cloudroast/cloudroast/compute/integration/identity/test_admin_authorization.py

84 lines
3.3 KiB
Python

"""
Copyright 2013 Rackspace
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
"""
from cafe.drivers.unittest.decorators import tags
from cloudcafe.compute.common.exceptions import Forbidden, ItemNotFound, \
BadRequest
from cloudroast.compute.fixtures import ComputeFixture
class AdminAuthorizationTest(ComputeFixture):
@classmethod
def setUpClass(cls):
super(AdminAuthorizationTest, cls).setUpClass()
cls.server = cls.server_behaviors.create_active_server().entity
cls.resources.add(cls.server.id, cls.servers_client.delete_server)
@tags(type='negative', net='no')
def test_migrate_server_fails_as_user(self):
"""A migrate request should fail when not made by an admin"""
with self.assertRaises(Forbidden):
self.servers_client.migrate_server(self.server.id)
@tags(type='negative', net='no')
def test_live_migrate_server_fails_as_user(self):
"""A live migrate request should fail when not made by an admin"""
with self.assertRaises(Forbidden):
self.servers_client.live_migrate_server(self.server.id)
@tags(type='negative', net='no')
def test_suspend_server_fails_as_user(self):
"""A suspend request should fail when not made by an admin"""
with self.assertRaises(Forbidden):
self.servers_client.suspend_server(self.server.id)
@tags(type='negative', net='no')
def test_resume_server_fails_as_user(self):
"""A resume request should fail when not made by an admin"""
with self.assertRaises(Forbidden):
self.servers_client.resume_server(self.server.id)
@tags(type='negative', net='no')
def test_pause_server_fails_as_user(self):
"""A pause request should fail when not made by an admin"""
with self.assertRaises(Forbidden):
self.servers_client.pause_server(self.server.id)
@tags(type='negative', net='no')
def test_unpause_server_fails_as_user(self):
"""An unpause request should fail when not made by an admin"""
with self.assertRaises(Forbidden):
self.servers_client.unpause_server(self.server.id)
@tags(type='negative', net='no')
def test_reset_server_state_fails_as_user(self):
"""A reset state request should fail when not made by an admin"""
with self.assertRaises(Forbidden):
self.servers_client.reset_state(self.server.id)
@tags(type='negative', net='no')
def test_create_flavor_fails_as_user(self):
with self.assertRaises(ItemNotFound):
self.flavors_client.create_flavor(
name='test555', ram='128', vcpus='1', disk='10', id='100',
is_public=True)
@tags(type='negative', net='no')
def test_delete_flavor_fails_as_user(self):
with self.assertRaises(ItemNotFound):
self.flavors_client.delete_flavor(self.flavor_ref)