Metacat

import java.util.ArrayList;

import java.util.List;

import org.dataone.service.types.v1.Person;

import org.dataone.service.types.v1.SubjectInfo;

//    suite.addTest(new MNodeServiceTest("testCreate"));

//    suite.addTest(new MNodeServiceTest("testUpdate"));

//    suite.addTest(new MNodeServiceTest("testDelete"));

//    // MNRead tests

//    suite.addTest(new MNodeServiceTest("testGet"));

//    suite.addTest(new MNodeServiceTest("testGetChecksum"));

//    suite.addTest(new MNodeServiceTest("testGetSystemMetadata"));

//    suite.addTest(new MNodeServiceTest("testDescribe"));

//    suite.addTest(new MNodeServiceTest("testListObjects"));

//    suite.addTest(new MNodeServiceTest("testSynchronizationFailed"));

//    // MNCore tests

//    suite.addTest(new MNodeServiceTest("testPing"));

//    suite.addTest(new MNodeServiceTest("testGetLogRecords"));

//    suite.addTest(new MNodeServiceTest("testGetOperationStatistics"));

//    suite.addTest(new MNodeServiceTest("testGetCapabilities"));

//    // include these when they are part of the MN interface definitions

//    // suite.addTest(new MNodeServiceTest("testGetObjectStatistics"));

//    // suite.addTest(new MNodeServiceTest("testGetStatus"));

//    // MNAuthorization tests

//    suite.addTest(new MNodeServiceTest("testIsAuthorized"));

    suite.addTest(new MNodeServiceTest("testIsEquivIdentityAuthorized"));

//    suite.addTest(new MNodeServiceTest("testSetAccessPolicy"));

//    // MNreplication tests

//    suite.addTest(new MNodeServiceTest("testReplicate"));

  public void testIsEquivIdentityAuthorized() {

      printTestHeader("testIsEquivIdentityAuthorized");

      try {

          Session session = new Session();

          Subject s = new Subject();

          s.setValue("cn=test,dc=dataone,dc=org");

          session.setSubject(s);

          Identifier pid = new Identifier();

          pid.setValue("testIsEquivIdentityAuthorized." + System.currentTimeMillis());

          InputStream object = new ByteArrayInputStream("test".getBytes("UTF-8"));

          SystemMetadata sysmeta = createSystemMetadata(pid, session.getSubject(), object);

          // reset the access policy to only allow 'self' read (no public)

          AccessPolicy ap = new AccessPolicy();

          AccessRule ar = new AccessRule();

          List<Subject> sList = new ArrayList<Subject>();

          sList.add(session.getSubject());

          ar.setSubjectList(sList);

          List<Permission> permList = new ArrayList<Permission>();

          permList.add(Permission.CHANGE_PERMISSION);

          ar.setPermissionList(permList);

          ap.addAllow(ar);

          sysmeta.setAccessPolicy(ap);

          // save it

          Identifier retPid = CNodeService.getInstance(request).registerSystemMetadata(session, pid, sysmeta);

          assertEquals(pid.getValue(), retPid.getValue());

          //check it against an equivalent identity not listed in the access policy

          session.getSubject().setValue("cn=newSubject,dc=dataone,dc=org");

          SubjectInfo subjectInfo = new SubjectInfo();

          Person person = new Person();

          person.setSubject(session.getSubject());

          List<String> givenNames = new ArrayList<String>();

          givenNames.add("New");

          person.setGivenNameList(givenNames);

          person.setFamilyName("Subject");

          // add equivalent identities

          List<Subject> equivIdentities = new ArrayList<Subject>();

          Subject mappedSubject2 = new Subject();

          mappedSubject2.setValue("cn=test2,dc=dataone,dc=org");

          equivIdentities.add(mappedSubject2);

          Subject mappedSubject = new Subject();

          mappedSubject.setValue("cn=test,dc=dataone,dc=org");

          equivIdentities.add(mappedSubject);          

          person.setEquivalentIdentityList(equivIdentities);

          List<Person> personList = new ArrayList<Person>();

          personList.add(person);

          subjectInfo.setPersonList(personList);

          // update the session to include subject info with a mapped identity

          session.setSubjectInfo(subjectInfo);

          boolean result = CNodeService.getInstance(request).isAuthorized(session, pid, Permission.READ);

          assertTrue(result);

    } catch (Exception e) {

        e.printStackTrace();

    }

  }