67 lines
3.1 KiB
Python
67 lines
3.1 KiB
Python
import allure
|
|
import pytest
|
|
from frostfs_testlib.s3 import AwsCliClient, Boto3ClientWrapper, S3ClientWrapper
|
|
from frostfs_testlib.steps.s3 import s3_helper
|
|
from frostfs_testlib.utils.file_utils import generate_file
|
|
|
|
|
|
@pytest.mark.sanity
|
|
@pytest.mark.acl
|
|
@pytest.mark.s3_gate
|
|
class TestS3GateACL:
|
|
@allure.title("Test S3: Object ACL")
|
|
@pytest.mark.parametrize("s3_client", [AwsCliClient], indirect=True)
|
|
def test_s3_object_ACL(self, s3_client: S3ClientWrapper, bucket: str, simple_object_size: int):
|
|
file_path = generate_file(simple_object_size)
|
|
file_name = s3_helper.object_key_from_file_path(file_path)
|
|
|
|
with allure.step("Put object into bucket, Check ACL is empty"):
|
|
s3_client.put_object(bucket, file_path)
|
|
obj_acl = s3_client.get_object_acl(bucket, file_name)
|
|
assert obj_acl == [], f"Expected ACL is empty, got {obj_acl}"
|
|
|
|
with allure.step("Put object ACL = public-read"):
|
|
s3_client.put_object_acl(bucket, file_name, "public-read")
|
|
obj_acl = s3_client.get_object_acl(bucket, file_name)
|
|
s3_helper.assert_s3_acl(acl_grants=obj_acl, permitted_users="AllUsers")
|
|
|
|
with allure.step("Put object ACL = private"):
|
|
s3_client.put_object_acl(bucket, file_name, "private")
|
|
obj_acl = s3_client.get_object_acl(bucket, file_name)
|
|
s3_helper.assert_s3_acl(acl_grants=obj_acl, permitted_users="CanonicalUser")
|
|
|
|
with allure.step(
|
|
"Put object with grant-read uri=http://acs.amazonaws.com/groups/global/AllUsers"
|
|
):
|
|
s3_client.put_object_acl(
|
|
bucket,
|
|
file_name,
|
|
grant_read="uri=http://acs.amazonaws.com/groups/global/AllUsers",
|
|
)
|
|
obj_acl = s3_client.get_object_acl(bucket, file_name)
|
|
s3_helper.assert_s3_acl(acl_grants=obj_acl, permitted_users="AllUsers")
|
|
|
|
@allure.title("Test S3: Bucket ACL")
|
|
@pytest.mark.parametrize("s3_client", [AwsCliClient, Boto3ClientWrapper], indirect=True)
|
|
def test_s3_bucket_ACL(self, s3_client: S3ClientWrapper):
|
|
with allure.step("Create bucket with ACL = public-read-write"):
|
|
bucket = s3_client.create_bucket(
|
|
object_lock_enabled_for_bucket=True, acl="public-read-write"
|
|
)
|
|
bucket_acl = s3_client.get_bucket_acl(bucket)
|
|
s3_helper.assert_s3_acl(acl_grants=bucket_acl, permitted_users="AllUsers")
|
|
|
|
with allure.step("Change bucket ACL to private"):
|
|
s3_client.put_bucket_acl(bucket, acl="private")
|
|
bucket_acl = s3_client.get_bucket_acl(bucket)
|
|
s3_helper.assert_s3_acl(acl_grants=bucket_acl, permitted_users="CanonicalUser")
|
|
|
|
with allure.step(
|
|
"Change bucket acl to --grant-write uri=http://acs.amazonaws.com/groups/global/AllUsers"
|
|
):
|
|
s3_client.put_bucket_acl(
|
|
bucket,
|
|
grant_write="uri=http://acs.amazonaws.com/groups/global/AllUsers",
|
|
)
|
|
bucket_acl = s3_client.get_bucket_acl(bucket)
|
|
s3_helper.assert_s3_acl(acl_grants=bucket_acl, permitted_users="AllUsers")
|