tests/persist/test_string_adapter.py

# Copyright 2023 The casbin Authors. All Rights Reserved.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#      http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
from casbin import Model
from casbin.persist.adapters.string_adapter import StringAdapter
from tests import TestCaseBase


class TestStringAdapter(TestCaseBase):
    def test_key_match_rbac(self):
        conf = """
[request_definition]
r = sub, obj, act

[policy_definition]
p = sub, obj, act

[role_definition]
g = _ , _

[policy_effect]
e = some(where (p.eft == allow))

[matchers]
m = g(r.sub, p.sub)  && keyMatch(r.obj, p.obj) && regexMatch(r.act, p.act)
"""
        line = """
p, alice, /alice_data/*, (GET)|(POST)
p, alice, /alice_data/resource1, POST
p, data_group_admin, /admin/*, POST
p, data_group_admin, /bob_data/*, POST
g, alice, data_group_admin
"""
        adapter = StringAdapter(line)
        model = Model()
        model.load_model_from_text(conf)
        e = self.get_enforcer(model, adapter)
        sub = "alice"
        obj = "/alice_data/login"
        act = "POST"
        self.assertTrue(e.enforce(sub, obj, act))

    def test_string_rbac(self):
        conf = """
[request_definition]
r = sub, obj, act

[policy_definition]
p = sub, obj, act

[role_definition]
g = _ , _

[policy_effect]
e = some(where (p.eft == allow))

[matchers]
m = g(r.sub, p.sub) && r.obj == p.obj && r.act == p.act
"""
        line = """
p, alice, data1, read
p, data_group_admin, data3, read
p, data_group_admin, data3, write
g, alice, data_group_admin
"""
        adapter = StringAdapter(line)
        model = Model()
        model.load_model_from_text(conf)
        e = self.get_enforcer(model, adapter)
        sub = "alice"
        obj = "data1"
        act = "read"
        self.assertTrue(e.enforce(sub, obj, act))