mirror of
https://github.com/ansible/awx.git
synced 2026-02-12 15:14:45 -03:30
817c3b36b9
Develop ability to list permissions for existing roles Create a model registry for RBAC-tracked models Write the data migration logic for creating the preloaded role definitions Write migration to migrate old Role into ObjectRole model This loops over the old Role model, knowing it is unique on object and role_field Most of the logic is concerned with identifying the needed permissions, and then corresponding role definition As needed, object roles are created and users then teams are assigned Write re-computation of cache logic for teams and then for object role permissions Migrate new RBAC internals to ansible_base Migrate tests to ansible_base Implement solution for visible_roles Expose URLs for DAB RBAC
79 lines
3.0 KiB
Python
79 lines
3.0 KiB
Python
import pytest
|
|
|
|
from prometheus_client.parser import text_string_to_metric_families
|
|
from awx.main import models
|
|
from awx.main.analytics.metrics import metrics
|
|
from awx.api.versioning import reverse
|
|
|
|
EXPECTED_VALUES = {
|
|
'awx_system_info': 1.0,
|
|
'awx_organizations_total': 1.0,
|
|
'awx_users_total': 1.0,
|
|
'awx_teams_total': 1.0,
|
|
'awx_inventories_total': 1.0,
|
|
'awx_projects_total': 1.0,
|
|
'awx_job_templates_total': 1.0,
|
|
'awx_workflow_job_templates_total': 1.0,
|
|
'awx_hosts_total': 1.0,
|
|
'awx_hosts_total': 1.0,
|
|
'awx_schedules_total': 1.0,
|
|
'awx_sessions_total': 0.0,
|
|
'awx_status_total': 0.0,
|
|
'awx_running_jobs_total': 0.0,
|
|
'awx_instance_capacity': 100.0,
|
|
'awx_instance_consumed_capacity': 0.0,
|
|
'awx_instance_remaining_capacity': 100.0,
|
|
'awx_instance_cpu': 0.0,
|
|
'awx_instance_memory': 0.0,
|
|
'awx_instance_info': 1.0,
|
|
'awx_license_instance_total': 0,
|
|
'awx_license_instance_free': 0,
|
|
'awx_pending_jobs_total': 0,
|
|
'awx_database_connections_total': 1,
|
|
}
|
|
|
|
|
|
@pytest.mark.django_db
|
|
def test_metrics_counts(organization_factory, job_template_factory, workflow_job_template_factory):
|
|
objs = organization_factory('org', superusers=['admin'])
|
|
jt = job_template_factory('test', organization=objs.organization, inventory='test_inv', project='test_project', credential='test_cred')
|
|
workflow_job_template_factory('test')
|
|
models.Team(organization=objs.organization).save()
|
|
models.Host(inventory=jt.inventory).save()
|
|
models.Schedule(rrule='DTSTART;TZID=America/New_York:20300504T150000', unified_job_template=jt.job_template).save()
|
|
|
|
output = metrics()
|
|
gauges = text_string_to_metric_families(output.decode('UTF-8'))
|
|
|
|
for gauge in gauges:
|
|
for sample in gauge.samples:
|
|
# name, label, value, timestamp, exemplar
|
|
name, _, value, _, _ = sample
|
|
assert EXPECTED_VALUES[name] == value
|
|
|
|
|
|
def get_metrics_view_db_only():
|
|
return reverse('api:metrics_view') + '?dbonly=1'
|
|
|
|
|
|
@pytest.mark.django_db
|
|
def test_metrics_permissions(get, admin, org_admin, alice, bob, organization):
|
|
assert get(get_metrics_view_db_only(), user=admin).status_code == 200
|
|
assert get(get_metrics_view_db_only(), user=org_admin).status_code == 403
|
|
assert get(get_metrics_view_db_only(), user=alice).status_code == 403
|
|
assert get(get_metrics_view_db_only(), user=bob).status_code == 403
|
|
organization.auditor_role.members.add(bob)
|
|
assert get(get_metrics_view_db_only(), user=bob).status_code == 403
|
|
|
|
bob.is_system_auditor = True
|
|
assert get(get_metrics_view_db_only(), user=bob).status_code == 200
|
|
|
|
|
|
@pytest.mark.django_db
|
|
def test_metrics_http_methods(get, post, patch, put, options, admin):
|
|
assert get(get_metrics_view_db_only(), user=admin).status_code == 200
|
|
assert put(get_metrics_view_db_only(), user=admin).status_code == 405
|
|
assert patch(get_metrics_view_db_only(), user=admin).status_code == 405
|
|
assert post(get_metrics_view_db_only(), user=admin).status_code == 405
|
|
assert options(get_metrics_view_db_only(), user=admin).status_code == 200
|