dialtone_common 0.1.0

Dialtone Common Code
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77

use crate::rest::users::web_user::{SystemPermission, SystemRole};

use super::user_authz_info::UserAuthzInfo;

pub fn authz_on_host(user_authz_info: &UserAuthzInfo, role: &SystemRole, host_name: &str) -> bool {
    let perm = SystemPermission {
        role: role.to_owned(),
        host_name: host_name.to_owned(),
    };
    user_authz_info.system_permissions.contains(&perm)
}

#[cfg(test)]
mod authz_on_host_tests {
    use dialtone_test_util::test_constants::{
        TEST_ACTORADMIN_ACCT, TEST_HOSTNAME, TEST_USERADMIN_ACCT,
    };

    use crate::{
        authz::{host::authz_on_host, user_authz_info::UserAuthzInfo},
        rest::users::web_user::{SystemPermission, SystemRole, UserStatus},
    };

    #[test]
    #[allow(non_snake_case)]
    fn GIVEN_useradmin_user_authz_info_WHEN_authz_useradmin_THEN_ok() {
        let user_authz = UserAuthzInfo {
            status: UserStatus::Active,
            acct: TEST_USERADMIN_ACCT.to_string(),
            system_permissions: vec![SystemPermission {
                role: SystemRole::UserAdmin,
                host_name: TEST_HOSTNAME.to_string(),
            }],
        };
        assert!(authz_on_host(
            &user_authz,
            &SystemRole::UserAdmin,
            TEST_HOSTNAME
        ));
    }

    #[test]
    #[allow(non_snake_case)]
    fn GIVEN_actoradmin_user_authz_info_WHEN_authz_actoradmin_THEN_ok() {
        let user_authz = UserAuthzInfo {
            status: UserStatus::Active,
            acct: TEST_ACTORADMIN_ACCT.to_string(),
            system_permissions: vec![SystemPermission {
                role: SystemRole::ActorAdmin,
                host_name: TEST_HOSTNAME.to_string(),
            }],
        };
        assert!(authz_on_host(
            &user_authz,
            &SystemRole::ActorAdmin,
            TEST_HOSTNAME
        ));
    }

    #[test]
    #[allow(non_snake_case)]
    fn GIVEN_useradmin_user_authz_info_WHEN_authz_actoradmin_THEN_err() {
        let user_authz = UserAuthzInfo {
            status: UserStatus::Active,
            acct: TEST_USERADMIN_ACCT.to_string(),
            system_permissions: vec![SystemPermission {
                role: SystemRole::UserAdmin,
                host_name: TEST_HOSTNAME.to_string(),
            }],
        };
        assert!(!authz_on_host(
            &user_authz,
            &SystemRole::ActorAdmin,
            TEST_HOSTNAME
        ));
    }
}