You are viewing a plain text version of this content. The canonical link for it is here.
Posted to oak-commits@jackrabbit.apache.org by an...@apache.org on 2013/07/18 16:00:51 UTC
svn commit: r1504476 - in /jackrabbit/oak/trunk/oak-jcr: pom.xml
src/test/java/org/apache/jackrabbit/oak/jcr/security/authorization/CopyTest.java
Author: angela
Date: Thu Jul 18 14:00:50 2013
New Revision: 1504476
URL: http://svn.apache.org/r1504476
Log:
OAK-920: test cases
Added:
jackrabbit/oak/trunk/oak-jcr/src/test/java/org/apache/jackrabbit/oak/jcr/security/authorization/CopyTest.java
Modified:
jackrabbit/oak/trunk/oak-jcr/pom.xml
Modified: jackrabbit/oak/trunk/oak-jcr/pom.xml
URL: http://svn.apache.org/viewvc/jackrabbit/oak/trunk/oak-jcr/pom.xml?rev=1504476&r1=1504475&r2=1504476&view=diff
==============================================================================
--- jackrabbit/oak/trunk/oak-jcr/pom.xml (original)
+++ jackrabbit/oak/trunk/oak-jcr/pom.xml Thu Jul 18 14:00:50 2013
@@ -290,6 +290,10 @@
org.apache.jackrabbit.oak.jcr.security.authorization.VersionManagementTest#testRemoveVersion3 <!-- OAK-168 -->
org.apache.jackrabbit.oak.jcr.security.authorization.VersionManagementTest#testAddVersionLabel <!-- OAK-168 -->
+ org.apache.jackrabbit.oak.jcr.security.authorization.CopyTest#testCopyInvisibleSubTree <!-- OAK-920 -->
+ org.apache.jackrabbit.oak.jcr.security.authorization.CopyTest#testCopyInvisibleProperty <!-- OAK-920 -->
+ org.apache.jackrabbit.oak.jcr.security.authorization.CopyTest#testCopyInvisibleAcContent <!-- OAK-920 -->
+
org.apache.jackrabbit.oak.jcr.security.user.MemberNodeImportTest <!-- OAK-414, OAK-482 -->
org.apache.jackrabbit.oak.jcr.security.user.UserImportTest#testImportGroupIntoUsersTree <!-- OAK-821 -->
Added: jackrabbit/oak/trunk/oak-jcr/src/test/java/org/apache/jackrabbit/oak/jcr/security/authorization/CopyTest.java
URL: http://svn.apache.org/viewvc/jackrabbit/oak/trunk/oak-jcr/src/test/java/org/apache/jackrabbit/oak/jcr/security/authorization/CopyTest.java?rev=1504476&view=auto
==============================================================================
--- jackrabbit/oak/trunk/oak-jcr/src/test/java/org/apache/jackrabbit/oak/jcr/security/authorization/CopyTest.java (added)
+++ jackrabbit/oak/trunk/oak-jcr/src/test/java/org/apache/jackrabbit/oak/jcr/security/authorization/CopyTest.java Thu Jul 18 14:00:50 2013
@@ -0,0 +1,134 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one or more
+ * contributor license agreements. See the NOTICE file distributed with
+ * this work for additional information regarding copyright ownership.
+ * The ASF licenses this file to You under the Apache License, Version 2.0
+ * (the "License"); you may not use this file except in compliance with
+ * the License. You may obtain a copy of the License at
+ *
+ * http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+package org.apache.jackrabbit.oak.jcr.security.authorization;
+
+import javax.jcr.AccessDeniedException;
+import javax.jcr.Node;
+import javax.jcr.security.Privilege;
+
+import org.apache.jackrabbit.oak.spi.security.authorization.AccessControlConstants;
+import org.apache.jackrabbit.oak.spi.security.privilege.PrivilegeConstants;
+import org.apache.jackrabbit.util.Text;
+import org.junit.Before;
+import org.junit.Ignore;
+import org.junit.Test;
+
+/**
+ * Testing Workspace#copy with limited permissions both on source and target
+ * location.
+ */
+public class CopyTest extends AbstractEvaluationTest {
+
+ private String targetPath;
+ private String destPath;
+
+ @Override
+ @Before
+ protected void setUp() throws Exception {
+ super.setUp();
+
+ Node target = testRootNode.addNode("target");
+ targetPath = target.getPath();
+ superuser.save();
+ testSession.refresh(false);
+
+ destPath = targetPath + "/copy";
+ }
+
+ @Test
+ public void testCopyNoWritePermissionAtTarget() throws Exception {
+ try {
+ testSession.getWorkspace().copy(path, destPath);
+ fail("no write permission at copy target");
+ } catch (AccessDeniedException e) {
+ // success
+ }
+ }
+
+ @Test
+ public void testCopyWithInsufficientPermissions() throws Exception {
+ allow(targetPath, privilegesFromName(Privilege.JCR_ADD_CHILD_NODES));
+ try {
+ testSession.getWorkspace().copy(path, destPath);
+ fail("insufficient write permission at copy target");
+ } catch (AccessDeniedException e) {
+ // success
+ }
+ }
+
+ @Test
+ public void testCopyWithFullPermissions() throws Exception {
+ allow(targetPath, privilegesFromName(Privilege.JCR_ALL));
+
+ testSession.getWorkspace().copy(path, destPath);
+
+ assertTrue(testSession.nodeExists(destPath));
+ }
+
+ @Ignore("OAK-920") // FIXME
+ @Test
+ public void testCopyInvisibleSubTree() throws Exception {
+ deny(childNPath, privilegesFromName(Privilege.JCR_READ));
+ allow(targetPath, privilegesFromName(Privilege.JCR_ALL));
+
+ testSession.getWorkspace().copy(path, destPath);
+
+ Node copiedNode = testSession.getNode(destPath);
+ String childName = Text.getName(childNPath);
+ assertFalse(copiedNode.hasNode(childName));
+ assertTrue(copiedNode.hasNode(Text.getName(childNPath2)));
+
+ superuser.refresh(false);
+ assertFalse(superuser.nodeExists(destPath + '/' + childName));
+ }
+
+ @Ignore("OAK-920") // FIXME
+ @Test
+ public void testCopyInvisibleProperty() throws Exception {
+ deny(childNPath, privilegesFromName(PrivilegeConstants.REP_READ_PROPERTIES));
+ allow(targetPath, privilegesFromName(Privilege.JCR_ALL));
+
+ testSession.getWorkspace().copy(path, destPath);
+
+ Node copiedNode = testSession.getNode(destPath);
+ String childName = Text.getName(childNPath);
+ assertTrue(copiedNode.hasNode(childName));
+ assertFalse(copiedNode.hasProperty(childName + '/'+ propertyName1));
+
+ superuser.refresh(false);
+ assertFalse(superuser.nodeExists(destPath + '/' + childName + '/' + propertyName1));
+ }
+
+ @Ignore("OAK-920") // FIXME
+ @Test
+ public void testCopyInvisibleAcContent() throws Exception {
+ deny(childNPath, privilegesFromName(Privilege.JCR_LOCK_MANAGEMENT));
+ allow(targetPath, privilegesFromName(PrivilegeConstants.REP_WRITE));
+
+ testSession.getWorkspace().copy(path, destPath);
+
+ Node copiedNode = testSession.getNode(destPath);
+ String childName = Text.getName(childNPath);
+ assertTrue(copiedNode.hasNode(childName));
+
+ Node child = copiedNode.getNode(childName);
+ assertFalse(child.hasNode(AccessControlConstants.REP_POLICY));
+
+ superuser.refresh(false);
+ assertFalse(superuser.nodeExists(targetPath + '/' + childName + "/rep:policy"));
+ }
+}
\ No newline at end of file