2020-01-21 13:04:52 -05:00
|
|
|
# Licensed to the Apache Software Foundation (ASF) under one
|
|
|
|
# or more contributor license agreements. See the NOTICE file
|
|
|
|
# distributed with this work for additional information
|
|
|
|
# regarding copyright ownership. The ASF licenses this file
|
|
|
|
# to you under the Apache License, Version 2.0 (the
|
|
|
|
# "License"); you may not use this file except in compliance
|
|
|
|
# with the License. You may obtain a copy of the License at
|
|
|
|
#
|
|
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
#
|
|
|
|
# Unless required by applicable law or agreed to in writing,
|
|
|
|
# software distributed under the License is distributed on an
|
|
|
|
# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
|
|
|
|
# KIND, either express or implied. See the License for the
|
|
|
|
# specific language governing permissions and limitations
|
|
|
|
# under the License.
|
|
|
|
# isort:skip_file
|
|
|
|
import json
|
2021-07-01 11:03:07 -04:00
|
|
|
from tests.integration_tests.fixtures.world_bank_dashboard import (
|
|
|
|
load_world_bank_dashboard_with_slices,
|
|
|
|
)
|
2020-01-21 13:04:52 -05:00
|
|
|
|
2021-01-13 17:20:05 -05:00
|
|
|
import pytest
|
2020-01-29 04:41:40 -05:00
|
|
|
from flask_appbuilder.models.sqla.interface import SQLAInterface
|
2020-01-21 13:04:52 -05:00
|
|
|
import prison
|
|
|
|
|
2021-07-01 11:03:07 -04:00
|
|
|
import tests.integration_tests.test_app
|
2020-01-21 13:04:52 -05:00
|
|
|
from superset import db, security_manager
|
2020-01-29 04:41:40 -05:00
|
|
|
from superset.extensions import appbuilder
|
|
|
|
from superset.models.dashboard import Dashboard
|
|
|
|
from superset.views.base_api import BaseSupersetModelRestApi
|
|
|
|
|
|
|
|
from .base_tests import SupersetTestCase
|
|
|
|
|
|
|
|
|
|
|
|
class Model1Api(BaseSupersetModelRestApi):
|
|
|
|
datamodel = SQLAInterface(Dashboard)
|
2020-09-11 09:28:41 -04:00
|
|
|
allow_browser_login = True
|
2020-12-17 04:53:13 -05:00
|
|
|
class_permission_name = "Dashboard"
|
2020-01-29 04:41:40 -05:00
|
|
|
method_permission_name = {
|
2020-12-17 04:53:13 -05:00
|
|
|
"get_list": "read",
|
|
|
|
"get": "read",
|
|
|
|
"export": "read",
|
|
|
|
"post": "write",
|
|
|
|
"put": "write",
|
|
|
|
"delete": "write",
|
|
|
|
"bulk_delete": "write",
|
|
|
|
"info": "read",
|
|
|
|
"related": "read",
|
2020-01-29 04:41:40 -05:00
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
appbuilder.add_api(Model1Api)
|
|
|
|
|
|
|
|
|
2020-07-23 05:43:41 -04:00
|
|
|
class TestOpenApiSpec(SupersetTestCase):
|
|
|
|
def test_open_api_spec(self):
|
|
|
|
"""
|
|
|
|
API: Test validate OpenAPI spec
|
|
|
|
:return:
|
|
|
|
"""
|
|
|
|
from openapi_spec_validator import validate_spec
|
|
|
|
|
|
|
|
self.login(username="admin")
|
|
|
|
uri = "api/v1/_openapi"
|
|
|
|
rv = self.client.get(uri)
|
|
|
|
self.assertEqual(rv.status_code, 200)
|
|
|
|
response = json.loads(rv.data.decode("utf-8"))
|
|
|
|
validate_spec(response)
|
|
|
|
|
|
|
|
|
2020-06-29 18:36:06 -04:00
|
|
|
class TestBaseModelRestApi(SupersetTestCase):
|
2021-01-13 17:20:05 -05:00
|
|
|
@pytest.mark.usefixtures("load_world_bank_dashboard_with_slices")
|
2020-01-29 04:41:40 -05:00
|
|
|
def test_default_missing_declaration_get(self):
|
|
|
|
"""
|
2020-07-07 08:26:54 -04:00
|
|
|
API: Test default missing declaration on get
|
|
|
|
|
|
|
|
We want to make sure that not declared list_columns will
|
|
|
|
not render all columns by default but just the model's pk
|
2020-01-29 04:41:40 -05:00
|
|
|
"""
|
|
|
|
# Check get list response
|
|
|
|
self.login(username="admin")
|
|
|
|
uri = "api/v1/model1api/"
|
|
|
|
rv = self.client.get(uri)
|
|
|
|
self.assertEqual(rv.status_code, 200)
|
|
|
|
response = json.loads(rv.data.decode("utf-8"))
|
|
|
|
self.assertEqual(response["list_columns"], ["id"])
|
|
|
|
for result in response["result"]:
|
|
|
|
self.assertEqual(list(result.keys()), ["id"])
|
|
|
|
|
|
|
|
# Check get response
|
|
|
|
dashboard = db.session.query(Dashboard).first()
|
|
|
|
uri = f"api/v1/model1api/{dashboard.id}"
|
|
|
|
rv = self.client.get(uri)
|
|
|
|
self.assertEqual(rv.status_code, 200)
|
|
|
|
response = json.loads(rv.data.decode("utf-8"))
|
|
|
|
self.assertEqual(response["show_columns"], ["id"])
|
|
|
|
self.assertEqual(list(response["result"].keys()), ["id"])
|
|
|
|
|
|
|
|
def test_default_missing_declaration_put_spec(self):
|
2020-07-07 08:26:54 -04:00
|
|
|
"""
|
|
|
|
API: Test default missing declaration on put openapi spec
|
|
|
|
|
|
|
|
We want to make sure that not declared edit_columns will
|
|
|
|
not render all columns by default but just the model's pk
|
|
|
|
"""
|
2020-01-29 04:41:40 -05:00
|
|
|
self.login(username="admin")
|
|
|
|
uri = "api/v1/_openapi"
|
|
|
|
rv = self.client.get(uri)
|
|
|
|
# dashboard model accepts all fields are null
|
|
|
|
self.assertEqual(rv.status_code, 200)
|
|
|
|
response = json.loads(rv.data.decode("utf-8"))
|
|
|
|
expected_mutation_spec = {
|
|
|
|
"properties": {"id": {"format": "int32", "type": "integer"}},
|
|
|
|
"type": "object",
|
|
|
|
}
|
|
|
|
self.assertEqual(
|
|
|
|
response["components"]["schemas"]["Model1Api.post"], expected_mutation_spec
|
|
|
|
)
|
|
|
|
self.assertEqual(
|
|
|
|
response["components"]["schemas"]["Model1Api.put"], expected_mutation_spec
|
|
|
|
)
|
|
|
|
|
|
|
|
def test_default_missing_declaration_post(self):
|
2020-07-07 08:26:54 -04:00
|
|
|
"""
|
|
|
|
API: Test default missing declaration on post
|
|
|
|
|
|
|
|
We want to make sure that not declared add_columns will
|
|
|
|
not accept all columns by default
|
|
|
|
"""
|
2020-01-29 04:41:40 -05:00
|
|
|
dashboard_data = {
|
|
|
|
"dashboard_title": "title1",
|
|
|
|
"slug": "slug1",
|
|
|
|
"position_json": '{"a": "A"}',
|
|
|
|
"css": "css",
|
|
|
|
"json_metadata": '{"b": "B"}',
|
|
|
|
"published": True,
|
|
|
|
}
|
|
|
|
self.login(username="admin")
|
|
|
|
uri = "api/v1/model1api/"
|
|
|
|
rv = self.client.post(uri, json=dashboard_data)
|
|
|
|
response = json.loads(rv.data.decode("utf-8"))
|
2020-07-07 08:26:54 -04:00
|
|
|
self.assertEqual(rv.status_code, 422)
|
|
|
|
expected_response = {
|
|
|
|
"message": {
|
|
|
|
"css": ["Unknown field."],
|
|
|
|
"dashboard_title": ["Unknown field."],
|
|
|
|
"json_metadata": ["Unknown field."],
|
|
|
|
"position_json": ["Unknown field."],
|
|
|
|
"published": ["Unknown field."],
|
|
|
|
"slug": ["Unknown field."],
|
|
|
|
}
|
|
|
|
}
|
|
|
|
self.assertEqual(response, expected_response)
|
2020-01-29 04:41:40 -05:00
|
|
|
|
2021-01-13 17:20:05 -05:00
|
|
|
@pytest.mark.usefixtures("load_world_bank_dashboard_with_slices")
|
2020-01-29 04:41:40 -05:00
|
|
|
def test_default_missing_declaration_put(self):
|
2020-07-07 08:26:54 -04:00
|
|
|
"""
|
|
|
|
API: Test default missing declaration on put
|
|
|
|
|
|
|
|
We want to make sure that not declared edit_columns will
|
|
|
|
not accept all columns by default
|
|
|
|
"""
|
2020-01-29 04:41:40 -05:00
|
|
|
dashboard = db.session.query(Dashboard).first()
|
|
|
|
dashboard_data = {"dashboard_title": "CHANGED", "slug": "CHANGED"}
|
|
|
|
self.login(username="admin")
|
|
|
|
uri = f"api/v1/model1api/{dashboard.id}"
|
|
|
|
rv = self.client.put(uri, json=dashboard_data)
|
|
|
|
response = json.loads(rv.data.decode("utf-8"))
|
2020-07-07 08:26:54 -04:00
|
|
|
self.assertEqual(rv.status_code, 422)
|
|
|
|
expected_response = {
|
|
|
|
"message": {
|
|
|
|
"dashboard_title": ["Unknown field."],
|
|
|
|
"slug": ["Unknown field."],
|
|
|
|
}
|
|
|
|
}
|
|
|
|
self.assertEqual(response, expected_response)
|
2020-01-21 13:04:52 -05:00
|
|
|
|
|
|
|
|
|
|
|
class ApiOwnersTestCaseMixin:
|
|
|
|
"""
|
|
|
|
Implements shared tests for owners related field
|
|
|
|
"""
|
|
|
|
|
|
|
|
resource_name: str = ""
|
|
|
|
|
|
|
|
def test_get_related_owners(self):
|
|
|
|
"""
|
2021-01-27 15:24:49 -05:00
|
|
|
API: Test get related owners
|
2020-01-21 13:04:52 -05:00
|
|
|
"""
|
|
|
|
self.login(username="admin")
|
|
|
|
uri = f"api/v1/{self.resource_name}/related/owners"
|
|
|
|
rv = self.client.get(uri)
|
2021-01-27 15:24:49 -05:00
|
|
|
assert rv.status_code == 200
|
2020-01-21 13:04:52 -05:00
|
|
|
response = json.loads(rv.data.decode("utf-8"))
|
|
|
|
users = db.session.query(security_manager.user_model).all()
|
|
|
|
expected_users = [str(user) for user in users]
|
2021-01-27 15:24:49 -05:00
|
|
|
assert response["count"] == len(users)
|
2020-01-21 13:04:52 -05:00
|
|
|
# This needs to be implemented like this, because ordering varies between
|
|
|
|
# postgres and mysql
|
|
|
|
response_users = [result["text"] for result in response["result"]]
|
|
|
|
for expected_user in expected_users:
|
2021-01-27 15:24:49 -05:00
|
|
|
assert expected_user in response_users
|
2020-01-21 13:04:52 -05:00
|
|
|
|
2021-08-24 08:07:58 -04:00
|
|
|
def test_get_related_owners_paginated(self):
|
|
|
|
"""
|
|
|
|
API: Test get related owners with pagination
|
|
|
|
"""
|
|
|
|
self.login(username="admin")
|
|
|
|
page_size = 1
|
|
|
|
argument = {"page_size": page_size}
|
|
|
|
uri = f"api/v1/{self.resource_name}/related/owners?q={prison.dumps(argument)}"
|
|
|
|
rv = self.client.get(uri)
|
|
|
|
assert rv.status_code == 200
|
|
|
|
response = json.loads(rv.data.decode("utf-8"))
|
|
|
|
users = db.session.query(security_manager.user_model).all()
|
|
|
|
|
|
|
|
# the count should correspond with the total number of users
|
|
|
|
assert response["count"] == len(users)
|
|
|
|
|
|
|
|
# the length of the result should be at most equal to the page size
|
|
|
|
assert len(response["result"]) == min(page_size, len(users))
|
|
|
|
|
|
|
|
# make sure all received users are included in the full set of users
|
|
|
|
all_users = [str(user) for user in users]
|
|
|
|
for received_user in [result["text"] for result in response["result"]]:
|
|
|
|
assert received_user in all_users
|
|
|
|
|
|
|
|
def test_get_ids_related_owners_paginated(self):
|
|
|
|
"""
|
|
|
|
API: Test get related owners with pagination returns 422
|
|
|
|
"""
|
|
|
|
self.login(username="admin")
|
|
|
|
argument = {"page": 1, "page_size": 1, "include_ids": [2]}
|
|
|
|
uri = f"api/v1/{self.resource_name}/related/owners?q={prison.dumps(argument)}"
|
|
|
|
rv = self.client.get(uri)
|
|
|
|
assert rv.status_code == 422
|
|
|
|
|
2020-01-21 13:04:52 -05:00
|
|
|
def test_get_filter_related_owners(self):
|
|
|
|
"""
|
2021-01-27 15:24:49 -05:00
|
|
|
API: Test get filter related owners
|
2020-01-21 13:04:52 -05:00
|
|
|
"""
|
|
|
|
self.login(username="admin")
|
2020-04-07 12:09:02 -04:00
|
|
|
argument = {"filter": "gamma"}
|
2020-01-21 13:04:52 -05:00
|
|
|
uri = f"api/v1/{self.resource_name}/related/owners?q={prison.dumps(argument)}"
|
|
|
|
|
|
|
|
rv = self.client.get(uri)
|
2021-01-27 15:24:49 -05:00
|
|
|
assert rv.status_code == 200
|
2020-01-21 13:04:52 -05:00
|
|
|
response = json.loads(rv.data.decode("utf-8"))
|
2021-05-04 03:19:58 -04:00
|
|
|
assert 4 == response["count"]
|
2020-04-07 12:09:02 -04:00
|
|
|
sorted_results = sorted(response["result"], key=lambda value: value["text"])
|
|
|
|
expected_results = [
|
|
|
|
{"text": "gamma user", "value": 2},
|
|
|
|
{"text": "gamma2 user", "value": 3},
|
2021-05-04 03:19:58 -04:00
|
|
|
{"text": "gamma_no_csv user", "value": 6},
|
2020-04-07 12:09:02 -04:00
|
|
|
{"text": "gamma_sqllab user", "value": 4},
|
|
|
|
]
|
2021-05-04 03:19:58 -04:00
|
|
|
# TODO Check me
|
2021-01-27 15:24:49 -05:00
|
|
|
assert expected_results == sorted_results
|
|
|
|
|
|
|
|
def test_get_ids_related_owners(self):
|
|
|
|
"""
|
|
|
|
API: Test get filter related owners
|
|
|
|
"""
|
|
|
|
self.login(username="admin")
|
|
|
|
argument = {"filter": "gamma_sqllab", "include_ids": [2]}
|
|
|
|
uri = f"api/v1/{self.resource_name}/related/owners?q={prison.dumps(argument)}"
|
|
|
|
|
|
|
|
rv = self.client.get(uri)
|
|
|
|
response = json.loads(rv.data.decode("utf-8"))
|
|
|
|
assert rv.status_code == 200
|
|
|
|
assert 2 == response["count"]
|
|
|
|
sorted_results = sorted(response["result"], key=lambda value: value["text"])
|
|
|
|
expected_results = [
|
|
|
|
{"text": "gamma user", "value": 2},
|
|
|
|
{"text": "gamma_sqllab user", "value": 4},
|
|
|
|
]
|
|
|
|
assert expected_results == sorted_results
|
|
|
|
|
|
|
|
def test_get_repeated_ids_related_owners(self):
|
|
|
|
"""
|
|
|
|
API: Test get filter related owners
|
|
|
|
"""
|
|
|
|
self.login(username="admin")
|
|
|
|
argument = {"filter": "gamma_sqllab", "include_ids": [2, 4]}
|
|
|
|
uri = f"api/v1/{self.resource_name}/related/owners?q={prison.dumps(argument)}"
|
|
|
|
|
|
|
|
rv = self.client.get(uri)
|
|
|
|
response = json.loads(rv.data.decode("utf-8"))
|
|
|
|
assert rv.status_code == 200
|
|
|
|
assert 2 == response["count"]
|
|
|
|
sorted_results = sorted(response["result"], key=lambda value: value["text"])
|
|
|
|
expected_results = [
|
|
|
|
{"text": "gamma user", "value": 2},
|
|
|
|
{"text": "gamma_sqllab user", "value": 4},
|
|
|
|
]
|
|
|
|
assert expected_results == sorted_results
|
2020-01-21 13:04:52 -05:00
|
|
|
|
|
|
|
def test_get_related_fail(self):
|
|
|
|
"""
|
2021-01-27 15:24:49 -05:00
|
|
|
API: Test get related fail
|
2020-01-21 13:04:52 -05:00
|
|
|
"""
|
|
|
|
self.login(username="admin")
|
|
|
|
uri = f"api/v1/{self.resource_name}/related/owner"
|
|
|
|
|
|
|
|
rv = self.client.get(uri)
|
2021-01-27 15:24:49 -05:00
|
|
|
assert rv.status_code == 404
|