diff options
| author | Arnaud Cogoluègnes <acogoluegnes@gmail.com> | 2017-05-24 15:57:55 +0200 |
|---|---|---|
| committer | Arnaud Cogoluègnes <acogoluegnes@gmail.com> | 2017-05-24 15:57:55 +0200 |
| commit | 032d3c8511a4e99dd91c5bab731367b8ee4bf4a0 (patch) | |
| tree | 7d0bc5ec36d56858590aa51fc13e1e246447cec6 /test | |
| parent | 915f1e944f5cca8f64893a0017e2606f157917c7 (diff) | |
| download | rabbitmq-server-git-032d3c8511a4e99dd91c5bab731367b8ee4bf4a0.tar.gz | |
Add tests for variables expansion in topic authz
References #1229
Diffstat (limited to 'test')
| -rw-r--r-- | test/topic_permission_SUITE.erl | 32 |
1 files changed, 32 insertions, 0 deletions
diff --git a/test/topic_permission_SUITE.erl b/test/topic_permission_SUITE.erl index 7b9d9f7701..1d6ba70eee 100644 --- a/test/topic_permission_SUITE.erl +++ b/test/topic_permission_SUITE.erl @@ -218,4 +218,36 @@ topic_permission_checks1(_Config) -> Perm, Context ) || Perm <- Permissions], + + %% expand variables + rabbit_auth_backend_internal:set_topic_permissions( + <<"guest">>, <<"other-vhost">>, <<"amq.topic">>, + "services.{vhost}.accounts.{username}.notifications", + "services.{vhost}.accounts.{username}.notifications", <<"acting-user">> + ), + %% routing key OK + [true = rabbit_auth_backend_internal:check_topic_access( + User, + Topic#resource{virtual_host = <<"other-vhost">>}, + Perm, + #{routing_key => <<"services.other-vhost.accounts.guest.notifications">>, + expand_map => #{ + <<"username">> => <<"guest">>, + <<"vhost">> => <<"other-vhost">> + } + } + ) || Perm <- Permissions], + %% routing key KO + [false = rabbit_auth_backend_internal:check_topic_access( + User, + Topic#resource{virtual_host = <<"other-vhost">>}, + Perm, + #{routing_key => <<"services.default.accounts.dummy.notifications">>, + expand_map => #{ + <<"username">> => <<"guest">>, + <<"vhost">> => <<"other-vhost">> + } + } + ) || Perm <- Permissions], + ok. |