analytics/tests/Strata.Analytics.Test.Unit/Biz/DataSources/DataSourceGetCurrentUserRoleTest.cs

using System;
using System.Threading;
using System.Threading.Tasks;
using FluentAssertions;
using Moq;
using NUnit.Framework;
using Strata.Analytics.Biz.DataSources.Models;
using Strata.Analytics.Biz.DataSources.Services;
using Strata.Analytics.Models.Security;
using Strata.Analytics.Test.Unit.Biz.TestData;
using Strata.CoreLib.Claims.Extensions;
using Strata.DataSchema.Client;
using Strata.Testing.Categories;

namespace Strata.Analytics.Test.Unit.Biz.DataSources
{
    [NUnit.Framework.Category(TestCategory.Unit)]
    [Parallelizable(ParallelScope.Self)]
    public class DataSourceGetCurrentUserRoleTest
    {
        [Test]
        public async Task DataSourceCurrentUserRole_IsNull_GivenNoRoleAssignments()
        {
            // arrange
            var claimsPrincipal = IClaimsPrincipalAccessorMock.GetClaimsPrincipalAccessor();
            var dbContext = AnalyticsDbContextMock.GetAnalyticsDbContext(claimsPrincipal);
            var dataSourceService = new DataSourceService(dbContext, claimsPrincipal, AutoMapperMock.GetAutoMapper());

            // act
            var role = await dataSourceService.GetCurrentUserRoleAsync(5, CancellationToken.None);

            // assert
            role.HasValue.Should().BeFalse();
        }


        [Test]
        public async Task DataSourceCurrentUserRole_IsEditor_GivenUserIsStrata()
        {
            // arrange
            var claimsPrincipal = IClaimsPrincipalAccessorMock.GetClaimsPrincipalAccessor(5, true);
            var dbContext = AnalyticsDbContextMock.GetAnalyticsDbContext(claimsPrincipal);
            var dataSourceService = new DataSourceService(dbContext, claimsPrincipal, AutoMapperMock.GetAutoMapper());

            // act
            var role = await dataSourceService.GetCurrentUserRoleAsync(5, CancellationToken.None);

            // assert
            role.Should().Be(DataSourceRole.Editor);
        }

        [Test]
        public async Task DataSourceCurrentUserRole_UsesCurrentUser_GivenMultipleUsersAssignedToMultipleRoles()
        {
            // arrange
            var claimsPrincipal = IClaimsPrincipalAccessorMock.GetClaimsPrincipalAccessor();
            var dbContext = AnalyticsDbContextMock.GetAnalyticsDbContext(claimsPrincipal);
            var dataSourceService = new DataSourceService(dbContext, claimsPrincipal, AutoMapperMock.GetAutoMapper());

            var userRoleAssignemnt = new DataSourceRoleAssignment() { StrataId = 5, DataSourceId = 5, IdentityGuid = claimsPrincipal.GetUserGuid(), IdentityName = claimsPrincipal.GetUsername(), IdentityType = IdentityType.User, Role = DataSourceRole.Viewer };
            var differentUserRoleAssignemnt = new DataSourceRoleAssignment() { StrataId = 5, DataSourceId = 5, IdentityGuid = Guid.NewGuid(), IdentityName = "Random User", IdentityType = IdentityType.User, Role = DataSourceRole.Editor };

            dbContext.DataSourceRoleAssignments.Add(userRoleAssignemnt);
            dbContext.DataSourceRoleAssignments.Add(differentUserRoleAssignemnt);

            await dbContext.SaveChangesAsync();

            // act
            var role = await dataSourceService.GetCurrentUserRoleAsync(5, CancellationToken.None);

            // assert
            role.Should().Be(userRoleAssignemnt.Role);
        }

        [Test]
        public async Task DataSourceCurrentUserRole_ReturnsMostPrivilege_GivenUserAssignedToMultipleRoles()
        {
            // arrange
            var userGroup = "DSS - Admin";
            var userGroupGuid = Guid.NewGuid();
            var claimsPrincipal = IClaimsPrincipalAccessorMock.GetClaimsPrincipalAccessor(5, false, false, new string[] { userGroup });
            var dbContext = AnalyticsDbContextMock.GetAnalyticsDbContext(claimsPrincipal);
            var dataSourceService = new DataSourceService(dbContext, claimsPrincipal, AutoMapperMock.GetAutoMapper());

            var viewerRoleAssignment = new DataSourceRoleAssignment() { StrataId = 5, DataSourceId = 5, IdentityGuid = claimsPrincipal.GetUserGuid(), IdentityName = claimsPrincipal.GetUsername(), IdentityType = IdentityType.User, Role = DataSourceRole.Viewer };
            var editorRoleAssignment = new DataSourceRoleAssignment() { StrataId = 5, DataSourceId = 5, IdentityGuid = userGroupGuid, IdentityName = userGroup, IdentityType = IdentityType.UserGroup, Role = DataSourceRole.Editor };
            dbContext.DataSourceRoleAssignments.Add(viewerRoleAssignment);
            dbContext.DataSourceRoleAssignments.Add(editorRoleAssignment);

            await dbContext.SaveChangesAsync();

            // act
            var role = await dataSourceService.GetCurrentUserRoleAsync(5, CancellationToken.None);

            // assert
            role.Should().Be(DataSourceRole.Editor);
        }
    }
}