add tests

Author: Repumba

tests/backend/test_permissions.py

@@ -239,3 +239,84 @@ def test_removing_object_with_comments(admin_session):
 
     with ShouldRaise(status_code=404):
         admin_session.get_sample(sample.dhash)
+
+
+def test_adding_related_files(admin_session):
+    testCase = RelationTestCase(admin_session)
+
+    Alice = testCase.new_user("Alice")
+    Bob = testCase.new_user("Bob", capabilities=["adding_related_files"])
+
+    SampleA = testCase.new_sample("SampleA")
+    SampleA.create(Alice, upload_as="public")
+    SampleB = testCase.new_sample("SampleB")
+
+    # Alice doesn't have capability
+    with ShouldRaise(status_code=403):
+        Alice.session.add_related_file(SampleA.dhash, "RelatedFileA")
+
+    # Everything works fine
+    Bob.session.add_related_file(SampleA.dhash, "RelatedFileA")
+    assert len( testCase.session.get_related_files(SampleA.dhash)['related_files'] ) == 1
+
+    # Bob can't add related files to objects not accessible for him
+    with ShouldRaise(status_code=404):
+        Bob.session.add_related_file(SampleB.dhash, "RelatedFileB")
+
+
+def test_removing_related_files(admin_session):
+    testCase = RelationTestCase(admin_session)
+
+    Alice = testCase.new_user("Alice")
+    Bob = testCase.new_user("Bob", capabilities=["removing_related_files"])
+
+    SampleA = testCase.new_sample("SampleA")
+    SampleA.create(Alice, upload_as="public")
+    SampleB = testCase.new_sample("SampleB")
+
+    related_file_content = rand_string()
+    related_file_dhash = calc_sha256(related_file_content)
+
+    # Related files added by admin session
+    testCase.session.add_related_file(SampleA.dhash, "RelatedFile", related_file_content)
+    testCase.session.add_related_file(SampleB.dhash, "RelatedFile", related_file_content)
+
+    assert len( testCase.session.get_related_files(SampleA.dhash)['related_files'] ) == 1
+    assert len( testCase.session.get_related_files(SampleB.dhash)['related_files'] ) == 1
+
+    # Alice doesn't have capability
+    with ShouldRaise(status_code=403):
+        Alice.session.remove_related_file(SampleA.dhash, related_file_dhash)
+
+    # Bob can't remove related files for objects not accessible for him
+    with ShouldRaise(status_code=404):
+        Bob.session.remove_related_file(SampleB.dhash, related_file_dhash)
+
+    # Everything works file
+    Bob.session.remove_related_file(SampleA.dhash, related_file_dhash)
+
+    assert len( testCase.session.get_related_files(SampleA.dhash)['related_files'] ) == 0
+    assert len( testCase.session.get_related_files(SampleB.dhash)['related_files'] ) == 1
+
+
+def test_accessing_related_files(admin_session):
+    testCase = RelationTestCase(admin_session)
+
+    Alice = testCase.new_user("Alice")
+    Bob = testCase.new_user("Bob", capabilities=["access_related_files"])
+
+    SampleA = testCase.new_sample("SampleA")
+    SampleA.create(Alice, upload_as="public")
+    SampleB = testCase.new_sample("SampleB")
+
+    testCase.session.add_related_file(SampleA.dhash, "RelatedFile")
+
+    # Alice doesn't have capability
+    assert len( Alice.session.get_related_files(SampleA.dhash)['related_files'] ) == 0
+
+    # Everything works fine
+    assert len( Bob.session.get_related_files(SampleA.dhash)['related_files'] ) == 1
+
+    # Bob can't access related files for objects not accessible for him
+    with ShouldRaise(status_code=404):
+        Bob.session.get_related_files(SampleB.dhash)

tests/backend/utils.py

@@ -5,6 +5,7 @@
 import string
 import time
 import uuid
+import hashlib
 
 import baseconv
 import requests
@@ -19,6 +20,10 @@ def base62uuid():
     return converter.encode(uuid4_as_int)
 
 
+def calc_sha256(content):
+    return hashlib.sha256(bytes(str(content), "utf-8")).hexdigest()
+
+
 def rand_string(size=20):
     return "".join(random.choices(string.ascii_lowercase + string.digits, k=size))
 
@@ -471,3 +476,25 @@ def unassign_analysis_from_object(self, identifier, analysis_id):
         res = self.session.delete(self.mwdb_url + "/object/" + identifier + "/karton/" + analysis_id)
         res.raise_for_status()
         return res.json()
+
+    def get_related_files(self, identifier):
+        res = self.session.get(self.mwdb_url + "/object/" + identifier + "/related_file")
+        res.raise_for_status()
+        return res.json()
+
+    def add_related_file(self, main_obj_identifier, filename=None, content=None):
+        if filename is None:
+            filename = str(uuid.uuid4())
+
+        if content is None:
+            content = str(uuid.uuid4())
+
+        res = self.session.post(
+            self.mwdb_url + "/object/" + main_obj_identifier + "/related_file",
+            files={"file": (filename, content)},
+        )
+        res.raise_for_status()
+
+    def remove_related_file(self, main_obj_identifier, identifier):
+        res = self.session.delete(self.mwdb_url + "/object/" + main_obj_identifier + "/related_file/" + identifier)
+        res.raise_for_status()