You are viewing a plain text version of this content. The canonical link for it is here.
Posted to slide-dev@jakarta.apache.org by ju...@apache.org on 2002/06/24 13:22:52 UTC

cvs commit: jakarta-slide/testsuite/testsuite/junit/xmltestcases/ACL/functional/AccessControlMethods/ACLPrecondition Protected-inherited-ACE-Conflict.xml ACE-ConflictGrantWriteDenyAll.xml ACE-ConflictGrantWriteACLDenyWrite.xml ACE-ConflictGrantReadDenyAll.xml ACE-ConflictGrantReadACLDenyRead.xml ACE-ConflictGrantAllDenyWriteACL.xml ACE-ConflictGrantAllDenyWrite.xml ACE-ConflictGrantAllDenyReadACL.xml ACE-ConflictGrantAllDenyRead.xml

juergen     2002/06/24 04:22:52

  Added:       testsuite/testsuite/junit/xmltestcases/ACL/functional/AccessControlMethods/ACLPrecondition
                        Protected-inherited-ACE-Conflict.xml
                        ACE-ConflictGrantWriteDenyAll.xml
                        ACE-ConflictGrantWriteACLDenyWrite.xml
                        ACE-ConflictGrantReadDenyAll.xml
                        ACE-ConflictGrantReadACLDenyRead.xml
                        ACE-ConflictGrantAllDenyWriteACL.xml
                        ACE-ConflictGrantAllDenyWrite.xml
                        ACE-ConflictGrantAllDenyReadACL.xml
                        ACE-ConflictGrantAllDenyRead.xml
  Log:
  New ACL test cases
  
  Revision  Changes    Path
  1.1                  jakarta-slide/testsuite/testsuite/junit/xmltestcases/ACL/functional/AccessControlMethods/ACLPrecondition/Protected-inherited-ACE-Conflict.xml
  
  Index: Protected-inherited-ACE-Conflict.xml
  ===================================================================
  <?xml version="1.0" encoding="UTF-8"?>
   <!DOCTYPE test SYSTEM "../../../../../Tprocessor.dtd">
      
  <test>
  
  	<specification>
  		<abstract> Test to check if Dav:protect-ace-conflict works. </abstract>
  		
  		<description>
  		1) MKCOL command which creates a child collection (/test)
  		2) PUT command which creates a child file (/test/test.xml)
  		3) ACL command which grants all access to the user %user% on the file /test/test.xml
  		4) ACL command which denies write access to the user %user% on the file /test/test.xml
  		</description>
  		
  		<expectedResult> ACL command should return 403 Forbidden   </expectedResult>
  	</specification>
  	
     <step>
  <user varUsage="user">2%user%</user>
  <password varUsage="user">2%user%</password>
    <request>
     <command varUsage="globalVariableCollection,globalVariableServerName">MKCOL /%globalVariableServerName%/%globalVariableCollection%/test HTTP/1.1</command>
     <header>Accept-Language: en-us</header>
     <header>Translate: f</header>
     <header>User-Agent: Microsoft Data Access Internet Publishing Provider DAV</header>
     <header>Connection: Keep-Alive</header>
    </request>
    <response>
     <command>HTTP/1.0 201 Created</command>
     <header>Date: Wed, 21 Feb 2001 12:55:57 GMT+01:00</header>
     <header>Content-Language: en</header>
     <header>Servlet-Engine: Tomcat Web Server/3.2 beta 4 (JSP 1.1; Servlet 2.2; Java 1.3.0; Windows NT 4.0 x86; java.vendor=Sun Microsystems Inc.)</header>
    </response>
   </step>
   
   <step>
   <user varUsage="user">2%user%</user>
   <password varUsage="user">2%user%</password>
    <request>
     <command varUsage="globalVariableCollection,globalVariableServerName">PUT /%globalVariableServerName%/%globalVariableCollection%/test/test.xml HTTP/1.1</command>
     <header>Accept-Language: en-us</header>
     <header>Translate: f</header>
     <header>User-Agent: Microsoft Data Access Internet Publishing Provider DAV</header>
     <header>Connection: Keep-Alive</header>
     <body fileReference="../../../../contentDirectory/validXML.xm1">
     </body>
    </request>
    <response>
     <command>HTTP/1.0 201 Created</command>
    </response>
   </step>
  
  <step>
  <user varUsage="user">2%user%</user>
  <password varUsage="user">2%user%</password>
    <request>
     <command varUsage="globalVariableCollection,globalVariableServerName">ACL /%globalVariableServerName%/%globalVariableCollection%/test/test.xml HTTP/1.1</command>
     <header>Content-Type: text/xml; charset=utf-8</header>  
     <header>User-Agent: Jakarta HTTP Client/1.0</header>
     <body varUsage="host,user"><![CDATA[
        <D:acl xmlns:D="DAV:">
           
           <D:ace>  
              <D:principal>
                 <D:href>/administration/security/users/%host%/%user%</D:href>
              </D:principal>
              <D:grant>
                 <D:privilege><D:all /></D:privilege>
              </D:grant>
              <D:inherited>
                 <D:href>true</D:href>
              </D:inherited>       
          </D:ace>   
  
  
        </D:acl>]]>
     </body>
    </request>
    <response>
     <command>HTTP/1.0 200 OK</command>
    </response>
   </step>
   
   
  <step>
    <request>
     <command varUsage="globalVariableCollection,globalVariableServerName">ACL /%globalVariableServerName%/%globalVariableCollection%/test/test.xml HTTP/1.1</command>
     <header>Content-Type: text/xml; charset=utf-8</header>  
     <header>User-Agent: Jakarta HTTP Client/1.0</header>
     <body varUsage="globalVariableCollection,globalVariableServerName"><![CDATA[
        <D:acl xmlns:D="DAV:">
           <D:ace>
              <D:principal>
                 <D:href>/administration/security/users/%host%/%user%</D:href>
              </D:principal>
              <D:deny>
                 <D:privilege><D:write /></D:privilege>
              </D:deny>
           </D:ace>
        </D:acl>]]>
     </body>
    </request>
    <response>
     <command>HTTP/1.0 200 OK</command>
    </response>
   </step>
   
  
         
  
    <cleanup>
    
    <step>
  <user varUsage="user">2%user%</user>
  <password varUsage="user">2%user%</password>
    <request>
     <command varUsage="globalVariableCollection,globalVariableServerName">ACL /%globalVariableServerName%/%globalVariableCollection%/ HTTP/1.1</command>
     <header>Content-Type: text/xml; charset=utf-8</header>  
     <header>User-Agent: Jakarta HTTP Client/1.0</header>
     <body varUsage="globalVariableCollection,globalVariableServerName"><![CDATA[
        <D:acl xmlns:D="DAV:">
           <D:ace>
              <D:principal>
                 <D:all></D:all>
              </D:principal>
              <D:grant>
                 <D:privilege><D:all /></D:privilege>
              </D:grant>
           </D:ace>
        </D:acl>]]>
     </body>
    </request>
    <response>
     <command>HTTP/1.0 200 OK</command>
    </response>
   </step>
   
      <step>
  <user varUsage="user">2%user%</user>
  <password varUsage="user">2%user%</password>
    <request>
     <command varUsage="repeatCounter,globalVariableCollection,globalVariableServerName">DELETE /%globalVariableServerName%/%globalVariableCollection%/test HTTP/1.1</command>
     <header>Accept-Language: en-us</header>
     <header>Destroy: NoUndelete</header>
     <header>Translate: f</header>
     <header>User-Agent: Microsoft Data Access Internet Publishing Provider DAV</header>
     <header>Connection: Keep-Alive</header>
    </request>
    <response>
     <command>HTTP/1.0 204 No Content</command>
     <header>Date: Tue, 13 Feb 2001 17:14:41 GMT+01:00</header>
     <header>Content-Language: en</header>
     <header>Servlet-Engine: Tomcat Web Server/3.2 beta 4 (JSP 1.1; Servlet 2.2; Java 1.3.0; Windows NT 4.0 x86; java.vendor=Sun Microsystems Inc.)</header>
    </response>
   </step>
   
   </cleanup>
  
  </test>
  
  
  
  1.1                  jakarta-slide/testsuite/testsuite/junit/xmltestcases/ACL/functional/AccessControlMethods/ACLPrecondition/ACE-ConflictGrantWriteDenyAll.xml
  
  Index: ACE-ConflictGrantWriteDenyAll.xml
  ===================================================================
  <?xml version="1.0" encoding="UTF-8"?>
   <!DOCTYPE test SYSTEM "../../../../../Tprocessor.dtd">
      
  <test>
  
  	<specification>
  		<abstract> Test to check if Dav:ace-conflict works. </abstract>
  		
  		<description>
  		1) ACL command which grants write access and denies all access to the user %user%
  		</description>
  		
  		<expectedResult> ACL command should return 403 Forbidden   </expectedResult>
  	</specification>
  
  <step>
  <user varUsage="user">2%user%</user>
  <password varUsage="user">2%user%</password>
    <request>
     <command varUsage="globalVariableCollection,globalVariableServerName">ACL /%globalVariableServerName%/%globalVariableCollection%/ HTTP/1.1</command>
     <header>Content-Type: text/xml; charset=utf-8</header>  
     <header>User-Agent: Jakarta HTTP Client/1.0</header>
     <body varUsage="host,user"><![CDATA[
        <D:acl xmlns:D="DAV:">
           
           <D:ace>  
              <D:principal>
                 <D:href>/administration/security/users/%host%/%user%</D:href>
              </D:principal>
              <D:grant>
                 <D:privilege><D:write /></D:privilege>
              </D:grant>         
          </D:ace>   
  
          <D:ace>
              <D:principal>
                 <D:href>/administration/security/users/%host%/%user%</D:href>
              </D:principal>
              <D:deny>
                 <D:privilege><D:all /></D:privilege>
              </D:deny>         
           </D:ace>
  
        </D:acl>]]>
     </body>
    </request>
    <response>
     <command>HTTP/1.0 403 Forbidden</command>
    </response>
   </step>
   
  
         
  
    <cleanup>
    
    <step>
  <user varUsage="user">2%user%</user>
  <password varUsage="user">2%user%</password>
    <request>
     <command varUsage="globalVariableCollection,globalVariableServerName">ACL /%globalVariableServerName%/%globalVariableCollection%/ HTTP/1.1</command>
     <header>Content-Type: text/xml; charset=utf-8</header>  
     <header>User-Agent: Jakarta HTTP Client/1.0</header>
     <body varUsage="globalVariableCollection,globalVariableServerName"><![CDATA[
        <D:acl xmlns:D="DAV:">
           <D:ace>
              <D:principal>
                 <D:all></D:all>
              </D:principal>
              <D:grant>
                 <D:privilege><D:all /></D:privilege>
              </D:grant>
           </D:ace>
        </D:acl>]]>
     </body>
    </request>
    <response>
     <command>HTTP/1.0 200 OK</command>
    </response>
   </step>
   
   </cleanup>
  
  </test>
  
  
  
  1.1                  jakarta-slide/testsuite/testsuite/junit/xmltestcases/ACL/functional/AccessControlMethods/ACLPrecondition/ACE-ConflictGrantWriteACLDenyWrite.xml
  
  Index: ACE-ConflictGrantWriteACLDenyWrite.xml
  ===================================================================
  <?xml version="1.0" encoding="UTF-8"?>
   <!DOCTYPE test SYSTEM "../../../../../Tprocessor.dtd">
      
  <test>
  
  	<specification>
  		<abstract> Test to check if Dav:ace-conflict works. </abstract>
  		
  		<description>
  		1) ACL command which grants write-acl access and denies write access to the user %user%
  		</description>
  		
  		<expectedResult> ACL command should return 403 Forbidden   </expectedResult>
  	</specification>
  
  <step>
  <user varUsage="user">2%user%</user>
  <password varUsage="user">2%user%</password>
    <request>
     <command varUsage="globalVariableCollection,globalVariableServerName">ACL /%globalVariableServerName%/%globalVariableCollection%/ HTTP/1.1</command>
     <header>Content-Type: text/xml; charset=utf-8</header>  
     <header>User-Agent: Jakarta HTTP Client/1.0</header>
     <body varUsage="host,user"><![CDATA[
        <D:acl xmlns:D="DAV:">
           
           <D:ace>  
              <D:principal>
                 <D:href>/administration/security/users/%host%/%user%</D:href>
              </D:principal>
              <D:grant>
                 <D:privilege><D:write-acl /></D:privilege>
              </D:grant>         
          </D:ace>   
  
          <D:ace>
              <D:principal>
                 <D:href>/administration/security/users/%host%/%user%</D:href>
              </D:principal>
              <D:deny>
                 <D:privilege><D:write /></D:privilege>
              </D:deny>         
           </D:ace>
  
        </D:acl>]]>
     </body>
    </request>
    <response>
     <command>HTTP/1.0 403 Forbidden</command>
    </response>
   </step>
   
  
         
  
    <cleanup>
    
    <step>
  <user varUsage="user">2%user%</user>
  <password varUsage="user">2%user%</password>
    <request>
     <command varUsage="globalVariableCollection,globalVariableServerName">ACL /%globalVariableServerName%/%globalVariableCollection%/ HTTP/1.1</command>
     <header>Content-Type: text/xml; charset=utf-8</header>  
     <header>User-Agent: Jakarta HTTP Client/1.0</header>
     <body varUsage="globalVariableCollection,globalVariableServerName"><![CDATA[
        <D:acl xmlns:D="DAV:">
           <D:ace>
              <D:principal>
                 <D:all></D:all>
              </D:principal>
              <D:grant>
                 <D:privilege><D:all /></D:privilege>
              </D:grant>
           </D:ace>
        </D:acl>]]>
     </body>
    </request>
    <response>
     <command>HTTP/1.0 200 OK</command>
    </response>
   </step>
   
   </cleanup>
  
  </test>
  
  
  
  1.1                  jakarta-slide/testsuite/testsuite/junit/xmltestcases/ACL/functional/AccessControlMethods/ACLPrecondition/ACE-ConflictGrantReadDenyAll.xml
  
  Index: ACE-ConflictGrantReadDenyAll.xml
  ===================================================================
  <?xml version="1.0" encoding="UTF-8"?>
   <!DOCTYPE test SYSTEM "../../../../../Tprocessor.dtd">
      
  <test>
  
  	<specification>
  		<abstract> Test to check if Dav:ace-conflict works. </abstract>
  		
  		<description>
  		1) ACL command which grants read access and denies all access to the user %user%
  		</description>
  		
  		<expectedResult> ACL command should return 403 Forbidden   </expectedResult>
  	</specification>
  
  <step>
  <user varUsage="user">2%user%</user>
  <password varUsage="user">2%user%</password>
    <request>
     <command varUsage="globalVariableCollection,globalVariableServerName">ACL /%globalVariableServerName%/%globalVariableCollection%/ HTTP/1.1</command>
     <header>Content-Type: text/xml; charset=utf-8</header>  
     <header>User-Agent: Jakarta HTTP Client/1.0</header>
     <body varUsage="host,user"><![CDATA[
        <D:acl xmlns:D="DAV:">
           
           <D:ace>  
              <D:principal>
                 <D:href>/administration/security/users/%host%/%user%</D:href>
              </D:principal>
              <D:grant>
                 <D:privilege><D:read /></D:privilege>
              </D:grant>         
          </D:ace>   
  
          <D:ace>
              <D:principal>
                 <D:href>/administration/security/users/%host%/%user%</D:href>
              </D:principal>
              <D:deny>
                 <D:privilege><D:all /></D:privilege>
              </D:deny>         
           </D:ace>
  
        </D:acl>]]>
     </body>
    </request>
    <response>
     <command>HTTP/1.0 403 Forbidden</command>
    </response>
   </step>
   
  
         
  
    <cleanup>
    
    <step>
  <user varUsage="user">2%user%</user>
  <password varUsage="user">2%user%</password>
    <request>
     <command varUsage="globalVariableCollection,globalVariableServerName">ACL /%globalVariableServerName%/%globalVariableCollection%/ HTTP/1.1</command>
     <header>Content-Type: text/xml; charset=utf-8</header>  
     <header>User-Agent: Jakarta HTTP Client/1.0</header>
     <body varUsage="globalVariableCollection,globalVariableServerName"><![CDATA[
        <D:acl xmlns:D="DAV:">
           <D:ace>
              <D:principal>
                 <D:all></D:all>
              </D:principal>
              <D:grant>
                 <D:privilege><D:all /></D:privilege>
              </D:grant>
           </D:ace>
        </D:acl>]]>
     </body>
    </request>
    <response>
     <command>HTTP/1.0 200 OK</command>
    </response>
   </step>
   
   </cleanup>
  
  </test>
  
  
  
  1.1                  jakarta-slide/testsuite/testsuite/junit/xmltestcases/ACL/functional/AccessControlMethods/ACLPrecondition/ACE-ConflictGrantReadACLDenyRead.xml
  
  Index: ACE-ConflictGrantReadACLDenyRead.xml
  ===================================================================
  <?xml version="1.0" encoding="UTF-8"?>
   <!DOCTYPE test SYSTEM "../../../../../Tprocessor.dtd">
      
  <test>
  
  	<specification>
  		<abstract> Test to check if Dav:ace-conflict works. </abstract>
  		
  		<description>
  		1) ACL command which grants read-acl access and denies read access to the user %user%
  		</description>
  		
  		<expectedResult> ACL command should return 403 Forbidden   </expectedResult>
  	</specification>
  
  <step>
  <user varUsage="user">2%user%</user>
  <password varUsage="user">2%user%</password>
    <request>
     <command varUsage="globalVariableCollection,globalVariableServerName">ACL /%globalVariableServerName%/%globalVariableCollection%/ HTTP/1.1</command>
     <header>Content-Type: text/xml; charset=utf-8</header>  
     <header>User-Agent: Jakarta HTTP Client/1.0</header>
     <body varUsage="host,user"><![CDATA[
        <D:acl xmlns:D="DAV:">
           
           <D:ace>  
              <D:principal>
                 <D:href>/administration/security/users/%host%/%user%</D:href>
              </D:principal>
              <D:grant>
                 <D:privilege><D:read-acl /></D:privilege>
              </D:grant>         
          </D:ace>   
  
          <D:ace>
              <D:principal>
                 <D:href>/administration/security/users/%host%/%user%</D:href>
              </D:principal>
              <D:deny>
                 <D:privilege><D:read /></D:privilege>
              </D:deny>         
           </D:ace>
  
        </D:acl>]]>
     </body>
    </request>
    <response>
     <command>HTTP/1.0 403 Forbidden</command>
    </response>
   </step>
   
  
         
  
    <cleanup>
    
    <step>
  <user varUsage="user">2%user%</user>
  <password varUsage="user">2%user%</password>
    <request>
     <command varUsage="globalVariableCollection,globalVariableServerName">ACL /%globalVariableServerName%/%globalVariableCollection%/ HTTP/1.1</command>
     <header>Content-Type: text/xml; charset=utf-8</header>  
     <header>User-Agent: Jakarta HTTP Client/1.0</header>
     <body varUsage="globalVariableCollection,globalVariableServerName"><![CDATA[
        <D:acl xmlns:D="DAV:">
           <D:ace>
              <D:principal>
                 <D:all></D:all>
              </D:principal>
              <D:grant>
                 <D:privilege><D:all /></D:privilege>
              </D:grant>
           </D:ace>
        </D:acl>]]>
     </body>
    </request>
    <response>
     <command>HTTP/1.0 200 OK</command>
    </response>
   </step>
   
   </cleanup>
  
  </test>
  
  
  
  1.1                  jakarta-slide/testsuite/testsuite/junit/xmltestcases/ACL/functional/AccessControlMethods/ACLPrecondition/ACE-ConflictGrantAllDenyWriteACL.xml
  
  Index: ACE-ConflictGrantAllDenyWriteACL.xml
  ===================================================================
  <?xml version="1.0" encoding="UTF-8"?>
   <!DOCTYPE test SYSTEM "../../../../../Tprocessor.dtd">
      
  <test>
  
  	<specification>
  		<abstract> Test to check if Dav:ace-conflict works. </abstract>
  		
  		<description>
  		1) ACL command which grants all access and denies write-acl access to the user %user%
  		</description>
  		
  		<expectedResult> ACL command should return 403 Forbidden   </expectedResult>
  	</specification>
  
  <step>
  <user varUsage="user">2%user%</user>
  <password varUsage="user">2%user%</password>
    <request>
     <command varUsage="globalVariableCollection,globalVariableServerName">ACL /%globalVariableServerName%/%globalVariableCollection%/ HTTP/1.1</command>
     <header>Content-Type: text/xml; charset=utf-8</header>  
     <header>User-Agent: Jakarta HTTP Client/1.0</header>
     <body varUsage="host,user"><![CDATA[
        <D:acl xmlns:D="DAV:">
           
           <D:ace>  
              <D:principal>
                 <D:href>/administration/security/users/%host%/%user%</D:href>
              </D:principal>
              <D:grant>
                 <D:privilege><D:all /></D:privilege>
              </D:grant>         
          </D:ace>   
  
          <D:ace>
              <D:principal>
                 <D:href>/administration/security/users/%host%/%user%</D:href>
              </D:principal>
              <D:deny>
                 <D:privilege><D:write-acl /></D:privilege>
              </D:deny>         
           </D:ace>
  
        </D:acl>]]>
     </body>
    </request>
    <response>
     <command>HTTP/1.0 403 Forbidden</command>
    </response>
   </step>
   
  
         
  
    <cleanup>
    
    <step>
  <user varUsage="user">2%user%</user>
  <password varUsage="user">2%user%</password>
    <request>
     <command varUsage="globalVariableCollection,globalVariableServerName">ACL /%globalVariableServerName%/%globalVariableCollection%/ HTTP/1.1</command>
     <header>Content-Type: text/xml; charset=utf-8</header>  
     <header>User-Agent: Jakarta HTTP Client/1.0</header>
     <body varUsage="globalVariableCollection,globalVariableServerName"><![CDATA[
        <D:acl xmlns:D="DAV:">
           <D:ace>
              <D:principal>
                 <D:all></D:all>
              </D:principal>
              <D:grant>
                 <D:privilege><D:all /></D:privilege>
              </D:grant>
           </D:ace>
        </D:acl>]]>
     </body>
    </request>
    <response>
     <command>HTTP/1.0 200 OK</command>
    </response>
   </step>
   
   </cleanup>
  
  </test>
  
  
  
  1.1                  jakarta-slide/testsuite/testsuite/junit/xmltestcases/ACL/functional/AccessControlMethods/ACLPrecondition/ACE-ConflictGrantAllDenyWrite.xml
  
  Index: ACE-ConflictGrantAllDenyWrite.xml
  ===================================================================
  <?xml version="1.0" encoding="UTF-8"?>
   <!DOCTYPE test SYSTEM "../../../../../Tprocessor.dtd">
      
  <test>
  
  	<specification>
  		<abstract> Test to check if Dav:ace-conflict works. </abstract>
  		
  		<description>
  		1) ACL command which grants all access and denies write access to the user %user%
  		</description>
  		
  		<expectedResult> ACL command should return 403 Forbidden   </expectedResult>
  	</specification>
  
  <step>
  <user varUsage="user">2%user%</user>
  <password varUsage="user">2%user%</password>
    <request>
     <command varUsage="globalVariableCollection,globalVariableServerName">ACL /%globalVariableServerName%/%globalVariableCollection%/ HTTP/1.1</command>
     <header>Content-Type: text/xml; charset=utf-8</header>  
     <header>User-Agent: Jakarta HTTP Client/1.0</header>
     <body varUsage="host,user"><![CDATA[
        <D:acl xmlns:D="DAV:">
           
           <D:ace>  
              <D:principal>
                 <D:href>/administration/security/users/%host%/%user%</D:href>
              </D:principal>
              <D:grant>
                 <D:privilege><D:all /></D:privilege>
              </D:grant>         
          </D:ace>   
  
          <D:ace>
              <D:principal>
                 <D:href>/administration/security/users/%host%/%user%</D:href>
              </D:principal>
              <D:deny>
                 <D:privilege><D:write /></D:privilege>
              </D:deny>         
           </D:ace>
  
        </D:acl>]]>
     </body>
    </request>
    <response>
     <command>HTTP/1.0 403 Forbidden</command>
    </response>
   </step>
   
  
         
  
    <cleanup>
    
    <step>
  <user varUsage="user">2%user%</user>
  <password varUsage="user">2%user%</password>
    <request>
     <command varUsage="globalVariableCollection,globalVariableServerName">ACL /%globalVariableServerName%/%globalVariableCollection%/ HTTP/1.1</command>
     <header>Content-Type: text/xml; charset=utf-8</header>  
     <header>User-Agent: Jakarta HTTP Client/1.0</header>
     <body varUsage="globalVariableCollection,globalVariableServerName"><![CDATA[
        <D:acl xmlns:D="DAV:">
           <D:ace>
              <D:principal>
                 <D:all></D:all>
              </D:principal>
              <D:grant>
                 <D:privilege><D:all /></D:privilege>
              </D:grant>
           </D:ace>
        </D:acl>]]>
     </body>
    </request>
    <response>
     <command>HTTP/1.0 200 OK</command>
    </response>
   </step>
   
   </cleanup>
  
  </test>
  
  
  
  1.1                  jakarta-slide/testsuite/testsuite/junit/xmltestcases/ACL/functional/AccessControlMethods/ACLPrecondition/ACE-ConflictGrantAllDenyReadACL.xml
  
  Index: ACE-ConflictGrantAllDenyReadACL.xml
  ===================================================================
  <?xml version="1.0" encoding="UTF-8"?>
   <!DOCTYPE test SYSTEM "../../../../../Tprocessor.dtd">
      
  <test>
  
  	<specification>
  		<abstract> Test to check if Dav:ace-conflict works. </abstract>
  		
  		<description>
  		1) ACL command which grants all access and denies read-acl access to the user %user%
  		</description>
  		
  		<expectedResult> ACL command should return 403 Forbidden   </expectedResult>
  	</specification>
  
  <step>
  <user varUsage="user">2%user%</user>
  <password varUsage="user">2%user%</password>
    <request>
     <command varUsage="globalVariableCollection,globalVariableServerName">ACL /%globalVariableServerName%/%globalVariableCollection%/ HTTP/1.1</command>
     <header>Content-Type: text/xml; charset=utf-8</header>  
     <header>User-Agent: Jakarta HTTP Client/1.0</header>
     <body varUsage="host,user"><![CDATA[
        <D:acl xmlns:D="DAV:">
           
           <D:ace>  
              <D:principal>
                 <D:href>/administration/security/users/%host%/%user%</D:href>
              </D:principal>
              <D:grant>
                 <D:privilege><D:all /></D:privilege>
              </D:grant>         
          </D:ace>   
  
          <D:ace>
              <D:principal>
                 <D:href>/administration/security/users/%host%/%user%</D:href>
              </D:principal>
              <D:deny>
                 <D:privilege><D:read-acl /></D:privilege>
              </D:deny>         
           </D:ace>
  
        </D:acl>]]>
     </body>
    </request>
    <response>
     <command>HTTP/1.0 403 Forbidden</command>
    </response>
   </step>
   
  
         
  
    <cleanup>
    
    <step>
  <user varUsage="user">2%user%</user>
  <password varUsage="user">2%user%</password>
    <request>
     <command varUsage="globalVariableCollection,globalVariableServerName">ACL /%globalVariableServerName%/%globalVariableCollection%/ HTTP/1.1</command>
     <header>Content-Type: text/xml; charset=utf-8</header>  
     <header>User-Agent: Jakarta HTTP Client/1.0</header>
     <body varUsage="globalVariableCollection,globalVariableServerName"><![CDATA[
        <D:acl xmlns:D="DAV:">
           <D:ace>
              <D:principal>
                 <D:all></D:all>
              </D:principal>
              <D:grant>
                 <D:privilege><D:all /></D:privilege>
              </D:grant>
           </D:ace>
        </D:acl>]]>
     </body>
    </request>
    <response>
     <command>HTTP/1.0 200 OK</command>
    </response>
   </step>
   
   </cleanup>
  
  </test>
  
  
  
  1.1                  jakarta-slide/testsuite/testsuite/junit/xmltestcases/ACL/functional/AccessControlMethods/ACLPrecondition/ACE-ConflictGrantAllDenyRead.xml
  
  Index: ACE-ConflictGrantAllDenyRead.xml
  ===================================================================
  <?xml version="1.0" encoding="UTF-8"?>
   <!DOCTYPE test SYSTEM "../../../../../Tprocessor.dtd">
      
  <test>
  
  	<specification>
  		<abstract> Test to check if Dav:ace-conflict works. </abstract>
  		
  		<description>
  		1) ACL command which grants all access and denies read access to the user %user%
  		</description>
  		
  		<expectedResult> ACL command should return 403 Forbidden   </expectedResult>
  	</specification>
  
  <step>
  <user varUsage="user">2%user%</user>
  <password varUsage="user">2%user%</password>
    <request>
     <command varUsage="globalVariableCollection,globalVariableServerName">ACL /%globalVariableServerName%/%globalVariableCollection%/ HTTP/1.1</command>
     <header>Content-Type: text/xml; charset=utf-8</header>  
     <header>User-Agent: Jakarta HTTP Client/1.0</header>
     <body varUsage="host,user"><![CDATA[
        <D:acl xmlns:D="DAV:">
           
           <D:ace>  
              <D:principal>
                 <D:href>/administration/security/users/%host%/%user%</D:href>
              </D:principal>
              <D:grant>
                 <D:privilege><D:all /></D:privilege>
              </D:grant>         
          </D:ace>   
  
          <D:ace>
              <D:principal>
                 <D:href>/administration/security/users/%host%/%user%</D:href>
              </D:principal>
              <D:deny>
                 <D:privilege><D:read /></D:privilege>
              </D:deny>         
           </D:ace>
  
        </D:acl>]]>
     </body>
    </request>
    <response>
     <command>HTTP/1.0 403 Forbidden</command>
    </response>
   </step>
   
  
         
  
    <cleanup>
    
    <step>
  <user varUsage="user">2%user%</user>
  <password varUsage="user">2%user%</password>
    <request>
     <command varUsage="globalVariableCollection,globalVariableServerName">ACL /%globalVariableServerName%/%globalVariableCollection%/ HTTP/1.1</command>
     <header>Content-Type: text/xml; charset=utf-8</header>  
     <header>User-Agent: Jakarta HTTP Client/1.0</header>
     <body varUsage="globalVariableCollection,globalVariableServerName"><![CDATA[
        <D:acl xmlns:D="DAV:">
           <D:ace>
              <D:principal>
                 <D:all></D:all>
              </D:principal>
              <D:grant>
                 <D:privilege><D:all /></D:privilege>
              </D:grant>
           </D:ace>
        </D:acl>]]>
     </body>
    </request>
    <response>
     <command>HTTP/1.0 200 OK</command>
    </response>
   </step>
   
   </cleanup>
  
  </test>
  
  
  

--
To unsubscribe, e-mail:   <ma...@jakarta.apache.org>
For additional commands, e-mail: <ma...@jakarta.apache.org>