casbin-ruby 1.0.3 → 1.0.4

data/spec/casbin/rbac/default_role_manager/role_spec.rb

@@ -0,0 +1,84 @@
+# frozen_string_literal: true
+
+require 'casbin-ruby/rbac/default_role_manager/role'
+
+describe Casbin::Rbac::DefaultRoleManager::Role do
+  let(:role) { described_class.new('test_role') }
+  let(:new_role) { described_class.new('new_role') }
+
+  describe '#add_role' do
+    it 'when new role' do
+      role.add_role(new_role)
+      expect(role.roles).to match_array([new_role])
+    end
+
+    it 'when role exist' do
+      role.add_role(new_role)
+      role.add_role(new_role)
+      expect(role.roles).to match_array([new_role])
+    end
+  end
+
+  it '#delete_role' do
+    role.add_role(new_role)
+    expect(role.roles).not_to be_empty
+
+    role.delete_role(new_role)
+    expect(role.roles).to be_empty
+  end
+
+  describe '#has_role' do
+    it 'when root name' do
+      expect(role.has_role(role.name, 1)).to be_truthy
+    end
+
+    it 'when hierarchy_level incorrect' do
+      role.add_role(new_role)
+      expect(role.has_role(new_role.name, 0)).to be_falsey
+      expect(role.has_role(new_role.name, -1)).to be_falsey
+      expect(role.has_role(new_role.name, 'text')).to be_falsey
+    end
+
+    it 'when role deep' do
+      deep_role = described_class.new('depp_role')
+      new_role.add_role(deep_role)
+      role.add_role(new_role)
+      expect(role.has_role(new_role.name, 1)).to be_truthy
+      expect(role.has_role(deep_role.name, 1)).to be_falsey
+      expect(role.has_role(deep_role.name, 2)).to be_truthy
+      expect(role.has_role(deep_role.name, 5)).to be_truthy
+    end
+  end
+
+  it '#get_roles' do
+    deep_role = described_class.new('depp_role')
+    new_role.add_role(deep_role)
+    role.add_role(new_role)
+    expect(role.get_roles).to match_array([new_role.name])
+  end
+
+  it '#has_direct_role' do
+    role.add_role(new_role)
+    expect(role.has_direct_role(new_role.name)).to be_truthy
+    expect(role.has_direct_role('not_exist')).to be_falsey
+  end
+
+  describe '#to_string' do
+    it 'when roles empty' do
+      expect(role.to_string).to be_nil
+    end
+
+    it 'when one role' do
+      role.add_role(new_role)
+      expect(role.to_string).to eq "#{role.name} < #{new_role.name}"
+    end
+
+    it 'when many role' do
+      first_role = described_class.new('first_role')
+      second_role = described_class.new('second_role')
+      role.add_role(first_role)
+      role.add_role(second_role)
+      expect(role.to_string).to eq "#{role.name} < (#{first_role.name}, #{second_role.name})"
+    end
+  end
+end

data/spec/casbin/util/builtin_operators_spec.rb

@@ -0,0 +1,205 @@
+# frozen_string_literal: true
+
+require 'casbin-ruby/util/builtin_operators'
+require 'casbin-ruby/rbac/default_role_manager/role_manager'
+
+describe Casbin::Util::BuiltinOperators do
+  it '.key_match_func' do
+    expect(described_class.key_match_func('/foo', '/foo')).to be_truthy
+    expect(described_class.key_match_func('/foo', '/foo*')).to be_truthy
+    expect(described_class.key_match_func('/foo', '/foo/*')).to be_falsey
+    expect(described_class.key_match_func('/foo/bar', '/foo')).to be_falsey
+    expect(described_class.key_match_func('/foo/bar', '/foo*')).to be_truthy
+    expect(described_class.key_match_func('/foo/bar', '/foo/*')).to be_truthy
+    expect(described_class.key_match_func('/foobar', '/foo')).to be_falsey
+    expect(described_class.key_match_func('/foobar', '/foo*')).to be_truthy
+    expect(described_class.key_match_func('/foobar', '/foo/*')).to be_falsey
+  end
+
+  it '.key_match2_func' do
+    expect(described_class.key_match2_func('/foo', '/foo')).to be_truthy
+    expect(described_class.key_match2_func('/foo', '/foo*')).to be_truthy
+    expect(described_class.key_match2_func('/foo', '/foo/*')).to be_falsey
+    expect(described_class.key_match2_func('/foo/bar', '/foo')).to be_falsey
+    expect(described_class.key_match2_func('/foo/bar', '/foo*')).to be_falsey # different with key_match_func.
+    expect(described_class.key_match2_func('/foo/bar', '/foo/*')).to be_truthy
+    expect(described_class.key_match2_func('/foobar', '/foo')).to be_falsey
+    expect(described_class.key_match2_func('/foobar', '/foo*')).to be_falsey # different with key_match_func.
+    expect(described_class.key_match2_func('/foobar', '/foo/*')).to be_falsey
+
+    expect(described_class.key_match2_func('/', '/:resource')).to be_falsey
+    expect(described_class.key_match2_func('/resource1', '/:resource')).to be_truthy
+    expect(described_class.key_match2_func('/myid', '/:id/using/:resId')).to be_falsey
+    expect(described_class.key_match2_func('/myid/using/myresid', '/:id/using/:resId')).to be_truthy
+
+    expect(described_class.key_match2_func('/proxy/myid', '/proxy/:id/*')).to be_falsey
+    expect(described_class.key_match2_func('/proxy/myid/', '/proxy/:id/*')).to be_truthy
+    expect(described_class.key_match2_func('/proxy/myid/res', '/proxy/:id/*')).to be_truthy
+    expect(described_class.key_match2_func('/proxy/myid/res/res2', '/proxy/:id/*')).to be_truthy
+    expect(described_class.key_match2_func('/proxy/myid/res/res2/res3', '/proxy/:id/*')).to be_truthy
+    expect(described_class.key_match2_func('/proxy/', '/proxy/:id/*')).to be_falsey
+
+    expect(described_class.key_match2_func('/alice', '/:id')).to be_truthy
+    expect(described_class.key_match2_func('/alice/all', '/:id/all')).to be_truthy
+    expect(described_class.key_match2_func('/alice', '/:id/all')).to be_falsey
+    expect(described_class.key_match2_func('/alice/all', '/:id')).to be_falsey
+
+    expect(described_class.key_match2_func('/alice/all', '/:/all')).to be_falsey
+  end
+
+  it '.key_match3_func' do
+    # .key_match3_func is similar with .key_match2_func, except using "/proxy/{id}" instead of "/proxy/:id".
+    expect(described_class.key_match3_func('/foo', '/foo')).to be_truthy
+    expect(described_class.key_match3_func('/foo', '/foo*')).to be_truthy
+    expect(described_class.key_match3_func('/foo', '/foo/*')).to be_falsey
+    expect(described_class.key_match3_func('/foo/bar', '/foo')).to be_falsey
+    expect(described_class.key_match3_func('/foo/bar', '/foo*')).to be_falsey
+    expect(described_class.key_match3_func('/foo/bar', '/foo/*')).to be_truthy
+    expect(described_class.key_match3_func('/foobar', '/foo')).to be_falsey
+    expect(described_class.key_match3_func('/foobar', '/foo*')).to be_falsey
+    expect(described_class.key_match3_func('/foobar', '/foo/*')).to be_falsey
+
+    expect(described_class.key_match3_func('/', '/{resource}')).to be_falsey
+    expect(described_class.key_match3_func('/resource1', '/{resource}')).to be_truthy
+    expect(described_class.key_match3_func('/myid', '/{id}/using/{resId}')).to be_falsey
+    expect(described_class.key_match3_func('/myid/using/myresid', '/{id}/using/{resId}')).to be_truthy
+
+    expect(described_class.key_match3_func('/proxy/myid', '/proxy/{id}/*')).to be_falsey
+    expect(described_class.key_match3_func('/proxy/myid/', '/proxy/{id}/*')).to be_truthy
+    expect(described_class.key_match3_func('/proxy/myid/res', '/proxy/{id}/*')).to be_truthy
+    expect(described_class.key_match3_func('/proxy/myid/res/res2', '/proxy/{id}/*')).to be_truthy
+    expect(described_class.key_match3_func('/proxy/myid/res/res2/res3', '/proxy/{id}/*')).to be_truthy
+    expect(described_class.key_match3_func('/proxy/', '/proxy/{id}/*')).to be_falsey
+
+    expect(described_class.key_match3_func('/myid/using/myresid', '/{id/using/{resId}')).to be_falsey
+  end
+
+  it '.regex_match_func' do
+    expect(described_class.regex_match_func('/topic/create', '/topic/create')).to be_truthy
+    expect(described_class.regex_match_func('/topic/create/123', '/topic/create')).to be_truthy
+    expect(described_class.regex_match_func('/topic/delete', '/topic/create')).to be_falsey
+    expect(described_class.regex_match_func('/topic/edit', '/topic/edit/[0-9]+')).to be_falsey
+    expect(described_class.regex_match_func('/topic/edit/123', '/topic/edit/[0-9]+')).to be_truthy
+    expect(described_class.regex_match_func('/topic/edit/abc', '/topic/edit/[0-9]+')).to be_falsey
+    expect(described_class.regex_match_func('/foo/delete/123', '/topic/delete/[0-9]+')).to be_falsey
+    expect(described_class.regex_match_func('/topic/delete/0', '/topic/delete/[0-9]+')).to be_truthy
+    expect(described_class.regex_match_func('/topic/edit/123s', '/topic/delete/[0-9]+')).to be_falsey
+  end
+
+  it '.glob_match_func' do
+    expect(described_class.glob_match_func('/foo', '/foo')).to be_truthy
+    expect(described_class.glob_match_func('/foo', '/foo*')).to be_truthy
+    expect(described_class.glob_match_func('/foo', '/foo/*')).to be_falsey
+    expect(described_class.glob_match_func('/foo/bar', '/foo')).to be_falsey
+    expect(described_class.glob_match_func('/foo/bar', '/foo*')).to be_falsey
+    expect(described_class.glob_match_func('/foo/bar', '/foo/*')).to be_truthy
+    expect(described_class.glob_match_func('/foobar', '/foo')).to be_falsey
+    expect(described_class.glob_match_func('/foobar', '/foo*')).to be_truthy
+    expect(described_class.glob_match_func('/foobar', '/foo/*')).to be_falsey
+
+    expect(described_class.glob_match_func('/foo', '*/foo')).to be_truthy
+    expect(described_class.glob_match_func('/foo', '*/foo*')).to be_truthy
+    expect(described_class.glob_match_func('/foo', '*/foo/*')).to be_falsey
+    expect(described_class.glob_match_func('/foo/bar', '*/foo')).to be_falsey
+    expect(described_class.glob_match_func('/foo/bar', '*/foo*')).to be_falsey
+    expect(described_class.glob_match_func('/foo/bar', '*/foo/*')).to be_truthy
+    expect(described_class.glob_match_func('/foobar', '*/foo')).to be_falsey
+    expect(described_class.glob_match_func('/foobar', '*/foo*')).to be_truthy
+    expect(described_class.glob_match_func('/foobar', '*/foo/*')).to be_falsey
+
+    expect(described_class.glob_match_func('/prefix/foo', '*/foo')).to be_falsey
+    expect(described_class.glob_match_func('/prefix/foo', '*/foo*')).to be_falsey
+    expect(described_class.glob_match_func('/prefix/foo', '*/foo/*')).to be_falsey
+    expect(described_class.glob_match_func('/prefix/foo/bar', '*/foo')).to be_falsey
+    expect(described_class.glob_match_func('/prefix/foo/bar', '*/foo*')).to be_falsey
+    expect(described_class.glob_match_func('/prefix/foo/bar', '*/foo/*')).to be_falsey
+    expect(described_class.glob_match_func('/prefix/foobar', '*/foo')).to be_falsey
+    expect(described_class.glob_match_func('/prefix/foobar', '*/foo*')).to be_falsey
+    expect(described_class.glob_match_func('/prefix/foobar', '*/foo/*')).to be_falsey
+
+    expect(described_class.glob_match_func('/prefix/subprefix/foo', '*/foo')).to be_falsey
+    expect(described_class.glob_match_func('/prefix/subprefix/foo', '*/foo*')).to be_falsey
+    expect(described_class.glob_match_func('/prefix/subprefix/foo', '*/foo/*')).to be_falsey
+    expect(described_class.glob_match_func('/prefix/subprefix/foo/bar', '*/foo')).to be_falsey
+    expect(described_class.glob_match_func('/prefix/subprefix/foo/bar', '*/foo*')).to be_falsey
+    expect(described_class.glob_match_func('/prefix/subprefix/foo/bar', '*/foo/*')).to be_falsey
+    expect(described_class.glob_match_func('/prefix/subprefix/foobar', '*/foo')).to be_falsey
+    expect(described_class.glob_match_func('/prefix/subprefix/foobar', '*/foo*')).to be_falsey
+    expect(described_class.glob_match_func('/prefix/subprefix/foobar', '*/foo/*')).to be_falsey
+  end
+
+  it '.ip_match_func' do
+    expect(described_class.ip_match_func('192.168.2.123', '192.168.2.0/24')).to be_truthy
+    expect(described_class.ip_match_func('192.168.2.123', '192.168.3.0/24')).to be_falsey
+    expect(described_class.ip_match_func('192.168.2.123', '192.168.2.0/16')).to be_truthy
+    expect(described_class.ip_match_func('192.168.2.123', '192.168.2.123')).to be_truthy
+    expect(described_class.ip_match_func('192.168.2.123', '192.168.2.123/32')).to be_truthy
+    expect(described_class.ip_match_func('10.0.0.11', '10.0.0.0/8')).to be_truthy
+    expect(described_class.ip_match_func('11.0.0.123', '10.0.0.0/8')).to be_falsey
+  end
+
+  describe '#generate_g_function' do
+    subject { described_class.generate_g_function(rm).call name1, name2 }
+
+    let(:name1) { 'abc' }
+    let(:name2) { 'cde' }
+
+    context 'without role manager' do
+      let(:rm) { nil }
+
+      context 'when same names' do
+        let(:name2) { 'abc' }
+
+        it { is_expected.to be_truthy }
+      end
+
+      context 'when different names' do
+        it { is_expected.to be_falsey }
+      end
+    end
+
+    context 'with role manager' do
+      let(:rm) { Casbin::Rbac::DefaultRoleManager::RoleManager.new(1) }
+
+      context 'without domain' do
+        before do
+          expect(rm).to(receive(:has_link).with(name1, name2).and_return(has_link))
+        end
+
+        context 'when has link' do
+          let(:has_link) { true }
+
+          it { is_expected.to be_truthy }
+        end
+
+        context 'when has not link' do
+          let(:has_link) { false }
+
+          it { is_expected.to be_falsey }
+        end
+      end
+
+      context 'with domain' do
+        subject { described_class.generate_g_function(rm).call name1, name2, domain }
+
+        let(:domain) { 'domain' }
+
+        before do
+          expect(rm).to(receive(:has_link).with(name1, name2, domain).and_return(has_link))
+        end
+
+        context 'when has link' do
+          let(:has_link) { true }
+
+          it { is_expected.to be_truthy }
+        end
+
+        context 'when has not link' do
+          let(:has_link) { false }
+
+          it { is_expected.to be_falsey }
+        end
+      end
+    end
+  end
+end

data/spec/casbin/util_spec.rb

@@ -0,0 +1,98 @@
+# frozen_string_literal: true
+
+require 'casbin-ruby/util'
+
+describe Casbin::Util do
+  it '.remove_comments' do
+    expect(described_class.remove_comments('r.act == p.act # comments')).to eq 'r.act == p.act'
+    expect(described_class.remove_comments('r.act == p.act#comments')).to eq 'r.act == p.act'
+    expect(described_class.remove_comments('r.act == p.act###')).to eq 'r.act == p.act'
+    expect(described_class.remove_comments('### comments')).to eq ''
+    expect(described_class.remove_comments('r.act == p.act')).to eq 'r.act == p.act'
+  end
+
+  describe '#escape_assertion' do
+    subject { described_class.escape_assertion(value) }
+
+    context 'without attributes' do
+      let(:value) { 'm = r.sub == p.sub && r.obj == p.obj && r.act == p.act' }
+
+      it { is_expected.to eq 'm = r_sub == p_sub && r_obj == p_obj && r_act == p_act' }
+    end
+
+    context 'with attributes' do
+      context 'with latin identifier' do
+        let(:value) { 'm = r.sub.Chief == r.obj.Owner' }
+
+        it { is_expected.to eq "m = r_sub['Chief'] == r_obj['Owner']" }
+      end
+
+      context 'with underscore' do
+        let(:value) { 'm = r.sub == r.obj._Owner' }
+
+        it { is_expected.to eq "m = r_sub == r_obj['_Owner']" }
+      end
+
+      context 'with unicode identifier' do
+        let(:value) { 'm = r.sub == r.obj.Идентификатор1' }
+
+        it { is_expected.to eq "m = r_sub == r_obj['Идентификатор1']" }
+      end
+
+      context 'with nested identifiers' do
+        let(:value) { 'm = r.sub == r.obj.Owner.Position' }
+
+        it { is_expected.to eq "m = r_sub == r_obj['Owner']['Position']" }
+      end
+    end
+  end
+
+  it '.array_remove_duplicates' do
+    expect(described_class.array_remove_duplicates(%w[data data1 data2 data1 data2 data3]))
+      .to match_array(%w[data data1 data2 data3])
+  end
+
+  it '.array_to_string' do
+    expect(described_class.array_to_string(%w[data data1 data2 data3])).to eq 'data, data1, data2, data3'
+  end
+
+  it '.params_to_string' do
+    expect(described_class.params_to_string('data', 'data1', 'data2', 'data3')).to eq 'data, data1, data2, data3'
+  end
+
+  it '.has_eval' do
+    expect(described_class.has_eval('eval() && a && b && c')).to be_truthy
+    expect(described_class.has_eval('a && b && eval(c)')).to be_truthy
+    expect(described_class.has_eval('eval) && a && b && c')).to be_falsey
+    expect(described_class.has_eval('eval)( && a && b && c')).to be_falsey
+    expect(described_class.has_eval('eval(c * (a + b)) && a && b && c')).to be_truthy
+    expect(described_class.has_eval('xeval() && a && b && c')).to be_falsey
+    expect(described_class.has_eval('eval(a) && eval(b) && a && b && c')).to be_truthy
+  end
+
+  describe '#replace_eval' do
+    subject { described_class.replace_eval(expr, rules) }
+
+    context 'with eval in the beginning' do
+      let(:expr) { 'eval(a) && eval(b) && c' }
+      let(:rules) { { 'a' => '1 + 1', 'b' => 'a + 1' } }
+
+      it { is_expected.to eq '(1 + 1) && (a + 1) && c' }
+    end
+
+    context 'with eval in the end' do
+      let(:expr) { 'a && eval(b) && eval(c)' }
+      let(:rules) { { 'b' => '1', 'c' => '(a + 1) + c' } }
+
+      it { is_expected.to eq 'a && (1) && ((a + 1) + c)' }
+    end
+  end
+
+  it '.get_eval_value' do
+    expect(described_class.get_eval_value('eval(a) && a && b && c')).to match_array(['a'])
+    expect(described_class.get_eval_value('a && eval(a) && b && c')).to match_array(['a'])
+    expect(described_class.get_eval_value('eval(a) && eval(b) && a && b && c')).to match_array(%w[a b])
+    expect(described_class.get_eval_value('eval(p.sub_rule) || p.obj == r.obj && eval(p.domain_rule)'))
+      .to match_array(%w[p.sub_rule p.domain_rule])
+  end
+end

data/spec/support/model_helper.rb

@@ -0,0 +1,9 @@
+# frozen_string_literal: true
+
+def model_config(name)
+  File.expand_path("files/examples/#{name}/model.conf", __dir__)
+end
+
+def policy_file(name)
+  File.expand_path("files/examples/#{name}/policy", __dir__)
+end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: casbin-ruby
 version: !ruby/object:Gem::Version
-  version: 1.0.3
+  version: 1.0.4
 platform: ruby
 authors:
 - Igor Kutyavin
@@ -75,7 +75,46 @@ email:
 executables: []
 extensions: []
 extra_rdoc_files: []
-files: []
+files:
+- README.md
+- lib/casbin-ruby.rb
+- lib/casbin-ruby/config/config.rb
+- lib/casbin-ruby/core_enforcer.rb
+- lib/casbin-ruby/effect/allow_and_deny_effector.rb
+- lib/casbin-ruby/effect/allow_override_effector.rb
+- lib/casbin-ruby/effect/default_effector.rb
+- lib/casbin-ruby/effect/deny_override_effector.rb
+- lib/casbin-ruby/effect/effector.rb
+- lib/casbin-ruby/effect/priority_effector.rb
+- lib/casbin-ruby/enforcer.rb
+- lib/casbin-ruby/internal_enforcer.rb
+- lib/casbin-ruby/management_enforcer.rb
+- lib/casbin-ruby/model/assertion.rb
+- lib/casbin-ruby/model/function_map.rb
+- lib/casbin-ruby/model/model.rb
+- lib/casbin-ruby/model/policy.rb
+- lib/casbin-ruby/persist/adapter.rb
+- lib/casbin-ruby/persist/adapters/file_adapter.rb
+- lib/casbin-ruby/persist/batch_adapter.rb
+- lib/casbin-ruby/persist/filtered_adapter.rb
+- lib/casbin-ruby/rbac/default_role_manager/role.rb
+- lib/casbin-ruby/rbac/default_role_manager/role_manager.rb
+- lib/casbin-ruby/rbac/role_manager.rb
+- lib/casbin-ruby/synced_enforcer.rb
+- lib/casbin-ruby/util.rb
+- lib/casbin-ruby/util/builtin_operators.rb
+- lib/casbin-ruby/util/evaluator.rb
+- lib/casbin-ruby/util/thread_lock.rb
+- lib/casbin-ruby/version.rb
+- spec/casbin/config/config_spec.rb
+- spec/casbin/core_enforcer_spec.rb
+- spec/casbin/enforcer_spec.rb
+- spec/casbin/model/function_map_spec.rb
+- spec/casbin/rbac/default_role_manager/role_manager_spec.rb
+- spec/casbin/rbac/default_role_manager/role_spec.rb
+- spec/casbin/util/builtin_operators_spec.rb
+- spec/casbin/util_spec.rb
+- spec/support/model_helper.rb
 homepage: https://github.com/evrone/casbin-ruby
 licenses:
 - Apache License 2.0
@@ -100,4 +139,13 @@ rubygems_version: 2.7.6.3
 signing_key: 
 specification_version: 4
 summary: Casbin in Ruby
-test_files: []
+test_files:
+- spec/casbin/core_enforcer_spec.rb
+- spec/casbin/enforcer_spec.rb
+- spec/casbin/model/function_map_spec.rb
+- spec/casbin/rbac/default_role_manager/role_spec.rb
+- spec/casbin/rbac/default_role_manager/role_manager_spec.rb
+- spec/casbin/config/config_spec.rb
+- spec/casbin/util/builtin_operators_spec.rb
+- spec/casbin/util_spec.rb
+- spec/support/model_helper.rb