b0a1501c0487299687
parentd38748d64f5c7fb098b839b3c00a1f812d510d3b (diff)
downloadfreeipa-423bb38965ce361c3a4d373ddc03008842f110ac.tar.gz
freeipa-423bb38965ce361c3a4d373ddc03008842f110ac.tar.xz
freeipa-423bb38965ce361c3a4d373ddc03008842f110ac.zip
Test adding noaci/system permissions to privileges
Part of the work for: https://fedorahosted.org/freeipa/ticket/4034
-rw-r--r--ipatests/test_xmlrpc/test_permission_plugin.py42
1 files changed, 41 insertions, 1 deletions
diff --git a/ipatests/test_xmlrpc/test_permission_plugin.py b/ipatests/test_xmlrpc/test_permission_plugin.py
index 6259fc83..e1a7cd8e 100644
--- a/ipatests/test_xmlrpc/test_permission_plugin.py
+++ b/ipatests/test_xmlrpc/test_permission_plugin.py
@@ -2055,6 +2055,27 @@ def _make_permission_flag_tests(flags, expected_message):
),
dict(
+ desc='Add %r to %r' % (permission1, privilege1),
+ command=('privilege_add_permission', [privilege1],
+ {'permission': permission1}),
+ expected=dict(
+ completed=1,
+ failed=dict(
+ member=dict(
+ permission=[],
+ ),
+ ),
+ result={
+ 'dn': privilege1_dn,
+ 'cn': [privilege1],
+ 'description': [u'privilege desc. 1'],
+ 'memberof_permission': [permission1],
+ 'objectclass': objectclasses.privilege,
+ }
+ ),
+ ),
+
+ dict(
desc='Delete %r with --force' % permission1,
command=('permission_del', [permission1], {'force': True}),
expected=dict(
@@ -2070,9 +2091,28 @@ class test_permission_flags(Declarative):
"""Test that permission flags are handled correctly"""
cleanup_commands = [
('permission_del', [permission1], {'force': True}),
+ ('privilege_del', [privilege1], {}),
]
- tests = (
+ tests = [
+ dict(
+ desc='Create %r' % privilege1,
+ command=('privilege_add', [privilege1],
+ dict(description=u'privilege desc. 1')
+ ),
+ expected=dict(
+ value=privilege1,
+ summary=u'Added privilege "%s"' % privilege1,
+ result=dict(
+ dn=privilege1_dn,
+ cn=[privilege1],
+ description=[u'privilege desc. 1'],
+ objectclass=objectclasses.privilege,
+ ),
+ ),
+ ),
+
+ ] + (
_make_permission_flag_tests(
[u'SYSTEM'],
'A SYSTEM permission may not be modified or removed') +