35 lines
1.4 KiB
Python
35 lines
1.4 KiB
Python
|
import allure
|
||
|
|
import pytest
|
||
|
|
from frostfs_testlib import reporter
|
||
|
|
from frostfs_testlib.resources.error_patterns import ADD_CHAIN_ERROR
|
||
|
|
from frostfs_testlib.storage.grpc_operations.client_wrappers import CliClientWrapper
|
||
|
|
from frostfs_testlib.testing.cluster_test_base import ClusterTestBase
|
||
|
|
|
||
|
|
|
||
|
|
@pytest.mark.ape
|
||
|
|
@pytest.mark.ape_iam
|
||
|
|
class TestApeIAM(ClusterTestBase):
|
||
|
|
@allure.title("[NEGATIVE] Create policy using another user wallet")
|
||
|
|
def test_negative_policy_another_user_wallet_frostfs_cli(
|
||
|
|
self,
|
||
|
|
grpc_client: CliClientWrapper,
|
||
|
|
grpc_second_client: CliClientWrapper,
|
||
|
|
):
|
||
|
|
|
||
|
|
with reporter.step("Create container for first user"):
|
||
|
|
cid = grpc_client.container.create(
|
||
|
|
endpoint=self.cluster.storage_nodes[0].get_rpc_endpoint(),
|
||
|
|
policy="REP 2 IN X CBF 1 SELECT 2 FROM * AS X",
|
||
|
|
await_mode=True,
|
||
|
|
)
|
||
|
|
|
||
|
|
with reporter.step("[NEGATIVE] Create policy using another user wallet"):
|
||
|
|
with pytest.raises(RuntimeError, match=ADD_CHAIN_ERROR):
|
||
|
|
grpc_second_client.cli.ape_manager.add(
|
||
|
|
rpc_endpoint=self.cluster.default_rpc_endpoint,
|
||
|
|
target_type="container",
|
||
|
|
target_name=f"{cid}",
|
||
|
|
chain_id="allowDeleteObject",
|
||
|
|
rule=f"allow Object.Head Object.Delete kapusta/{cid}/*",
|
||
|
|
)
|