mirror of https://github.com/apache/superset.git
538 lines
18 KiB
Python
538 lines
18 KiB
Python
# Licensed to the Apache Software Foundation (ASF) under one
|
|
# or more contributor license agreements. See the NOTICE file
|
|
# distributed with this work for additional information
|
|
# regarding copyright ownership. The ASF licenses this file
|
|
# to you under the Apache License, Version 2.0 (the
|
|
# "License"); you may not use this file except in compliance
|
|
# with the License. You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing,
|
|
# software distributed under the License is distributed on an
|
|
# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
|
|
# KIND, either express or implied. See the License for the
|
|
# specific language governing permissions and limitations
|
|
# under the License.
|
|
# isort:skip_file
|
|
"""Unit tests for Superset"""
|
|
from datetime import datetime
|
|
import imp
|
|
import json
|
|
from contextlib import contextmanager
|
|
from typing import Any, Dict, Union, List, Optional
|
|
from unittest.mock import Mock, patch
|
|
|
|
import pandas as pd
|
|
import pytest
|
|
from flask import Response
|
|
from flask_appbuilder.security.sqla import models as ab_models
|
|
from flask_testing import TestCase
|
|
from sqlalchemy.engine.interfaces import Dialect
|
|
from sqlalchemy.ext.declarative.api import DeclarativeMeta
|
|
from sqlalchemy.orm import Session
|
|
from sqlalchemy.sql import func
|
|
from sqlalchemy.dialects.mysql import dialect
|
|
|
|
from tests.integration_tests.test_app import app
|
|
from superset.sql_parse import CtasMethod
|
|
from superset import db, security_manager
|
|
from superset.connectors.base.models import BaseDatasource
|
|
from superset.connectors.sqla.models import SqlaTable
|
|
from superset.models import core as models
|
|
from superset.models.slice import Slice
|
|
from superset.models.core import Database
|
|
from superset.models.dashboard import Dashboard
|
|
from superset.models.datasource_access_request import DatasourceAccessRequest
|
|
from superset.utils.core import get_example_default_schema
|
|
from superset.utils.database import get_example_database
|
|
from superset.views.base_api import BaseSupersetModelRestApi
|
|
|
|
FAKE_DB_NAME = "fake_db_100"
|
|
test_client = app.test_client()
|
|
|
|
|
|
def login(client: Any, username: str = "admin", password: str = "general"):
|
|
resp = get_resp(client, "/login/", data=dict(username=username, password=password))
|
|
assert "User confirmation needed" not in resp
|
|
|
|
|
|
def get_resp(
|
|
client: Any,
|
|
url: str,
|
|
data: Any = None,
|
|
follow_redirects: bool = True,
|
|
raise_on_error: bool = True,
|
|
json_: Optional[str] = None,
|
|
):
|
|
"""Shortcut to get the parsed results while following redirects"""
|
|
if data:
|
|
resp = client.post(url, data=data, follow_redirects=follow_redirects)
|
|
elif json_:
|
|
resp = client.post(url, json=json_, follow_redirects=follow_redirects)
|
|
else:
|
|
resp = client.get(url, follow_redirects=follow_redirects)
|
|
if raise_on_error and resp.status_code > 400:
|
|
raise Exception("http request failed with code {}".format(resp.status_code))
|
|
return resp.data.decode("utf-8")
|
|
|
|
|
|
def post_assert_metric(
|
|
client: Any, uri: str, data: Dict[str, Any], func_name: str
|
|
) -> Response:
|
|
"""
|
|
Simple client post with an extra assertion for statsd metrics
|
|
|
|
:param client: test client for superset api requests
|
|
:param uri: The URI to use for the HTTP POST
|
|
:param data: The JSON data payload to be posted
|
|
:param func_name: The function name that the HTTP POST triggers
|
|
for the statsd metric assertion
|
|
:return: HTTP Response
|
|
"""
|
|
with patch.object(
|
|
BaseSupersetModelRestApi, "incr_stats", return_value=None
|
|
) as mock_method:
|
|
rv = client.post(uri, json=data)
|
|
if 200 <= rv.status_code < 400:
|
|
mock_method.assert_called_once_with("success", func_name)
|
|
else:
|
|
mock_method.assert_called_once_with("error", func_name)
|
|
return rv
|
|
|
|
|
|
@pytest.fixture
|
|
def logged_in_admin():
|
|
"""Fixture with app context and logged in admin user."""
|
|
with app.app_context():
|
|
login(test_client, username="admin")
|
|
yield
|
|
test_client.get("/logout/", follow_redirects=True)
|
|
|
|
|
|
class SupersetTestCase(TestCase):
|
|
default_schema_backend_map = {
|
|
"sqlite": "main",
|
|
"mysql": "superset",
|
|
"postgresql": "public",
|
|
"presto": "default",
|
|
"hive": "default",
|
|
}
|
|
|
|
maxDiff = -1
|
|
|
|
def create_app(self):
|
|
return app
|
|
|
|
@staticmethod
|
|
def get_nonexistent_numeric_id(model):
|
|
return (db.session.query(func.max(model.id)).scalar() or 0) + 1
|
|
|
|
@staticmethod
|
|
def get_birth_names_dataset() -> SqlaTable:
|
|
return SupersetTestCase.get_table(name="birth_names")
|
|
|
|
@staticmethod
|
|
def create_user_with_roles(
|
|
username: str, roles: List[str], should_create_roles: bool = False
|
|
):
|
|
user_to_create = security_manager.find_user(username)
|
|
if not user_to_create:
|
|
security_manager.add_user(
|
|
username,
|
|
username,
|
|
username,
|
|
f"{username}@superset.com",
|
|
security_manager.find_role("Gamma"), # it needs a role
|
|
password="general",
|
|
)
|
|
db.session.commit()
|
|
user_to_create = security_manager.find_user(username)
|
|
assert user_to_create
|
|
user_to_create.roles = []
|
|
for chosen_user_role in roles:
|
|
if should_create_roles:
|
|
# copy role from gamma but without data permissions
|
|
security_manager.copy_role("Gamma", chosen_user_role, merge=False)
|
|
user_to_create.roles.append(security_manager.find_role(chosen_user_role))
|
|
db.session.commit()
|
|
return user_to_create
|
|
|
|
@staticmethod
|
|
def create_user(
|
|
username: str,
|
|
password: str,
|
|
role_name: str,
|
|
first_name: str = "admin",
|
|
last_name: str = "user",
|
|
email: str = "admin@fab.org",
|
|
) -> Union[ab_models.User, bool]:
|
|
role_admin = security_manager.find_role(role_name)
|
|
return security_manager.add_user(
|
|
username, first_name, last_name, email, role_admin, password
|
|
)
|
|
|
|
@staticmethod
|
|
def get_user(username: str) -> ab_models.User:
|
|
user = (
|
|
db.session.query(security_manager.user_model)
|
|
.filter_by(username=username)
|
|
.one_or_none()
|
|
)
|
|
return user
|
|
|
|
@staticmethod
|
|
def get_role(name: str) -> Optional[ab_models.User]:
|
|
user = (
|
|
db.session.query(security_manager.role_model)
|
|
.filter_by(name=name)
|
|
.one_or_none()
|
|
)
|
|
return user
|
|
|
|
@staticmethod
|
|
def get_table_by_id(table_id: int) -> SqlaTable:
|
|
return db.session.query(SqlaTable).filter_by(id=table_id).one()
|
|
|
|
@staticmethod
|
|
def is_module_installed(module_name):
|
|
try:
|
|
imp.find_module(module_name)
|
|
return True
|
|
except ImportError:
|
|
return False
|
|
|
|
def get_or_create(self, cls, criteria, session, **kwargs):
|
|
obj = session.query(cls).filter_by(**criteria).first()
|
|
if not obj:
|
|
obj = cls(**criteria)
|
|
obj.__dict__.update(**kwargs)
|
|
session.add(obj)
|
|
session.commit()
|
|
return obj
|
|
|
|
def login(self, username="admin", password="general"):
|
|
return login(self.client, username, password)
|
|
|
|
def get_slice(
|
|
self, slice_name: str, session: Session, expunge_from_session: bool = True
|
|
) -> Slice:
|
|
slc = session.query(Slice).filter_by(slice_name=slice_name).one()
|
|
if expunge_from_session:
|
|
session.expunge_all()
|
|
return slc
|
|
|
|
@staticmethod
|
|
def get_table(
|
|
name: str, database_id: Optional[int] = None, schema: Optional[str] = None
|
|
) -> SqlaTable:
|
|
schema = schema or get_example_default_schema()
|
|
|
|
return (
|
|
db.session.query(SqlaTable)
|
|
.filter_by(
|
|
database_id=database_id
|
|
or SupersetTestCase.get_database_by_name("examples").id,
|
|
schema=schema,
|
|
table_name=name,
|
|
)
|
|
.one()
|
|
)
|
|
|
|
@staticmethod
|
|
def get_database_by_id(db_id: int) -> Database:
|
|
return db.session.query(Database).filter_by(id=db_id).one()
|
|
|
|
@staticmethod
|
|
def get_database_by_name(database_name: str = "main") -> Database:
|
|
if database_name == "examples":
|
|
return get_example_database()
|
|
else:
|
|
raise ValueError("Database doesn't exist")
|
|
|
|
@staticmethod
|
|
def get_datasource_mock() -> BaseDatasource:
|
|
datasource = Mock()
|
|
results = Mock()
|
|
results.query = Mock()
|
|
results.status = Mock()
|
|
results.error_message = None
|
|
results.df = pd.DataFrame()
|
|
datasource.type = "table"
|
|
datasource.query = Mock(return_value=results)
|
|
mock_dttm_col = Mock()
|
|
datasource.get_col = Mock(return_value=mock_dttm_col)
|
|
datasource.query = Mock(return_value=results)
|
|
datasource.database = Mock()
|
|
datasource.database.db_engine_spec = Mock()
|
|
datasource.database.db_engine_spec.mutate_expression_label = lambda x: x
|
|
return datasource
|
|
|
|
def get_resp(
|
|
self, url, data=None, follow_redirects=True, raise_on_error=True, json_=None
|
|
):
|
|
return get_resp(self.client, url, data, follow_redirects, raise_on_error, json_)
|
|
|
|
def get_json_resp(
|
|
self, url, data=None, follow_redirects=True, raise_on_error=True, json_=None
|
|
):
|
|
"""Shortcut to get the parsed results while following redirects"""
|
|
resp = self.get_resp(url, data, follow_redirects, raise_on_error, json_)
|
|
return json.loads(resp)
|
|
|
|
def get_access_requests(self, username, ds_type, ds_id):
|
|
DAR = DatasourceAccessRequest
|
|
return (
|
|
db.session.query(DAR)
|
|
.filter(
|
|
DAR.created_by == security_manager.find_user(username=username),
|
|
DAR.datasource_type == ds_type,
|
|
DAR.datasource_id == ds_id,
|
|
)
|
|
.first()
|
|
)
|
|
|
|
def logout(self):
|
|
self.client.get("/logout/", follow_redirects=True)
|
|
|
|
def grant_public_access_to_table(self, table):
|
|
role_name = "Public"
|
|
self.grant_role_access_to_table(table, role_name)
|
|
|
|
def grant_role_access_to_table(self, table, role_name):
|
|
role = security_manager.find_role(role_name)
|
|
perms = db.session.query(ab_models.PermissionView).all()
|
|
for perm in perms:
|
|
if (
|
|
perm.permission.name == "datasource_access"
|
|
and perm.view_menu
|
|
and table.perm in perm.view_menu.name
|
|
):
|
|
security_manager.add_permission_role(role, perm)
|
|
|
|
def revoke_public_access_to_table(self, table):
|
|
role_name = "Public"
|
|
self.revoke_role_access_to_table(role_name, table)
|
|
|
|
def revoke_role_access_to_table(self, role_name, table):
|
|
public_role = security_manager.find_role(role_name)
|
|
perms = db.session.query(ab_models.PermissionView).all()
|
|
for perm in perms:
|
|
if (
|
|
perm.permission.name == "datasource_access"
|
|
and perm.view_menu
|
|
and table.perm in perm.view_menu.name
|
|
):
|
|
security_manager.del_permission_role(public_role, perm)
|
|
|
|
def run_sql(
|
|
self,
|
|
sql,
|
|
client_id=None,
|
|
username=None,
|
|
raise_on_error=False,
|
|
query_limit=None,
|
|
database_name="examples",
|
|
sql_editor_id=None,
|
|
select_as_cta=False,
|
|
tmp_table_name=None,
|
|
schema=None,
|
|
ctas_method=CtasMethod.TABLE,
|
|
template_params="{}",
|
|
):
|
|
if username:
|
|
self.logout()
|
|
self.login(username=username)
|
|
dbid = SupersetTestCase.get_database_by_name(database_name).id
|
|
json_payload = {
|
|
"database_id": dbid,
|
|
"sql": sql,
|
|
"client_id": client_id,
|
|
"queryLimit": query_limit,
|
|
"sql_editor_id": sql_editor_id,
|
|
"ctas_method": ctas_method,
|
|
"templateParams": template_params,
|
|
}
|
|
if tmp_table_name:
|
|
json_payload["tmp_table_name"] = tmp_table_name
|
|
if select_as_cta:
|
|
json_payload["select_as_cta"] = select_as_cta
|
|
if schema:
|
|
json_payload["schema"] = schema
|
|
|
|
resp = self.get_json_resp(
|
|
"/superset/sql_json/", raise_on_error=False, json_=json_payload
|
|
)
|
|
if raise_on_error and "error" in resp:
|
|
raise Exception("run_sql failed")
|
|
return resp
|
|
|
|
def create_fake_db(self):
|
|
self.login(username="admin")
|
|
database_name = FAKE_DB_NAME
|
|
db_id = 100
|
|
extra = """{
|
|
"schemas_allowed_for_file_upload":
|
|
["this_schema_is_allowed", "this_schema_is_allowed_too"]
|
|
}"""
|
|
|
|
return self.get_or_create(
|
|
cls=models.Database,
|
|
criteria={"database_name": database_name},
|
|
session=db.session,
|
|
sqlalchemy_uri="sqlite:///:memory:",
|
|
id=db_id,
|
|
extra=extra,
|
|
)
|
|
|
|
def delete_fake_db(self):
|
|
database = (
|
|
db.session.query(Database)
|
|
.filter(Database.database_name == FAKE_DB_NAME)
|
|
.scalar()
|
|
)
|
|
if database:
|
|
db.session.delete(database)
|
|
|
|
def create_fake_db_for_macros(self):
|
|
self.login(username="admin")
|
|
database_name = "db_for_macros_testing"
|
|
db_id = 200
|
|
database = self.get_or_create(
|
|
cls=models.Database,
|
|
criteria={"database_name": database_name},
|
|
session=db.session,
|
|
sqlalchemy_uri="db_for_macros_testing://user@host:8080/hive",
|
|
id=db_id,
|
|
)
|
|
|
|
def mock_get_dialect() -> Dialect:
|
|
return dialect()
|
|
|
|
database.get_dialect = mock_get_dialect
|
|
return database
|
|
|
|
@staticmethod
|
|
def delete_fake_db_for_macros():
|
|
database = (
|
|
db.session.query(Database)
|
|
.filter(Database.database_name == "db_for_macros_testing")
|
|
.scalar()
|
|
)
|
|
if database:
|
|
db.session.delete(database)
|
|
db.session.commit()
|
|
|
|
def validate_sql(
|
|
self,
|
|
sql,
|
|
client_id=None,
|
|
username=None,
|
|
raise_on_error=False,
|
|
database_name="examples",
|
|
template_params=None,
|
|
):
|
|
if username:
|
|
self.logout()
|
|
self.login(username=username)
|
|
dbid = SupersetTestCase.get_database_by_name(database_name).id
|
|
resp = self.get_json_resp(
|
|
"/superset/validate_sql_json/",
|
|
raise_on_error=False,
|
|
data=dict(
|
|
database_id=dbid,
|
|
sql=sql,
|
|
client_id=client_id,
|
|
templateParams=template_params,
|
|
),
|
|
)
|
|
if raise_on_error and "error" in resp:
|
|
raise Exception("validate_sql failed")
|
|
return resp
|
|
|
|
def get_dash_by_slug(self, dash_slug):
|
|
sesh = db.session()
|
|
return sesh.query(Dashboard).filter_by(slug=dash_slug).first()
|
|
|
|
def get_assert_metric(self, uri: str, func_name: str) -> Response:
|
|
"""
|
|
Simple client get with an extra assertion for statsd metrics
|
|
|
|
:param uri: The URI to use for the HTTP GET
|
|
:param func_name: The function name that the HTTP GET triggers
|
|
for the statsd metric assertion
|
|
:return: HTTP Response
|
|
"""
|
|
with patch.object(
|
|
BaseSupersetModelRestApi, "incr_stats", return_value=None
|
|
) as mock_method:
|
|
rv = self.client.get(uri)
|
|
if 200 <= rv.status_code < 400:
|
|
mock_method.assert_called_once_with("success", func_name)
|
|
else:
|
|
mock_method.assert_called_once_with("error", func_name)
|
|
return rv
|
|
|
|
def delete_assert_metric(self, uri: str, func_name: str) -> Response:
|
|
"""
|
|
Simple client delete with an extra assertion for statsd metrics
|
|
|
|
:param uri: The URI to use for the HTTP DELETE
|
|
:param func_name: The function name that the HTTP DELETE triggers
|
|
for the statsd metric assertion
|
|
:return: HTTP Response
|
|
"""
|
|
with patch.object(
|
|
BaseSupersetModelRestApi, "incr_stats", return_value=None
|
|
) as mock_method:
|
|
rv = self.client.delete(uri)
|
|
if 200 <= rv.status_code < 400:
|
|
mock_method.assert_called_once_with("success", func_name)
|
|
else:
|
|
mock_method.assert_called_once_with("error", func_name)
|
|
return rv
|
|
|
|
def post_assert_metric(
|
|
self, uri: str, data: Dict[str, Any], func_name: str
|
|
) -> Response:
|
|
return post_assert_metric(self.client, uri, data, func_name)
|
|
|
|
def put_assert_metric(
|
|
self, uri: str, data: Dict[str, Any], func_name: str
|
|
) -> Response:
|
|
"""
|
|
Simple client put with an extra assertion for statsd metrics
|
|
|
|
:param uri: The URI to use for the HTTP PUT
|
|
:param data: The JSON data payload to be posted
|
|
:param func_name: The function name that the HTTP PUT triggers
|
|
for the statsd metric assertion
|
|
:return: HTTP Response
|
|
"""
|
|
with patch.object(
|
|
BaseSupersetModelRestApi, "incr_stats", return_value=None
|
|
) as mock_method:
|
|
rv = self.client.put(uri, json=data)
|
|
if 200 <= rv.status_code < 400:
|
|
mock_method.assert_called_once_with("success", func_name)
|
|
else:
|
|
mock_method.assert_called_once_with("error", func_name)
|
|
return rv
|
|
|
|
@classmethod
|
|
def get_dttm(cls):
|
|
return datetime.strptime("2019-01-02 03:04:05.678900", "%Y-%m-%d %H:%M:%S.%f")
|
|
|
|
|
|
@contextmanager
|
|
def db_insert_temp_object(obj: DeclarativeMeta):
|
|
"""Insert a temporary object in database; delete when done."""
|
|
session = db.session
|
|
try:
|
|
session.add(obj)
|
|
session.commit()
|
|
yield obj
|
|
finally:
|
|
session.delete(obj)
|
|
session.commit()
|