Joseph Doherty
7b0b9c7365
Solution + 23 src projects + 26 test projects renamed; folders, csproj, namespaces, and ScadaLinkDbContext/ScadaBridgeDbContext class updated. ActorSystem "scadalink" → "scadabridge", Akka seed-node URLs migrated. SQL roles/logins, LDAP domains, CLI command name, and CLI config dir (~/.scadalink → ~/.scadabridge) also renamed. Build green; 5 Host.Tests fail awaiting SQL login rename in next commit. Pre-existing StaleTagMonitor timing flakes unchanged. Rename script committed at tools/rename-to-scadabridge.sh.
67 lines
1.9 KiB
C#
67 lines
1.9 KiB
C#
using ZB.MOM.WW.ScadaBridge.ManagementService;
|
|
|
|
namespace ZB.MOM.WW.ScadaBridge.ManagementService.Tests;
|
|
|
|
/// <summary>
|
|
/// Tests for <see cref="DebugStreamHub"/> per-instance site-scope authorization
|
|
/// (finding ManagementService-003).
|
|
/// </summary>
|
|
public class DebugStreamHubTests
|
|
{
|
|
[Fact]
|
|
public void IsInstanceAccessAllowed_SiteScopedUser_InScopeInstance_Allowed()
|
|
{
|
|
var allowed = DebugStreamHub.IsInstanceAccessAllowed(
|
|
roles: new[] { "Deployment" },
|
|
permittedSiteIds: new[] { "1", "2" },
|
|
instanceSiteId: 2);
|
|
|
|
Assert.True(allowed);
|
|
}
|
|
|
|
[Fact]
|
|
public void IsInstanceAccessAllowed_SiteScopedUser_OutOfScopeInstance_Denied()
|
|
{
|
|
var allowed = DebugStreamHub.IsInstanceAccessAllowed(
|
|
roles: new[] { "Deployment" },
|
|
permittedSiteIds: new[] { "1", "2" },
|
|
instanceSiteId: 99);
|
|
|
|
Assert.False(allowed);
|
|
}
|
|
|
|
[Fact]
|
|
public void IsInstanceAccessAllowed_SystemWideDeployment_AnySiteAllowed()
|
|
{
|
|
// Empty permitted set == system-wide Deployment.
|
|
var allowed = DebugStreamHub.IsInstanceAccessAllowed(
|
|
roles: new[] { "Deployment" },
|
|
permittedSiteIds: Array.Empty<string>(),
|
|
instanceSiteId: 99);
|
|
|
|
Assert.True(allowed);
|
|
}
|
|
|
|
[Fact]
|
|
public void IsInstanceAccessAllowed_AdminRole_BypassesSiteScope()
|
|
{
|
|
var allowed = DebugStreamHub.IsInstanceAccessAllowed(
|
|
roles: new[] { "Admin", "Deployment" },
|
|
permittedSiteIds: new[] { "1" },
|
|
instanceSiteId: 99);
|
|
|
|
Assert.True(allowed);
|
|
}
|
|
|
|
[Fact]
|
|
public void IsInstanceAccessAllowed_AdminRoleCheck_IsCaseInsensitive()
|
|
{
|
|
var allowed = DebugStreamHub.IsInstanceAccessAllowed(
|
|
roles: new[] { "admin" },
|
|
permittedSiteIds: new[] { "1" },
|
|
instanceSiteId: 99);
|
|
|
|
Assert.True(allowed);
|
|
}
|
|
}
|