mirror of https://github.com/apache/superset.git
92 lines
3.2 KiB
Python
92 lines
3.2 KiB
Python
# Licensed to the Apache Software Foundation (ASF) under one
|
|
# or more contributor license agreements. See the NOTICE file
|
|
# distributed with this work for additional information
|
|
# regarding copyright ownership. The ASF licenses this file
|
|
# to you under the Apache License, Version 2.0 (the
|
|
# "License"); you may not use this file except in compliance
|
|
# with the License. You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing,
|
|
# software distributed under the License is distributed on an
|
|
# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
|
|
# KIND, either express or implied. See the License for the
|
|
# specific language governing permissions and limitations
|
|
# under the License.
|
|
from typing import Optional
|
|
|
|
import pytest
|
|
from sqlalchemy.engine.url import make_url
|
|
|
|
from superset.exceptions import SupersetSecurityException
|
|
from superset.security.analytics_db_safety import check_sqlalchemy_uri
|
|
|
|
|
|
@pytest.mark.parametrize(
|
|
"sqlalchemy_uri, error, error_message",
|
|
[
|
|
("postgres://user:password@test.com", False, None),
|
|
(
|
|
"sqlite:///home/superset/bad.db",
|
|
True,
|
|
"SQLiteDialect_pysqlite cannot be used as a data source for security reasons.",
|
|
),
|
|
(
|
|
"sqlite+pysqlite:///home/superset/bad.db",
|
|
True,
|
|
"SQLiteDialect_pysqlite cannot be used as a data source for security reasons.",
|
|
),
|
|
(
|
|
"sqlite+aiosqlite:///home/superset/bad.db",
|
|
True,
|
|
"SQLiteDialect_pysqlite cannot be used as a data source for security reasons.",
|
|
),
|
|
(
|
|
"sqlite+pysqlcipher:///home/superset/bad.db",
|
|
True,
|
|
"SQLiteDialect_pysqlite cannot be used as a data source for security reasons.",
|
|
),
|
|
(
|
|
"sqlite+:///home/superset/bad.db",
|
|
True,
|
|
"SQLiteDialect_pysqlite cannot be used as a data source for security reasons.",
|
|
),
|
|
(
|
|
"sqlite+new+driver:///home/superset/bad.db",
|
|
True,
|
|
"SQLiteDialect_pysqlite cannot be used as a data source for security reasons.",
|
|
),
|
|
(
|
|
"sqlite+new+:///home/superset/bad.db",
|
|
True,
|
|
"SQLiteDialect_pysqlite cannot be used as a data source for security reasons.",
|
|
),
|
|
(
|
|
"shillelagh:///home/superset/bad.db",
|
|
True,
|
|
"shillelagh cannot be used as a data source for security reasons.",
|
|
),
|
|
(
|
|
"shillelagh+apsw:///home/superset/bad.db",
|
|
True,
|
|
"shillelagh cannot be used as a data source for security reasons.",
|
|
),
|
|
("shillelagh+:///home/superset/bad.db", False, None),
|
|
(
|
|
"shillelagh+something:///home/superset/bad.db",
|
|
False,
|
|
None,
|
|
),
|
|
],
|
|
)
|
|
def test_check_sqlalchemy_uri(
|
|
sqlalchemy_uri: str, error: bool, error_message: Optional[str]
|
|
):
|
|
if error:
|
|
with pytest.raises(SupersetSecurityException) as excinfo:
|
|
check_sqlalchemy_uri(make_url(sqlalchemy_uri))
|
|
assert str(excinfo.value) == error_message
|
|
else:
|
|
check_sqlalchemy_uri(make_url(sqlalchemy_uri))
|