vincent/aptly
1
0
Fork 0
mirror of https://github.com/aptly-dev/aptly.git synced 2026-05-06 22:18:28 +00:00
Code Issues Projects Releases Wiki Activity

Uploaders rules facility: controlling who can upload .changes. #71

Browse Source
This commit is contained in:
Andrey Smirnov
2015-03-19 01:05:09 +03:00
parent bc68513708
commit 813b9593fa
2 changed files with 153 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

79
deb/uploaders_test.go Normal file
View File

@@ -0,0 +1,79 @@
package deb
import (
"github.com/smira/aptly/utils"
. "gopkg.in/check.v1"
)
type UploadersSuite struct {
}
var _ = Suite(&UploadersSuite{})
func (s *UploadersSuite) TestExpandGroups(c *C) {
u := &Uploaders{
Groups: map[string][]string{
"group1": {"key1", "group2"},
"group2": {"key1", "key2", "key3", "group3"},
"group3": {},
"group4": {"key1", "group5"},
"group6": {"key1", "group8"},
"group7": {"key2", "group6"},
"group8": {"group7"},
},
}
c.Check(u.ExpandGroups([]string{"group1"}), DeepEquals, []string{"key1", "key2", "key3"})
c.Check(u.ExpandGroups([]string{"group2"}), DeepEquals, []string{"key1", "key2", "key3"})
c.Check(u.ExpandGroups([]string{"group3"}), DeepEquals, []string{})
c.Check(u.ExpandGroups([]string{"group4"}), DeepEquals, []string{"key1", "group5"})
c.Check(u.ExpandGroups([]string{"group6"}), DeepEquals, []string{"key1", "key2"})
c.Check(u.ExpandGroups([]string{"group7"}), DeepEquals, []string{"key2", "key1"})
c.Check(u.ExpandGroups([]string{"group8"}), DeepEquals, []string{"key2", "key1"})
}
func (s *UploadersSuite) TestIsAllowed(c *C) {
u := &Uploaders{
Groups: map[string][]string{
"group1": {"37E1C17570096AD1", "EC4B033C70096AD1"},
},
Rules: []UploadersRule{
{
CompiledCondition: &FieldQuery{Field: "Source", Relation: VersionEqual, Value: "calamares"},
Allow: []string{"*"},
},
{
CompiledCondition: &FieldQuery{Field: "Source", Relation: VersionEqual, Value: "never-calamares"},
Deny: []string{"*"},
},
{
CompiledCondition: &FieldQuery{Field: "Source", Relation: VersionEqual, Value: "some-calamares"},
Allow: []string{"group1", "12345678"},
},
{
CompiledCondition: &FieldQuery{Field: "Source", Relation: VersionEqual, Value: "some-calamares"},
Deny: []string{"45678901", "12345678"},
},
},
}
// no keys - not allowed
c.Check(u.IsAllowed([]utils.GpgKey{}, &Changes{Stanza: Stanza{"Source": "calamares"}}), Equals, false)
// no rule - not allowed
c.Check(u.IsAllowed([]utils.GpgKey{"37E1C17570096AD1", "EC4B033C70096AD1"}, &Changes{Stanza: Stanza{"Source": "unknown-calamares"}}), Equals, false)
// first rule: allow anyone do stuff with calamares
c.Check(u.IsAllowed([]utils.GpgKey{"ABCD1234", "1234ABCD"}, &Changes{Stanza: Stanza{"Source": "calamares"}}), Equals, true)
// second rule: nobody is allowed to do stuff with never-calamares
c.Check(u.IsAllowed([]utils.GpgKey{"ABCD1234", "1234ABCD"}, &Changes{Stanza: Stanza{"Source": "never-calamares"}}), Equals, false)
// third rule: anyone from the group or explicit key
c.Check(u.IsAllowed([]utils.GpgKey{"45678901", "12345678"}, &Changes{Stanza: Stanza{"Source": "some-calamares"}}), Equals, true)
c.Check(u.IsAllowed([]utils.GpgKey{"37E1C17570096AD1"}, &Changes{Stanza: Stanza{"Source": "some-calamares"}}), Equals, true)
c.Check(u.IsAllowed([]utils.GpgKey{"70096AD1"}, &Changes{Stanza: Stanza{"Source": "some-calamares"}}), Equals, true)
// fourth rule: some are not allowed
c.Check(u.IsAllowed([]utils.GpgKey{"ABCD1234", "45678901"}, &Changes{Stanza: Stanza{"Source": "some-calamares"}}), Equals, false)
}