2019-01-15 18:53:27 -05:00
|
|
|
# Licensed to the Apache Software Foundation (ASF) under one
|
|
|
|
# or more contributor license agreements. See the NOTICE file
|
|
|
|
# distributed with this work for additional information
|
|
|
|
# regarding copyright ownership. The ASF licenses this file
|
|
|
|
# to you under the Apache License, Version 2.0 (the
|
|
|
|
# "License"); you may not use this file except in compliance
|
|
|
|
# with the License. You may obtain a copy of the License at
|
|
|
|
#
|
|
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
#
|
|
|
|
# Unless required by applicable law or agreed to in writing,
|
|
|
|
# software distributed under the License is distributed on an
|
|
|
|
# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
|
|
|
|
# KIND, either express or implied. See the License for the
|
|
|
|
# specific language governing permissions and limitations
|
|
|
|
# under the License.
|
2019-11-20 10:47:06 -05:00
|
|
|
# isort:skip_file
|
2016-11-10 02:08:22 -05:00
|
|
|
"""Unit tests for Superset"""
|
2016-10-02 21:03:19 -04:00
|
|
|
import unittest
|
2022-06-24 20:57:04 -04:00
|
|
|
from typing import Optional
|
2021-11-04 14:09:08 -04:00
|
|
|
|
|
|
|
import pytest
|
2022-05-13 00:03:05 -04:00
|
|
|
from flask.ctx import AppContext
|
2022-06-24 20:57:04 -04:00
|
|
|
from pytest_mock import MockFixture
|
2021-11-04 14:09:08 -04:00
|
|
|
from sqlalchemy import inspect
|
|
|
|
|
2021-07-01 11:03:07 -04:00
|
|
|
from tests.integration_tests.fixtures.birth_names_dashboard import (
|
|
|
|
load_birth_names_dashboard_with_slices,
|
2021-12-16 19:11:47 -05:00
|
|
|
load_birth_names_data,
|
2021-07-01 11:03:07 -04:00
|
|
|
)
|
|
|
|
from tests.integration_tests.fixtures.world_bank_dashboard import (
|
|
|
|
load_world_bank_dashboard_with_slices,
|
2021-12-16 19:11:47 -05:00
|
|
|
load_world_bank_data,
|
2021-07-01 11:03:07 -04:00
|
|
|
)
|
|
|
|
from tests.integration_tests.fixtures.energy_dashboard import (
|
|
|
|
load_energy_table_with_slice,
|
2021-12-16 19:11:47 -05:00
|
|
|
load_energy_table_data,
|
2021-07-01 11:03:07 -04:00
|
|
|
)
|
|
|
|
from tests.integration_tests.test_app import app # isort:skip
|
2019-11-20 10:47:06 -05:00
|
|
|
from superset import db, security_manager
|
2017-11-07 23:23:40 -05:00
|
|
|
from superset.connectors.sqla.models import SqlaTable
|
|
|
|
from superset.models import core as models
|
2022-06-24 20:57:04 -04:00
|
|
|
from superset.utils.core import get_user_id, get_username, override_user
|
2022-01-16 01:32:50 -05:00
|
|
|
from superset.utils.database import get_example_database
|
2019-10-18 17:44:27 -04:00
|
|
|
|
2016-11-10 02:08:22 -05:00
|
|
|
from .base_tests import SupersetTestCase
|
2016-10-02 21:03:19 -04:00
|
|
|
|
2016-10-20 18:30:09 -04:00
|
|
|
ROLE_TABLES_PERM_DATA = {
|
2019-06-25 16:34:48 -04:00
|
|
|
"role_name": "override_me",
|
|
|
|
"database": [
|
|
|
|
{
|
|
|
|
"datasource_type": "table",
|
2019-07-17 00:36:56 -04:00
|
|
|
"name": "examples",
|
2019-06-25 16:34:48 -04:00
|
|
|
"schema": [{"name": "", "datasources": ["birth_names"]}],
|
|
|
|
}
|
|
|
|
],
|
2016-10-20 18:30:09 -04:00
|
|
|
}
|
|
|
|
|
|
|
|
ROLE_ALL_PERM_DATA = {
|
2019-06-25 16:34:48 -04:00
|
|
|
"role_name": "override_me",
|
|
|
|
"database": [
|
|
|
|
{
|
|
|
|
"datasource_type": "table",
|
2019-07-17 00:36:56 -04:00
|
|
|
"name": "examples",
|
2019-06-25 16:34:48 -04:00
|
|
|
"schema": [{"name": "", "datasources": ["birth_names"]}],
|
|
|
|
},
|
2017-11-08 00:32:45 -05:00
|
|
|
],
|
2016-10-20 18:30:09 -04:00
|
|
|
}
|
2016-10-02 21:03:19 -04:00
|
|
|
|
2017-01-24 21:11:51 -05:00
|
|
|
EXTEND_ROLE_REQUEST = (
|
2019-06-25 16:34:48 -04:00
|
|
|
"/superset/approve?datasource_type={}&datasource_id={}&"
|
|
|
|
"created_by={}&role_to_extend={}"
|
|
|
|
)
|
2017-01-24 21:11:51 -05:00
|
|
|
GRANT_ROLE_REQUEST = (
|
2019-06-25 16:34:48 -04:00
|
|
|
"/superset/approve?datasource_type={}&datasource_id={}&"
|
|
|
|
"created_by={}&role_to_grant={}"
|
|
|
|
)
|
|
|
|
TEST_ROLE_1 = "test_role1"
|
|
|
|
TEST_ROLE_2 = "test_role2"
|
|
|
|
DB_ACCESS_ROLE = "db_access_role"
|
|
|
|
SCHEMA_ACCESS_ROLE = "schema_access_role"
|
2017-01-24 21:11:51 -05:00
|
|
|
|
2017-02-08 14:52:58 -05:00
|
|
|
|
2020-06-29 18:36:06 -04:00
|
|
|
class TestRequestAccess(SupersetTestCase):
|
2016-10-20 18:30:09 -04:00
|
|
|
@classmethod
|
|
|
|
def setUpClass(cls):
|
2019-11-20 10:47:06 -05:00
|
|
|
with app.app_context():
|
|
|
|
security_manager.add_role("override_me")
|
|
|
|
security_manager.add_role(TEST_ROLE_1)
|
|
|
|
security_manager.add_role(TEST_ROLE_2)
|
|
|
|
security_manager.add_role(DB_ACCESS_ROLE)
|
|
|
|
security_manager.add_role(SCHEMA_ACCESS_ROLE)
|
|
|
|
db.session.commit()
|
2016-10-20 18:30:09 -04:00
|
|
|
|
|
|
|
@classmethod
|
|
|
|
def tearDownClass(cls):
|
2019-11-20 10:47:06 -05:00
|
|
|
with app.app_context():
|
|
|
|
override_me = security_manager.find_role("override_me")
|
|
|
|
db.session.delete(override_me)
|
|
|
|
db.session.delete(security_manager.find_role(TEST_ROLE_1))
|
|
|
|
db.session.delete(security_manager.find_role(TEST_ROLE_2))
|
|
|
|
db.session.delete(security_manager.find_role(DB_ACCESS_ROLE))
|
|
|
|
db.session.delete(security_manager.find_role(SCHEMA_ACCESS_ROLE))
|
|
|
|
db.session.commit()
|
2016-10-20 18:30:09 -04:00
|
|
|
|
|
|
|
def setUp(self):
|
2019-06-25 16:34:48 -04:00
|
|
|
self.login("admin")
|
2016-10-20 18:30:09 -04:00
|
|
|
|
|
|
|
def tearDown(self):
|
|
|
|
self.logout()
|
2019-06-25 16:34:48 -04:00
|
|
|
override_me = security_manager.find_role("override_me")
|
2016-10-20 18:30:09 -04:00
|
|
|
override_me.permissions = []
|
|
|
|
db.session.commit()
|
2020-08-06 18:33:48 -04:00
|
|
|
db.session.close()
|
2016-10-20 18:30:09 -04:00
|
|
|
|
2016-10-02 21:03:19 -04:00
|
|
|
|
2022-06-24 20:57:04 -04:00
|
|
|
@pytest.mark.parametrize(
|
|
|
|
"username,user_id",
|
|
|
|
[
|
|
|
|
(None, None),
|
|
|
|
("alpha", 5),
|
|
|
|
("gamma", 2),
|
|
|
|
],
|
|
|
|
)
|
|
|
|
def test_get_user_id(
|
|
|
|
app_context: AppContext,
|
|
|
|
mocker: MockFixture,
|
|
|
|
username: Optional[str],
|
|
|
|
user_id: Optional[int],
|
|
|
|
) -> None:
|
|
|
|
mock_g = mocker.patch("superset.utils.core.g", spec={})
|
|
|
|
mock_g.user = security_manager.find_user(username)
|
|
|
|
assert get_user_id() == user_id
|
|
|
|
|
|
|
|
|
2022-05-13 00:03:05 -04:00
|
|
|
@pytest.mark.parametrize(
|
|
|
|
"username",
|
|
|
|
[
|
|
|
|
None,
|
2022-06-24 20:57:04 -04:00
|
|
|
"alpha",
|
2022-05-13 00:03:05 -04:00
|
|
|
"gamma",
|
|
|
|
],
|
|
|
|
)
|
2022-06-24 20:57:04 -04:00
|
|
|
def test_get_username(
|
|
|
|
app_context: AppContext,
|
|
|
|
mocker: MockFixture,
|
|
|
|
username: Optional[str],
|
|
|
|
) -> None:
|
|
|
|
mock_g = mocker.patch("superset.utils.core.g", spec={})
|
|
|
|
mock_g.user = security_manager.find_user(username)
|
2022-05-13 00:03:05 -04:00
|
|
|
assert get_username() == username
|
|
|
|
|
|
|
|
|
2022-07-05 13:57:40 -04:00
|
|
|
@pytest.mark.parametrize("username", [None, "alpha", "gamma"])
|
|
|
|
@pytest.mark.parametrize("force", [False, True])
|
2022-06-24 20:57:04 -04:00
|
|
|
def test_override_user(
|
|
|
|
app_context: AppContext,
|
|
|
|
mocker: MockFixture,
|
|
|
|
username: str,
|
2022-07-05 13:57:40 -04:00
|
|
|
force: bool,
|
2022-06-24 20:57:04 -04:00
|
|
|
) -> None:
|
|
|
|
mock_g = mocker.patch("superset.utils.core.g", spec={})
|
2022-05-13 00:03:05 -04:00
|
|
|
admin = security_manager.find_user(username="admin")
|
|
|
|
user = security_manager.find_user(username)
|
|
|
|
|
2022-07-05 13:57:40 -04:00
|
|
|
with override_user(user, force):
|
|
|
|
assert mock_g.user == user
|
|
|
|
|
2022-06-24 20:57:04 -04:00
|
|
|
assert not hasattr(mock_g, "user")
|
2022-05-13 00:03:05 -04:00
|
|
|
|
2022-07-05 13:57:40 -04:00
|
|
|
mock_g.user = None
|
|
|
|
|
|
|
|
with override_user(user, force):
|
2022-06-24 20:57:04 -04:00
|
|
|
assert mock_g.user == user
|
2022-05-13 00:03:05 -04:00
|
|
|
|
2022-07-05 13:57:40 -04:00
|
|
|
assert mock_g.user is None
|
2022-05-13 00:03:05 -04:00
|
|
|
|
2022-06-24 20:57:04 -04:00
|
|
|
mock_g.user = admin
|
2022-05-13 00:03:05 -04:00
|
|
|
|
2022-07-05 13:57:40 -04:00
|
|
|
with override_user(user, force):
|
|
|
|
assert mock_g.user == user if force else admin
|
2022-05-13 00:03:05 -04:00
|
|
|
|
2022-06-24 20:57:04 -04:00
|
|
|
assert mock_g.user == admin
|
2022-05-13 00:03:05 -04:00
|
|
|
|
|
|
|
|
2019-06-25 16:34:48 -04:00
|
|
|
if __name__ == "__main__":
|
2016-10-02 21:03:19 -04:00
|
|
|
unittest.main()
|