using System; using System.Threading; using System.Threading.Tasks; using FluentAssertions; using Moq; using NUnit.Framework; using Strata.Analytics.Biz.DataSources.Models; using Strata.Analytics.Biz.DataSources.Services; using Strata.Analytics.Models.Security; using Strata.Analytics.Test.Unit.Biz.TestData; using Strata.CoreLib.Claims.Extensions; using Strata.DataSchema.Client; using Strata.Testing.Categories; namespace Strata.Analytics.Test.Unit.Biz.DataSources { [NUnit.Framework.Category(TestCategory.Unit)] [Parallelizable(ParallelScope.Self)] public class DataSourceGetCurrentUserRoleTest { [Test] public async Task DataSourceCurrentUserRole_IsNull_GivenNoRoleAssignments() { // arrange var claimsPrincipal = IClaimsPrincipalAccessorMock.GetClaimsPrincipalAccessor(); var dbContext = AnalyticsDbContextMock.GetAnalyticsDbContext(claimsPrincipal); var dataSourceService = new DataSourceService(dbContext, claimsPrincipal, AutoMapperMock.GetAutoMapper()); // act var role = await dataSourceService.GetCurrentUserRoleAsync(5, CancellationToken.None); // assert role.HasValue.Should().BeFalse(); } [Test] public async Task DataSourceCurrentUserRole_IsEditor_GivenUserIsStrata() { // arrange var claimsPrincipal = IClaimsPrincipalAccessorMock.GetClaimsPrincipalAccessor(5, true); var dbContext = AnalyticsDbContextMock.GetAnalyticsDbContext(claimsPrincipal); var dataSourceService = new DataSourceService(dbContext, claimsPrincipal, AutoMapperMock.GetAutoMapper()); // act var role = await dataSourceService.GetCurrentUserRoleAsync(5, CancellationToken.None); // assert role.Should().Be(DataSourceRole.Editor); } [Test] public async Task DataSourceCurrentUserRole_UsesCurrentUser_GivenMultipleUsersAssignedToMultipleRoles() { // arrange var claimsPrincipal = IClaimsPrincipalAccessorMock.GetClaimsPrincipalAccessor(); var dbContext = AnalyticsDbContextMock.GetAnalyticsDbContext(claimsPrincipal); var dataSourceService = new DataSourceService(dbContext, claimsPrincipal, AutoMapperMock.GetAutoMapper()); var userRoleAssignemnt = new DataSourceRoleAssignment() { StrataId = 5, DataSourceId = 5, IdentityGuid = claimsPrincipal.GetUserGuid(), IdentityName = claimsPrincipal.GetUsername(), IdentityType = IdentityType.User, Role = DataSourceRole.Viewer }; var differentUserRoleAssignemnt = new DataSourceRoleAssignment() { StrataId = 5, DataSourceId = 5, IdentityGuid = Guid.NewGuid(), IdentityName = "Random User", IdentityType = IdentityType.User, Role = DataSourceRole.Editor }; dbContext.DataSourceRoleAssignments.Add(userRoleAssignemnt); dbContext.DataSourceRoleAssignments.Add(differentUserRoleAssignemnt); await dbContext.SaveChangesAsync(); // act var role = await dataSourceService.GetCurrentUserRoleAsync(5, CancellationToken.None); // assert role.Should().Be(userRoleAssignemnt.Role); } [Test] public async Task DataSourceCurrentUserRole_ReturnsMostPrivilege_GivenUserAssignedToMultipleRoles() { // arrange var userGroup = "DSS - Admin"; var userGroupGuid = Guid.NewGuid(); var claimsPrincipal = IClaimsPrincipalAccessorMock.GetClaimsPrincipalAccessor(5, false, false, new string[] { userGroup }); var dbContext = AnalyticsDbContextMock.GetAnalyticsDbContext(claimsPrincipal); var dataSourceService = new DataSourceService(dbContext, claimsPrincipal, AutoMapperMock.GetAutoMapper()); var viewerRoleAssignment = new DataSourceRoleAssignment() { StrataId = 5, DataSourceId = 5, IdentityGuid = claimsPrincipal.GetUserGuid(), IdentityName = claimsPrincipal.GetUsername(), IdentityType = IdentityType.User, Role = DataSourceRole.Viewer }; var editorRoleAssignment = new DataSourceRoleAssignment() { StrataId = 5, DataSourceId = 5, IdentityGuid = userGroupGuid, IdentityName = userGroup, IdentityType = IdentityType.UserGroup, Role = DataSourceRole.Editor }; dbContext.DataSourceRoleAssignments.Add(viewerRoleAssignment); dbContext.DataSourceRoleAssignments.Add(editorRoleAssignment); await dbContext.SaveChangesAsync(); // act var role = await dataSourceService.GetCurrentUserRoleAsync(5, CancellationToken.None); // assert role.Should().Be(DataSourceRole.Editor); } } }