Java tutorial
/*************************GO-LICENSE-START********************************* * Copyright 2014 ThoughtWorks, Inc. * * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. *************************GO-LICENSE-END***********************************/ package com.thoughtworks.go.server.service; import com.thoughtworks.go.config.CaseInsensitiveString; import com.thoughtworks.go.config.GoConfigFileDao; import com.thoughtworks.go.domain.Pipeline; import com.thoughtworks.go.domain.Stage; import com.thoughtworks.go.fixture.PipelineWithTwoStages; import com.thoughtworks.go.server.dao.DatabaseAccessHelper; import com.thoughtworks.go.server.domain.Username; import com.thoughtworks.go.server.persistence.MaterialRepository; import com.thoughtworks.go.server.service.result.HttpLocalizedOperationResult; import com.thoughtworks.go.server.transaction.TransactionTemplate; import com.thoughtworks.go.server.util.UserHelper; import com.thoughtworks.go.util.GoConfigFileHelper; import org.apache.commons.httpclient.HttpStatus; import org.junit.After; import org.junit.Before; import org.junit.Test; import org.junit.runner.RunWith; import org.springframework.beans.factory.annotation.Autowired; import org.springframework.test.context.ContextConfiguration; import org.springframework.test.context.junit4.SpringJUnit4ClassRunner; import static org.hamcrest.Matchers.is; import static org.hamcrest.core.IsNot.not; import static org.hamcrest.core.IsNull.nullValue; import static org.junit.Assert.assertThat; @RunWith(SpringJUnit4ClassRunner.class) @ContextConfiguration(locations = { "classpath:WEB-INF/applicationContext-global.xml", "classpath:WEB-INF/applicationContext-dataLocalAccess.xml", "classpath:WEB-INF/applicationContext-acegi-security.xml" }) public class ScheduleServiceSecurityTest { @Autowired private GoConfigFileDao goConfigFileDao; @Autowired private ScheduleService scheduleService; @Autowired private DatabaseAccessHelper dbHelper; @Autowired private MaterialRepository materialRepository; @Autowired private TransactionTemplate transactionTemplate; private PipelineWithTwoStages fixture; private static GoConfigFileHelper configHelper = new GoConfigFileHelper(); @Before public void setUp() throws Exception { configHelper.onSetUp(); configHelper.usingCruiseConfigDao(goConfigFileDao); dbHelper.onSetUp(); fixture = new PipelineWithTwoStages(materialRepository, transactionTemplate); fixture.usingConfigHelper(configHelper).usingDbHelper(dbHelper).onSetUp(); } @After public void teardown() throws Exception { dbHelper.onTearDown(); fixture.onTearDown(); } @Test public void shouldReturnAppropriateHttpResultIfUserDoesNotHaveOperatePermission() throws Exception { configHelper.addSecurityWithAdminConfig(); configHelper.setOperatePermissionForGroup("defaultGroup", "jez"); Pipeline pipeline = fixture.createPipelineWithFirstStagePassedAndSecondStageRunning(); Username anonymous = new Username(new CaseInsensitiveString("anonymous")); HttpLocalizedOperationResult operationResult = new HttpLocalizedOperationResult(); Stage resultStage = scheduleService.cancelAndTriggerRelevantStages( pipeline.getStages().byName(fixture.ftStage).getId(), anonymous, operationResult); assertThat(resultStage, is(nullValue())); assertThat(operationResult.isSuccessful(), is(false)); assertThat(operationResult.httpCode(), is(HttpStatus.SC_UNAUTHORIZED)); } @Test public void shouldReturnAppropriateHttpResultIfTheStageIsInvalid() throws Exception { configHelper.addSecurityWithAdminConfig(); configHelper.setOperatePermissionForGroup("defaultGroup", "jez"); Username jez = new Username(new CaseInsensitiveString("jez")); HttpLocalizedOperationResult operationResult = new HttpLocalizedOperationResult(); Stage resultStage = scheduleService.cancelAndTriggerRelevantStages(-23l, jez, operationResult); assertThat(resultStage, is(nullValue())); assertThat(operationResult.isSuccessful(), is(false)); assertThat(operationResult.httpCode(), is(HttpStatus.SC_NOT_FOUND)); } @Test public void shouldReturnAppropriateHttpResultIfThePipelineAndStageNameAreInvalid() throws Exception { configHelper.addSecurityWithAdminConfig(); configHelper.setOperatePermissionForGroup("defaultGroup", "jez"); Username jez = new Username(new CaseInsensitiveString("jez")); HttpLocalizedOperationResult operationResult = new HttpLocalizedOperationResult(); Stage resultStage = scheduleService.cancelAndTriggerRelevantStages("invalid-pipeline", "inavlid-stage", jez, operationResult); assertThat(resultStage, is(nullValue())); assertThat(operationResult.isSuccessful(), is(false)); assertThat(operationResult.httpCode(), is(HttpStatus.SC_NOT_FOUND)); } @Test public void shouldNotThrowExceptionIfUserHasOperatePermission() throws Exception { configHelper.addSecurityWithAdminConfig(); Username user = UserHelper.getUserName(); configHelper.setOperatePermissionForGroup("defaultGroup", user.getUsername().toString()); Pipeline pipeline = fixture.createPipelineWithFirstStagePassedAndSecondStageRunning(); HttpLocalizedOperationResult operationResult = new HttpLocalizedOperationResult(); Stage stageForCancellation = pipeline.getStages().byName(fixture.ftStage); Stage resultStage = scheduleService.cancelAndTriggerRelevantStages(stageForCancellation.getId(), user, operationResult); assertThat(resultStage, is(not(nullValue()))); assertThat(operationResult.isSuccessful(), is(true)); assertThat(operationResult.httpCode(), is(HttpStatus.SC_OK)); //TODO: Check why stage result is not persisted after stage is cancelled // Stage mostRecent = stageDao.mostRecentStage(new StageConfigIdentifier(fixture.pipelineName, fixture.ftStage)); // assertThat(mostRecent.getResult(), is(StageResult.Cancelled)); } @Test public void shouldCancelStageGivenValidPipelineAndStageName() throws Exception { configHelper.addSecurityWithAdminConfig(); Username user = UserHelper.getUserName(); configHelper.setOperatePermissionForGroup("defaultGroup", user.getUsername().toString()); Pipeline pipeline = fixture.createPipelineWithFirstStagePassedAndSecondStageRunning(); HttpLocalizedOperationResult operationResult = new HttpLocalizedOperationResult(); Stage stageForCancellation = pipeline.getStages().byName(fixture.ftStage); Stage resultStage = scheduleService.cancelAndTriggerRelevantStages(pipeline.getName(), stageForCancellation.getName(), user, operationResult); assertThat(resultStage, is(not(nullValue()))); assertThat(operationResult.isSuccessful(), is(true)); assertThat(operationResult.httpCode(), is(HttpStatus.SC_OK)); } }