206ae19f48
As per the RBAc goal timeline, we agreed to enable enforce_scope as well as the enforce_new_defaults by default - https://governance.openstack.org/tc/goals/selected/consistent-and-secure-rbac.html#id4 Also, marking enforce_scope deprecated and to be removed in 2025.2 (SLURP) cycle. Change-Id: I23ccdfd810ba8290aa49a47471eabdb65fea2128
61 lines
2.2 KiB
Python
61 lines
2.2 KiB
Python
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
|
|
import copy
|
|
|
|
from oslo_config import cfg
|
|
from oslotest import base as test_base
|
|
|
|
from oslo_policy import opts
|
|
|
|
|
|
class OptsTestCase(test_base.BaseTestCase):
|
|
|
|
def setUp(self):
|
|
super(OptsTestCase, self).setUp()
|
|
self.conf = cfg.ConfigOpts()
|
|
self.original_opts = opts._options
|
|
opts._options = copy.deepcopy(opts._options)
|
|
|
|
def reset():
|
|
opts._options = self.original_opts
|
|
self.addCleanup(reset)
|
|
|
|
def test_set_defaults_policy_file(self):
|
|
opts._register(self.conf)
|
|
self.assertNotEqual('new-value.json',
|
|
self.conf.oslo_policy.policy_file)
|
|
opts.set_defaults(self.conf, policy_file='new-value.json')
|
|
self.assertEqual('new-value.json',
|
|
self.conf.oslo_policy.policy_file)
|
|
|
|
def test_set_defaults_enforce_scope(self):
|
|
opts._register(self.conf)
|
|
self.assertEqual(True,
|
|
self.conf.oslo_policy.enforce_scope)
|
|
opts.set_defaults(self.conf, enforce_scope=False)
|
|
self.assertEqual(False,
|
|
self.conf.oslo_policy.enforce_scope)
|
|
|
|
def test_set_defaults_two_opts(self):
|
|
opts._register(self.conf)
|
|
self.assertEqual(True,
|
|
self.conf.oslo_policy.enforce_scope)
|
|
self.assertEqual(True,
|
|
self.conf.oslo_policy.enforce_new_defaults)
|
|
opts.set_defaults(self.conf, enforce_scope=False,
|
|
enforce_new_defaults=False)
|
|
self.assertEqual(False,
|
|
self.conf.oslo_policy.enforce_scope)
|
|
self.assertEqual(False,
|
|
self.conf.oslo_policy.enforce_new_defaults)
|