github.com/metaworking/channeld@v0.7.3/pkg/channeld/channel_acl_test.go

package channeld

import (
	"net"
	"testing"

	"github.com/metaworking/channeld/pkg/channeldpb"
	"github.com/metaworking/channeld/pkg/common"
	"github.com/stretchr/testify/assert"
)

type aclTestConnection struct {
	id ConnectionId
}

func (c *aclTestConnection) Id() ConnectionId {
	return 0
}

func (c *aclTestConnection) GetConnectionType() channeldpb.ConnectionType {
	return channeldpb.ConnectionType_NO_CONNECTION
}

func (c *aclTestConnection) OnAuthenticated(pit string) {

}

func (c *aclTestConnection) HasAuthorityOver(ch *Channel) bool {
	return false
}

func (c *aclTestConnection) Close() {
}

func (c *aclTestConnection) IsClosing() bool {
	return false
}

func (c *aclTestConnection) Send(ctx MessageContext) {

}

func (c *aclTestConnection) SubscribeToChannel(ch *Channel, options *channeldpb.ChannelSubscriptionOptions) (*ChannelSubscription, bool) {
	return &ChannelSubscription{
		options: *defaultSubOptions(ch.channelType),
	}, false
}

func (c *aclTestConnection) UnsubscribeFromChannel(ch *Channel) (*channeldpb.ChannelSubscriptionOptions, error) {
	return nil, nil
}

func (c *aclTestConnection) sendSubscribed(ctx MessageContext, ch *Channel, connToSub ConnectionInChannel, stubId uint32, subOptions *channeldpb.ChannelSubscriptionOptions) {

}

func (c *aclTestConnection) sendUnsubscribed(ctx MessageContext, ch *Channel, connToUnsub *Connection, stubId uint32) {

}

func (c *aclTestConnection) HasInterestIn(spatialChId common.ChannelId) bool {
	return false
}

func (c *aclTestConnection) Logger() *Logger {
	return rootLogger
}

func (c *aclTestConnection) RemoteAddr() net.Addr {
	return nil
}

var idCounter = 0

func createACLTestConnectionById(id ConnectionId) *aclTestConnection {
	return &aclTestConnection{
		id: id,
	}
}

func createACLTestConnection() *aclTestConnection {
	idCounter++
	return createACLTestConnectionById(ConnectionId(idCounter))
}

func createChannelForTestACL(t channeldpb.ChannelType, owner ConnectionInChannel) (*Channel, error) {
	if t == channeldpb.ChannelType_GLOBAL {
		ch, err := CreateChannel(channeldpb.ChannelType_SUBWORLD, owner)
		ch.channelType = channeldpb.ChannelType_GLOBAL
		globalChannel = ch
		return ch, err
	} else {
		ch, err := CreateChannel(t, owner)
		return ch, err
	}
}

func setChannelACLSettings(chTypes []channeldpb.ChannelType, acl ChannelAccessLevel) {
	for _, t := range chTypes {
		GlobalSettings.ChannelSettings[t] = ChannelSettingsType{
			ACLSettings: ACLSettingsType{
				Sub:    acl,
				Unsub:  acl,
				Remove: acl,
			},
		}
	}
}

func TestCheckACL(t *testing.T) {
	InitLogs()
	InitChannels()

	accessTypes := []ChannelAccessType{ChannelAccessType_Sub, ChannelAccessType_Unsub, ChannelAccessType_Remove}

	const ChannelType_Test1 channeldpb.ChannelType = 201
	allChannelTypesForTest := []channeldpb.ChannelType{channeldpb.ChannelType_GLOBAL, channeldpb.ChannelType_SUBWORLD, channeldpb.ChannelType_PRIVATE, channeldpb.ChannelType_SPATIAL, ChannelType_Test1}
	allChannelTypesForTestWithoutGlobal := []channeldpb.ChannelType{channeldpb.ChannelType_SUBWORLD, channeldpb.ChannelType_PRIVATE, channeldpb.ChannelType_SPATIAL, ChannelType_Test1}

	var channelOwner ConnectionInChannel
	var ch *Channel
	var hasAccess bool
	var err error

	for _, accessType := range accessTypes {

		setChannelACLSettings(allChannelTypesForTest, ChannelAccessLevel_None)

		// CA01
		func(chTypes []channeldpb.ChannelType) {
			for _, chType := range chTypes {
				ch, _ = createChannelForTestACL(chType, createACLTestConnection())
				hasAccess, err = ch.CheckACL(createACLTestConnection(), accessType)
				assert.Error(t, err, ErrNoneAccess)
				assert.EqualValues(t, hasAccess, false)
			}
		}(allChannelTypesForTest)

		// CA02
		func(chTypes []channeldpb.ChannelType) {
			for _, chType := range chTypes {
				channelOwner = createACLTestConnection()
				ch, _ = createChannelForTestACL(chType, channelOwner)
				hasAccess, err = ch.CheckACL(channelOwner, accessType)
				assert.Error(t, err, ErrNoneAccess)
				assert.EqualValues(t, hasAccess, false)
			}
		}(allChannelTypesForTest)

		// CA03
		func(chTypes []channeldpb.ChannelType) {
			// set global channel and owner
			globalOwner := createACLTestConnection()
			createChannelForTestACL(channeldpb.ChannelType_GLOBAL, globalOwner)
			for _, chType := range chTypes {
				ch, _ := createChannelForTestACL(chType, createACLTestConnection())
				hasAccess, err := ch.CheckACL(globalOwner, accessType)
				assert.Error(t, err, ErrNoneAccess)
				assert.EqualValues(t, hasAccess, false)
			}
		}(allChannelTypesForTestWithoutGlobal)

		setChannelACLSettings(allChannelTypesForTest, ChannelAccessLevel_OwnerOnly)

		// CA04
		func(chTypes []channeldpb.ChannelType) {
			for _, chType := range chTypes {
				ch, _ := createChannelForTestACL(chType, createACLTestConnection())
				hasAccess, err := ch.CheckACL(createACLTestConnection(), accessType)
				assert.Error(t, err, ErrOwnerOnlyAccess)
				assert.EqualValues(t, hasAccess, false)
			}
		}(allChannelTypesForTest)

		// CA05
		func(chTypes []channeldpb.ChannelType) {
			for _, chType := range chTypes {
				channelOwner := createACLTestConnection()
				ch, _ := createChannelForTestACL(chType, channelOwner)
				hasAccess, err := ch.CheckACL(channelOwner, accessType)
				assert.NoError(t, err)
				assert.EqualValues(t, hasAccess, true)
			}
		}(allChannelTypesForTest)

		// CA06
		func(chTypes []channeldpb.ChannelType) {
			// set global channel and owner
			globalOwner := createACLTestConnection()
			createChannelForTestACL(channeldpb.ChannelType_GLOBAL, globalOwner)
			for _, chType := range chTypes {
				ch, _ := createChannelForTestACL(chType, createACLTestConnection())
				hasAccess, err := ch.CheckACL(globalOwner, accessType)
				assert.Error(t, err, ErrOwnerOnlyAccess)
				assert.EqualValues(t, hasAccess, false)
			}
		}(allChannelTypesForTestWithoutGlobal)

		// CA07
		func(chTypes []channeldpb.ChannelType) {
			for _, chType := range chTypes {
				ch, _ := createChannelForTestACL(chType, nil)
				hasAccess, err := ch.CheckACL(createACLTestConnection(), accessType)
				assert.Error(t, err, ErrOwnerOnlyAccess)
				assert.EqualValues(t, hasAccess, false)
			}
		}(allChannelTypesForTest)

		setChannelACLSettings(allChannelTypesForTest, ChannelAccessLevel_OwnerAndGlobalOwner)

		// CA08
		func(chTypes []channeldpb.ChannelType) {
			for _, chType := range chTypes {
				ch, _ = createChannelForTestACL(chType, createACLTestConnection())
				hasAccess, err = ch.CheckACL(createACLTestConnection(), accessType)
				assert.Error(t, err, ErrOwnerAndGlobalOwnerAccess)
				assert.EqualValues(t, hasAccess, false)
			}
		}(allChannelTypesForTest)

		// CA09
		func(chTypes []channeldpb.ChannelType) {
			for _, chType := range chTypes {
				channelOwner := createACLTestConnection()
				ch, _ := createChannelForTestACL(chType, channelOwner)
				hasAccess, err := ch.CheckACL(channelOwner, accessType)
				assert.NoError(t, err)
				assert.EqualValues(t, hasAccess, true)
			}
		}(allChannelTypesForTest)

		// CA10
		func(chTypes []channeldpb.ChannelType) {
			// set global channel and owner
			globalOwner := createACLTestConnection()
			createChannelForTestACL(channeldpb.ChannelType_GLOBAL, globalOwner)
			for _, chType := range chTypes {
				ch, _ := createChannelForTestACL(chType, createACLTestConnection())
				hasAccess, err := ch.CheckACL(globalOwner, accessType)
				assert.NoError(t, err)
				assert.EqualValues(t, hasAccess, true)
			}
		}(allChannelTypesForTestWithoutGlobal)

		// CA11
		func(chTypes []channeldpb.ChannelType) {
			// set global channel and owner
			globalOwner := createACLTestConnection()
			createChannelForTestACL(channeldpb.ChannelType_GLOBAL, globalOwner)
			for _, chType := range chTypes {
				ch, _ := createChannelForTestACL(chType, nil)
				hasAccess, err := ch.CheckACL(globalOwner, accessType)
				assert.NoError(t, err)
				assert.EqualValues(t, hasAccess, true)
			}
		}(allChannelTypesForTestWithoutGlobal)

		setChannelACLSettings(allChannelTypesForTest, ChannelAccessLevel_Any)

		//CA12
		func(chTypes []channeldpb.ChannelType) {
			for _, chType := range chTypes {
				ch, _ = createChannelForTestACL(chType, createACLTestConnection())
				hasAccess, err = ch.CheckACL(createACLTestConnection(), accessType)
				assert.NoError(t, err)
				assert.EqualValues(t, hasAccess, true)
			}
		}(allChannelTypesForTest)

		// CA13
		func(chTypes []channeldpb.ChannelType) {
			for _, chType := range chTypes {
				channelOwner := createACLTestConnection()
				ch, _ := createChannelForTestACL(chType, channelOwner)
				hasAccess, err := ch.CheckACL(channelOwner, accessType)
				assert.NoError(t, err)
				assert.EqualValues(t, hasAccess, true)
			}
		}(allChannelTypesForTest)

		// CA14
		func(chTypes []channeldpb.ChannelType) {
			// set global channel and owner
			globalOwner := createACLTestConnection()
			createChannelForTestACL(channeldpb.ChannelType_GLOBAL, globalOwner)
			for _, chType := range chTypes {
				ch, _ := createChannelForTestACL(chType, createACLTestConnection())
				hasAccess, err := ch.CheckACL(globalOwner, accessType)
				assert.NoError(t, err)
				assert.EqualValues(t, hasAccess, true)
			}
		}(allChannelTypesForTestWithoutGlobal)

		// CA15
		func(chTypes []channeldpb.ChannelType) {
			// set global channel and owner
			globalOwner := createACLTestConnection()
			createChannelForTestACL(channeldpb.ChannelType_GLOBAL, globalOwner)
			for _, chType := range chTypes {
				ch, _ := createChannelForTestACL(chType, nil)
				hasAccess, err := ch.CheckACL(globalOwner, accessType)
				assert.NoError(t, err)
				assert.EqualValues(t, hasAccess, true)
			}
		}(allChannelTypesForTestWithoutGlobal)

	}

	// ch = nil
	// ch.CheckACL(ownerConn, o)
}