lmxopcua/tests/ZB.MOM.WW.OtOpcUa.Tests/Integration/AccessLevelTests.cs

using System.Collections.Generic;
using System.Threading.Tasks;
using Opc.Ua;
using Shouldly;
using Xunit;
using ZB.MOM.WW.OtOpcUa.Host.Domain;
using ZB.MOM.WW.OtOpcUa.Tests.Helpers;

namespace ZB.MOM.WW.OtOpcUa.Tests.Integration
{
    public class AccessLevelTests
    {
        private static FakeGalaxyRepository CreateRepoWithSecurityLevels()
        {
            return new FakeGalaxyRepository
            {
                Hierarchy = new List<GalaxyObjectInfo>
                {
                    new()
                    {
                        GobjectId = 1, TagName = "TestObj", BrowseName = "TestObj", ParentGobjectId = 0, IsArea = false
                    }
                },
                Attributes = new List<GalaxyAttributeInfo>
                {
                    new()
                    {
                        GobjectId = 1, TagName = "TestObj", AttributeName = "FreeAttr",
                        FullTagReference = "TestObj.FreeAttr", MxDataType = 5, SecurityClassification = 0
                    },
                    new()
                    {
                        GobjectId = 1, TagName = "TestObj", AttributeName = "OperateAttr",
                        FullTagReference = "TestObj.OperateAttr", MxDataType = 5, SecurityClassification = 1
                    },
                    new()
                    {
                        GobjectId = 1, TagName = "TestObj", AttributeName = "SecuredAttr",
                        FullTagReference = "TestObj.SecuredAttr", MxDataType = 5, SecurityClassification = 2
                    },
                    new()
                    {
                        GobjectId = 1, TagName = "TestObj", AttributeName = "VerifiedAttr",
                        FullTagReference = "TestObj.VerifiedAttr", MxDataType = 5, SecurityClassification = 3
                    },
                    new()
                    {
                        GobjectId = 1, TagName = "TestObj", AttributeName = "TuneAttr",
                        FullTagReference = "TestObj.TuneAttr", MxDataType = 5, SecurityClassification = 4
                    },
                    new()
                    {
                        GobjectId = 1, TagName = "TestObj", AttributeName = "ConfigAttr",
                        FullTagReference = "TestObj.ConfigAttr", MxDataType = 5, SecurityClassification = 5
                    },
                    new()
                    {
                        GobjectId = 1, TagName = "TestObj", AttributeName = "ViewOnlyAttr",
                        FullTagReference = "TestObj.ViewOnlyAttr", MxDataType = 5, SecurityClassification = 6
                    }
                }
            };
        }

        /// <summary>
        ///     Verifies that writable Galaxy security classifications publish OPC UA variables with read-write access.
        /// </summary>
        [Fact]
        public async Task ReadWriteAttribute_HasCurrentReadOrWrite_AccessLevel()
        {
            var fixture = OpcUaServerFixture.WithFakeMxAccessClient(repo: CreateRepoWithSecurityLevels());
            await fixture.InitializeAsync();
            try
            {
                using var client = new OpcUaTestClient();
                await client.ConnectAsync(fixture.EndpointUrl);

                foreach (var attrName in new[] { "FreeAttr", "OperateAttr", "TuneAttr", "ConfigAttr" })
                {
                    var nodeId = client.MakeNodeId($"TestObj.{attrName}");
                    var accessLevel = client.ReadAttribute(nodeId, Attributes.AccessLevel);
                    ((byte)accessLevel.Value).ShouldBe(AccessLevels.CurrentReadOrWrite,
                        $"{attrName} should be ReadWrite");
                }
            }
            finally
            {
                await fixture.DisposeAsync();
            }
        }

        /// <summary>
        ///     Verifies that secured and view-only Galaxy classifications publish OPC UA variables with read-only access.
        /// </summary>
        [Fact]
        public async Task ReadOnlyAttribute_HasCurrentRead_AccessLevel()
        {
            var fixture = OpcUaServerFixture.WithFakeMxAccessClient(repo: CreateRepoWithSecurityLevels());
            await fixture.InitializeAsync();
            try
            {
                using var client = new OpcUaTestClient();
                await client.ConnectAsync(fixture.EndpointUrl);

                foreach (var attrName in new[] { "SecuredAttr", "VerifiedAttr", "ViewOnlyAttr" })
                {
                    var nodeId = client.MakeNodeId($"TestObj.{attrName}");
                    var accessLevel = client.ReadAttribute(nodeId, Attributes.AccessLevel);
                    ((byte)accessLevel.Value).ShouldBe(AccessLevels.CurrentRead,
                        $"{attrName} should be ReadOnly");
                }
            }
            finally
            {
                await fixture.DisposeAsync();
            }
        }

        /// <summary>
        ///     Verifies that the bridge rejects writes against Galaxy attributes whose security classification is read-only.
        /// </summary>
        [Fact]
        public async Task Write_ToReadOnlyAttribute_IsRejected()
        {
            var fixture = OpcUaServerFixture.WithFakeMxAccessClient(repo: CreateRepoWithSecurityLevels());
            await fixture.InitializeAsync();
            try
            {
                using var client = new OpcUaTestClient();
                await client.ConnectAsync(fixture.EndpointUrl);

                var nodeId = client.MakeNodeId("TestObj.ViewOnlyAttr");
                var result = client.Write(nodeId, "test");
                StatusCode.IsBad(result).ShouldBeTrue("Write to ReadOnly attribute should be rejected");
            }
            finally
            {
                await fixture.DisposeAsync();
            }
        }

        /// <summary>
        ///     Verifies that writes succeed for Galaxy attributes whose security classification permits operator updates.
        /// </summary>
        [Fact]
        public async Task Write_ToReadWriteAttribute_Succeeds()
        {
            var mxClient = new FakeMxAccessClient();
            var fixture = OpcUaServerFixture.WithFakeMxAccessClient(mxClient, CreateRepoWithSecurityLevels());
            await fixture.InitializeAsync();
            try
            {
                using var client = new OpcUaTestClient();
                await client.ConnectAsync(fixture.EndpointUrl);

                var nodeId = client.MakeNodeId("TestObj.OperateAttr");
                var result = client.Write(nodeId, "test");
                StatusCode.IsGood(result).ShouldBeTrue("Write to ReadWrite attribute should succeed");
            }
            finally
            {
                await fixture.DisposeAsync();
            }
        }
    }
}