236 lines
14 KiB
Text
236 lines
14 KiB
Text
|
*** Settings ***
|
||
|
|
Variables ../../variables/common.py
|
||
|
|
|
||
|
|
|
||
|
|
Library ${RESOURCES}/environment.py
|
||
|
|
Library ${RESOURCES}/neo.py
|
||
|
|
Library ${RESOURCES}/neofs.py
|
||
|
|
Library ${RESOURCES}/payment.py
|
||
|
|
Library ${RESOURCES}/assertions.py
|
||
|
|
Library ${RESOURCES}/neo.py
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
*** Variables ***
|
||
|
|
&{FILE_USR_HEADER} = key1=1 key2='abc'
|
||
|
|
|
||
|
|
|
||
|
|
*** Test cases ***
|
||
|
|
Basic ACL Operations
|
||
|
|
[Documentation] Testcase to validate NeoFS operations with ACL.
|
||
|
|
[Tags] ACL NeoFS NeoCLI
|
||
|
|
[Timeout] 20 min
|
||
|
|
|
||
|
|
# Set private keys for User, Other, System
|
||
|
|
# Set private keys for each storage node
|
||
|
|
${USER_KEY} = Generate Neo private key
|
||
|
|
${OTHER_KEY} = Generate Neo private key
|
||
|
|
${SYSTEM_KEY} = Form Privkey from String c428b4a06f166fde9f8afcf918194acdde35aa2612ecf42fe0c94273425ded21
|
||
|
|
|
||
|
|
# Set private keys for each storage node
|
||
|
|
${NODE1_KEY} = Form Privkey from String 0fa21a94be2227916284e4b3495180d9c93d04f095fe9d5a86f22044f5c411d2
|
||
|
|
${NODE2_KEY} = Form Privkey from String 7befa3cd57bae15420db19fb3639db73f1683412a28271bc413129f286a0f8aa
|
||
|
|
${NODE3_KEY} = Form Privkey from String 5dcbb7901b3a377f17e1b43542091affe1291846a4c9365ab21f6b01c72b887d
|
||
|
|
${NODE4_KEY} = Form Privkey from String 691970fbb57476ec85f5777d948de91cf3f121688281259feb202f49f4d8e861
|
||
|
|
|
||
|
|
# Basic ACL manual page: https://neospcc.atlassian.net/wiki/spaces/NEOF/pages/362348545/NeoFS+ACL
|
||
|
|
|
||
|
|
# TODO: X - Sticky bit validation on public container!!!
|
||
|
|
|
||
|
|
|
||
|
|
# Create containers:
|
||
|
|
${PUB_KEY} = Get Neo public key ${USER_KEY}
|
||
|
|
${ADDR} = Get Neo address ${USER_KEY}
|
||
|
|
|
||
|
|
Log Create Private Container
|
||
|
|
${PRIV_CID} = Create container ${USER_KEY} 0x1C8C8CCC
|
||
|
|
Container Existing ${USER_KEY} ${PRIV_CID}
|
||
|
|
|
||
|
|
Log Create Public Container
|
||
|
|
${PUBLIC_CID} = Create container ${USER_KEY} 0x3FFFFFFF
|
||
|
|
Container Existing ${USER_KEY} ${PUBLIC_CID}
|
||
|
|
|
||
|
|
Log Create Read-Only Container
|
||
|
|
${READONLY_CID} = Create container ${USER_KEY} 0x1FFFCCFF
|
||
|
|
Container Existing ${USER_KEY} ${READONLY_CID}
|
||
|
|
|
||
|
|
|
||
|
|
# Generate small file
|
||
|
|
${FILE_S} = Generate file of bytes 1024
|
||
|
|
${FILE_S_HASH} = Get file hash ${FILE_S}
|
||
|
|
|
||
|
|
# Check Private:
|
||
|
|
# Expected: User - pass, Other - fail, System(IR) - pass (+ System(Container node) - pass, Non-container node - fail).
|
||
|
|
|
||
|
|
# Put
|
||
|
|
${S_OID_USER} = Put object to NeoFS ${USER_KEY} ${FILE_S} ${PRIV_CID}
|
||
|
|
Run Keyword And Expect Error *
|
||
|
|
... Put object to NeoFS ${OTHER_KEY} ${FILE_S} ${PRIV_CID}
|
||
|
|
Run Keyword And Expect Error *
|
||
|
|
... Put object to NeoFS ${SYSTEM_KEY} ${FILE_S} ${PRIV_CID}
|
||
|
|
|
||
|
|
|
||
|
|
# Get
|
||
|
|
Get object from NeoFS ${USER_KEY} ${PRIV_CID} ${S_OID_USER} s_file_read
|
||
|
|
Run Keyword And Expect Error *
|
||
|
|
... Get object from NeoFS ${OTHER_KEY} ${PRIV_CID} ${S_OID_USER} s_file_read
|
||
|
|
Run Keyword And Expect Error *
|
||
|
|
... Get object from NeoFS ${SYSTEM_KEY} ${PRIV_CID} ${S_OID_USER} s_file_read
|
||
|
|
|
||
|
|
# Get Range
|
||
|
|
Get Range ${USER_KEY} ${PRIV_CID} ${S_OID_USER} 0:256
|
||
|
|
Run Keyword And Expect Error *
|
||
|
|
... Get Range ${OTHER_KEY} ${PRIV_CID} ${S_OID_USER} 0:256
|
||
|
|
Run Keyword And Expect Error *
|
||
|
|
... Get Range ${SYSTEM_KEY} ${PRIV_CID} ${S_OID_USER} 0:256
|
||
|
|
|
||
|
|
# TODO: GetRangeHash
|
||
|
|
# get-range-hash --cid <cid> --oid <oid> [--bearer <hex>] [--verify --file </path/to/file>] [--salt <hex>] [<offset1>:<length1> [...]]
|
||
|
|
# neospcc@neospcc:~/GIT/neofs-testcases$ docker exec neofs-cli neofs-cli --host 192.168.123.71:8080 --key 0fa21a94be2227916284e4b3495180d9c93d04f095fe9d5a86f22044f5c411d2 object get-range-hash --cid 4H9iChvzYdBg6qntfYUWGWCzsJFBDdo99KegefsD721Q --oid a101d078-b3d4-4325-8fe8-41dce6917097
|
||
|
|
# invalid input
|
||
|
|
# Usage: get-range-hash --cid <cid> --oid <oid> [--bearer <hex>] [--verify --file </path/to/file>] [--salt <hex>] [<offset1>:<length1> [...]]
|
||
|
|
|
||
|
|
|
||
|
|
# Search
|
||
|
|
@{S_OBJ_PRIV} = Create List ${S_OID_USER}
|
||
|
|
Search object ${USER_KEY} ${PRIV_CID} ${EMPTY} @{S_OBJ_PRIV}
|
||
|
|
Run Keyword And Expect Error *
|
||
|
|
... Search object ${OTHER_KEY} ${PRIV_CID} ${EMPTY} @{S_OBJ_PRIV}
|
||
|
|
Search object ${SYSTEM_KEY} ${PRIV_CID} ${EMPTY} @{S_OBJ_PRIV}
|
||
|
|
|
||
|
|
|
||
|
|
# Head
|
||
|
|
Head object ${USER_KEY} ${PRIV_CID} ${S_OBJ_PRIV} ${True}
|
||
|
|
Run Keyword And Expect Error *
|
||
|
|
... Head object ${OTHER_KEY} ${PRIV_CID} ${S_OBJ_PRIV} ${True}
|
||
|
|
Head object ${SYSTEM_KEY} ${PRIV_CID} ${S_OBJ_PRIV} ${True}
|
||
|
|
|
||
|
|
|
||
|
|
# Delete
|
||
|
|
Delete object ${USER_KEY} ${PRIV_CID} ${S_OID_USER}
|
||
|
|
Run Keyword And Expect Error *
|
||
|
|
... Delete object ${OTHER_KEY} ${PRIV_CID} ${S_OID_USER}
|
||
|
|
Run Keyword And Expect Error *
|
||
|
|
... Delete object ${SYSTEM_KEY} ${PRIV_CID} ${S_OID_USER}
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
# Check Public:
|
||
|
|
# Expected: User - pass, Other - fail, System(IR) - pass (+ System(Container node) - pass, Non-container node - fail).
|
||
|
|
|
||
|
|
# Put
|
||
|
|
${S_OID_USER} = Put object to NeoFS ${USER_KEY} ${FILE_S} ${PUBLIC_CID}
|
||
|
|
${S_OID_OTHER} = Put object to NeoFS ${OTHER_KEY} ${FILE_S} ${PUBLIC_CID}
|
||
|
|
# By discussion, IR can not make any operations instead of HEAD, SEARCH and GET RANGE HASH at the current moment
|
||
|
|
Run Keyword And Expect Error *
|
||
|
|
... Put object to NeoFS ${SYSTEM_KEY} ${FILE_S} ${PUBLIC_CID}
|
||
|
|
|
||
|
|
# Get
|
||
|
|
Get object from NeoFS ${USER_KEY} ${PUBLIC_CID} ${S_OID_USER} s_file_read
|
||
|
|
Get object from NeoFS ${OTHER_KEY} ${PUBLIC_CID} ${S_OID_USER} s_file_read
|
||
|
|
# By discussion, IR can not make any operations instead of HEAD, SEARCH and GET RANGE HASH at the current moment
|
||
|
|
Run Keyword And Expect Error *
|
||
|
|
... Get object from NeoFS ${SYSTEM_KEY} ${PUBLIC_CID} ${S_OID_USER} s_file_read
|
||
|
|
|
||
|
|
# Get Range
|
||
|
|
Get Range ${USER_KEY} ${PUBLIC_CID} ${S_OID_USER} 0:256
|
||
|
|
Get Range ${OTHER_KEY} ${PUBLIC_CID} ${S_OID_USER} 0:256
|
||
|
|
# By discussion, IR can not make any operations instead of HEAD, SEARCH and GET RANGE HASH at the current moment
|
||
|
|
Run Keyword And Expect Error *
|
||
|
|
... Get Range ${SYSTEM_KEY} ${PUBLIC_CID} ${S_OID_USER} 0:256
|
||
|
|
|
||
|
|
# TODO: GetRangeHash
|
||
|
|
# get-range-hash --cid <cid> --oid <oid> [--bearer <hex>] [--verify --file </path/to/file>] [--salt <hex>] [<offset1>:<length1> [...]]
|
||
|
|
# neospcc@neospcc:~/GIT/neofs-testcases$ docker exec neofs-cli neofs-cli --host 192.168.123.71:8080 --key 0fa21a94be2227916284e4b3495180d9c93d04f095fe9d5a86f22044f5c411d2 object get-range-hash --cid 4H9iChvzYdBg6qntfYUWGWCzsJFBDdo99KegefsD721Q --oid a101d078-b3d4-4325-8fe8-41dce6917097
|
||
|
|
# invalid input
|
||
|
|
# Usage: get-range-hash --cid <cid> --oid <oid> [--bearer <hex>] [--verify --file </path/to/file>] [--salt <hex>] [<offset1>:<length1> [...]]
|
||
|
|
|
||
|
|
|
||
|
|
# Search
|
||
|
|
@{S_OBJ_PRIV} = Create List ${S_OID_USER} ${S_OID_OTHER}
|
||
|
|
Search object ${USER_KEY} ${PUBLIC_CID} ${EMPTY} @{S_OBJ_PRIV}
|
||
|
|
Search object ${OTHER_KEY} ${PUBLIC_CID} ${EMPTY} @{S_OBJ_PRIV}
|
||
|
|
Search object ${SYSTEM_KEY} ${PUBLIC_CID} ${EMPTY} @{S_OBJ_PRIV}
|
||
|
|
|
||
|
|
|
||
|
|
# Head
|
||
|
|
Head object ${USER_KEY} ${PUBLIC_CID} ${S_OID_USER} ${True}
|
||
|
|
Head object ${OTHER_KEY} ${PUBLIC_CID} ${S_OID_USER} ${True}
|
||
|
|
Head object ${SYSTEM_KEY} ${PUBLIC_CID} ${S_OID_USER} ${True}
|
||
|
|
|
||
|
|
Head object ${USER_KEY} ${PUBLIC_CID} ${S_OID_OTHER} ${True}
|
||
|
|
Head object ${OTHER_KEY} ${PUBLIC_CID} ${S_OID_OTHER} ${True}
|
||
|
|
Head object ${SYSTEM_KEY} ${PUBLIC_CID} ${S_OID_OTHER} ${True}
|
||
|
|
|
||
|
|
# Delete
|
||
|
|
Delete object ${USER_KEY} ${PUBLIC_CID} ${S_OID_USER}
|
||
|
|
Delete object ${OTHER_KEY} ${PUBLIC_CID} ${S_OID_USER}
|
||
|
|
Run Keyword And Expect Error *
|
||
|
|
... Delete object ${SYSTEM_KEY} ${PUBLIC_CID} ${S_OID_USER}
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
# Check Read Only container:
|
||
|
|
|
||
|
|
# Put
|
||
|
|
${S_OID_USER} = Put object to NeoFS ${USER_KEY} ${FILE_S} ${READONLY_CID}
|
||
|
|
Run Keyword And Expect Error *
|
||
|
|
... Put object to NeoFS ${OTHER_KEY} ${FILE_S} ${READONLY_CID}
|
||
|
|
Run Keyword And Expect Error *
|
||
|
|
... Put object to NeoFS ${SYSTEM_KEY} ${FILE_S} ${READONLY_CID}
|
||
|
|
|
||
|
|
# Get
|
||
|
|
Get object from NeoFS ${USER_KEY} ${READONLY_CID} ${S_OID_USER} s_file_read
|
||
|
|
Get object from NeoFS ${OTHER_KEY} ${READONLY_CID} ${S_OID_USER} s_file_read
|
||
|
|
# By discussion, IR can not make any operations instead of HEAD, SEARCH and GET RANGE HASH at the current moment
|
||
|
|
Run Keyword And Expect Error *
|
||
|
|
... Get object from NeoFS ${SYSTEM_KEY} ${READONLY_CID} ${S_OID_USER} s_file_read
|
||
|
|
|
||
|
|
# Get Range
|
||
|
|
Get Range ${USER_KEY} ${READONLY_CID} ${S_OID_USER} 0:256
|
||
|
|
Get Range ${OTHER_KEY} ${READONLY_CID} ${S_OID_USER} 0:256
|
||
|
|
# By discussion, IR can not make any operations instead of HEAD, SEARCH and GET RANGE HASH at the current moment
|
||
|
|
Run Keyword And Expect Error *
|
||
|
|
... Get Range ${SYSTEM_KEY} ${READONLY_CID} ${S_OID_USER} 0:256
|
||
|
|
|
||
|
|
# TODO: GetRangeHash
|
||
|
|
# get-range-hash --cid <cid> --oid <oid> [--bearer <hex>] [--verify --file </path/to/file>] [--salt <hex>] [<offset1>:<length1> [...]]
|
||
|
|
# neospcc@neospcc:~/GIT/neofs-testcases$ docker exec neofs-cli neofs-cli --host 192.168.123.71:8080 --key 0fa21a94be2227916284e4b3495180d9c93d04f095fe9d5a86f22044f5c411d2 object get-range-hash --cid 4H9iChvzYdBg6qntfYUWGWCzsJFBDdo99KegefsD721Q --oid a101d078-b3d4-4325-8fe8-41dce6917097
|
||
|
|
# invalid input
|
||
|
|
# Usage: get-range-hash --cid <cid> --oid <oid> [--bearer <hex>] [--verify --file </path/to/file>] [--salt <hex>] [<offset1>:<length1> [...]]
|
||
|
|
|
||
|
|
|
||
|
|
# Search
|
||
|
|
@{S_OBJ_RO} = Create List ${S_OID_USER}
|
||
|
|
Search object ${USER_KEY} ${READONLY_CID} ${EMPTY} @{S_OBJ_RO}
|
||
|
|
Search object ${OTHER_KEY} ${READONLY_CID} ${EMPTY} @{S_OBJ_RO}
|
||
|
|
Search object ${SYSTEM_KEY} ${READONLY_CID} ${EMPTY} @{S_OBJ_RO}
|
||
|
|
|
||
|
|
|
||
|
|
# Head
|
||
|
|
Head object ${USER_KEY} ${READONLY_CID} ${S_OID_USER} ${True}
|
||
|
|
Head object ${OTHER_KEY} ${READONLY_CID} ${S_OID_USER} ${True}
|
||
|
|
Head object ${SYSTEM_KEY} ${READONLY_CID} ${S_OID_USER} ${True}
|
||
|
|
|
||
|
|
# Delete
|
||
|
|
Delete object ${USER_KEY} ${READONLY_CID} ${S_OID_USER}
|
||
|
|
Run Keyword And Expect Error *
|
||
|
|
... Delete object ${OTHER_KEY} ${READONLY_CID} ${S_OID_USER}
|
||
|
|
Run Keyword And Expect Error *
|
||
|
|
... Delete object ${SYSTEM_KEY} ${READONLY_CID} ${S_OID_USER}
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
|