foreman_openscap 13.1.2 → 13.2.0

data/locale/ko/foreman_openscap.po

@@ -47,7 +47,7 @@ msgid "%s reports over time"
 msgstr "기간별 %s 보고서"
 
 msgid "%s selected hosts."
-msgstr ""
+msgstr "%s개 호스트가 선택되었습니다."
 
 msgid "%s spool errors detected, inspect the appropriate file directly on proxy"
 msgstr "%s spool 오류가 감지되었습니다. 프록시에서 직접 해당 파일을 검사하세요."
@@ -68,7 +68,7 @@ msgid "A summary of reports for OpenSCAP policies"
 msgstr "OpenSCAP 정책에 대한 보고서 요약"
 
 msgid "ALL selected hosts."
-msgstr ""
+msgstr "선택한 모든 호스트"
 
 msgid "Actions"
 msgstr "동작 "
@@ -89,19 +89,19 @@ msgid "Apply policy to hosts"
 msgstr "호스트에 정책 적용"
 
 msgid "Assign"
-msgstr ""
+msgstr "할당"
 
 msgid "Assign Compliance Policy"
 msgstr "컴플라이언스 정책 할당"
 
 msgid "Assign OpenSCAP Proxy"
-msgstr ""
+msgstr "OpenSCAP 프록시 할당"
 
 msgid "Assign OpenSCAP Proxy for "
-msgstr ""
+msgstr "OpenSCAP 프록시 할당 대상"
 
 msgid "Assign OpenSCAP Proxy to multiple hosts"
-msgstr ""
+msgstr "여러 호스트에 OpenSCAP 프록시 할당"
 
 msgid "Back"
 msgstr "뒤로 "
@@ -293,7 +293,7 @@ msgid "Download bzipped ARF report"
 msgstr "bzipped ARF 보고서 다운로드"
 
 msgid "Edit %s"
-msgstr "%s 편집 "
+msgstr "%s 편집"
 
 msgid "Effective Profile"
 msgstr "효과적인 프로필"
@@ -321,8 +321,7 @@ msgstr "%s 저장에 실패했습니다:"
 
 msgid "Failed to assign OpenSCAP Proxy to %{failed} of %{total} host."
 msgid_plural "Failed to assign OpenSCAP Proxy to %{failed} of %{total} hosts."
-msgstr[0] ""
-msgstr[1] ""
+msgstr[0] "%{total}개 호스트 중 %{failed}개 호스트에 OpenSCAP 프록시를 할당하지 못했습니다."
 
 msgid "Failed to delete %s compliance reports"
 msgstr "%s 컴플라이언스 보고서를 삭제하지 못했습니다."
@@ -413,10 +412,10 @@ msgid "Hosts passing this rule"
 msgstr "이 규칙을 통과하는 호스트"
 
 msgid "Hosts to explicitly exclude in the action. All other hosts will be included in the action, unless an included parameter is passed as well."
-msgstr ""
+msgstr "작업에서 명시적으로 제외할 호스트. 포함된 매개변수가 전달되지 않는 한 다른 모든 호스트는 작업에 포함됩니다."
 
 msgid "Hosts to include in the action"
-msgstr ""
+msgstr "작업에 포함할 호스트"
 
 msgid "How the policy should be deployed"
 msgstr "정책이 어떻게 배포되어야 하는가"
@@ -425,7 +424,7 @@ msgid "ID of OpenSCAP Proxy"
 msgstr "OpenSCAP 프록시 ID"
 
 msgid "ID of the OpenSCAP Proxy to assign to the hosts"
-msgstr ""
+msgstr "호스트에 할당할 OpenSCAP 프록시의 ID"
 
 msgid "In Foreman, a compliance policy checklist is defined via %s."
 msgstr "Foreman에서는 컴플라이언스 정책 체크리스트는 %s을/를 통해 정의됩니다."
@@ -465,7 +464,7 @@ msgid "Latest reports for policy: %s"
 msgstr "정책에 대한 최신 보고서: %s"
 
 msgid "Line chart"
-msgstr ""
+msgstr "선 그래프"
 
 msgid "List ARF reports"
 msgstr "ARF 보고서 목록"
@@ -483,16 +482,16 @@ msgid "List Tailoring files"
 msgstr "맞춤형 파일 목록"
 
 msgid "List of host ids to exclude and not perform the action on"
-msgstr ""
+msgstr "제외하고 작업을 수행하지 않을 호스트 ID 목록"
 
 msgid "List of host ids to perform the action on"
-msgstr ""
+msgstr "작업을 수행할 호스트 ID 목록"
 
 msgid "Loading"
-msgstr ""
+msgstr "로딩 중"
 
 msgid "Loading..."
-msgstr "로딩..."
+msgstr "로딩 중..."
 
 msgid "Locations"
 msgstr "위치"
@@ -537,7 +536,7 @@ msgid "No ARF reports for this policy"
 msgstr "이 정책에 대한 ARF 보고서가 없습니다."
 
 msgid "No OpenSCAP Proxies available. Please configure a Smart Proxy with the OpenSCAP feature."
-msgstr ""
+msgstr "사용 가능한 OpenSCAP 프록시가 없습니다. OpenSCAP 기능을 갖춘 Smart Proxy를 구성하십시오."
 
 msgid "No OpenSCAP Proxy selected."
 msgstr "OpenSCAP 프록시가 선택되지 않았습니다."
@@ -561,7 +560,7 @@ msgid "No compliance reports were found."
 msgstr "컴플라이언트 보고서를 찾을 수 없습니다."
 
 msgid "No data available"
-msgstr ""
+msgstr "사용 가능한 데이터가 없음"
 
 msgid "No hosts selected"
 msgstr "선택된 호스트가 없음"
@@ -627,13 +626,13 @@ msgid "OpenSCAP Proxy"
 msgstr "OpenSCAP Proxy"
 
 msgid "OpenSCAP Proxy is set to %s"
-msgstr ""
+msgstr "OpenSCAP 프록시가 %s(으)로 설정되었습니다."
 
 msgid "OpenSCAP Proxy to use for fetching SCAP content and uploading ARF reports. Leave blank and override appropriate parameters when using proxy load balancer."
 msgstr "SCAP 콘텐츠를 가져오고 ARF 보고서를 업로드하는 데 사용할 OpenSCAP 프록시입니다. 프록시 로드 밸런서를 사용할 때는 공백으로 두고 적절한 매개변수를 재정의합니다."
 
 msgid "OpenSCAP Proxy with id %s not found"
-msgstr ""
+msgstr "ID가 %s인 OpenSCAP 프록시를 찾을 수 없습니다."
 
 msgid "Openscap Proxy"
 msgstr "Openscap 프록시"
@@ -773,7 +772,7 @@ msgid "Request timed out. Please try increasing Settings -> proxy_request_timeou
 msgstr "요청 시간이 초과되었습니다. 설정 -> proxy_request_timeout을 늘려보세요."
 
 msgid "Required %{msg_name} %{class} was not found, please ensure it is imported first."
-msgstr "필수의 %{msg_name} %{class} 을/를 찾을 수 없습니다. 먼저 가져왔는지 확인하세요."
+msgstr "필수의 %{msg_name} %{class}을/를 찾을 수 없습니다. 먼저 가져왔는지 확인하세요."
 
 msgid "Requires %s Puppet class. This will assign the class to the hosts or selected hostgroups."
 msgstr "%s Puppet 클래스가 필요합니다. 이는 클래스를 호스트 또는 선택된 호스트그룹에 할당합니다."
@@ -839,7 +838,7 @@ msgid "Schedule"
 msgstr "스케줄 "
 
 msgid "Search string describing which hosts to perform the action on"
-msgstr ""
+msgstr "작업을 수행할 호스트를 설명하는 검색 문자열"
 
 msgid "Select Action"
 msgstr "작업 선택"
@@ -893,7 +892,7 @@ msgid "Smart Class Parameters"
 msgstr "스마트 클래스 매개변수"
 
 msgid "Snippet"
-msgstr "조각 모음 "
+msgstr "스니펫"
 
 msgid "Something went wrong while selecting compliance reports - %s"
 msgstr "컴플라이언스 보고서를 선택하는 도중 문제가 발생했습니다 -  %s"
@@ -924,8 +923,7 @@ msgstr "ARF 보고서를 성공적으로 삭제했습니다."
 
 msgid "Successfully updated %{success} host."
 msgid_plural "Successfully updated %{success} hosts."
-msgstr[0] ""
-msgstr[1] ""
+msgstr[0] "%{success}개 호스트를 성공적으로 업데이트했습니다."
 
 msgid "Summary from %{time} ago to now"
 msgstr "%{time} 전에서 현재까지의 요약"
@@ -972,7 +970,7 @@ msgid "The job has started on selected host(s), you can check the status on the
 msgstr "선택한 호스트에서 작업이 시작되었습니다. 작업 세부 정보 페이지에서 상태를 확인할 수 있습니다."
 
 msgid "The selected OpenSCAP Proxy does not have the OpenSCAP feature enabled."
-msgstr ""
+msgstr "선택한 OpenSCAP 프록시에 OpenSCAP 기능이 활성화되어 있지 않습니다."
 
 msgid "There are significant differences in deployment options."
 msgstr "배포 옵션에는 상당한 차이가 있습니다."
@@ -990,7 +988,7 @@ msgid "This profile will be used to override the one from scap content"
 msgstr "이 프로필은 scap 콘텐츠의 프로필을 재정의하는 데 사용됩니다."
 
 msgid "This will change previous proxy assignments on the selected hosts."
-msgstr ""
+msgstr "이렇게 하면 선택한 호스트에 대한 기존 프록시 할당이 변경됩니다."
 
 msgid "Title"
 msgstr "제목"

data/locale/pt_BR/foreman_openscap.po

@@ -496,7 +496,7 @@ msgid "List of host ids to perform the action on"
 msgstr ""
 
 msgid "Loading"
-msgstr ""
+msgstr "Carregando"
 
 msgid "Loading..."
 msgstr "Carregando..."

data/locale/ru/foreman_openscap.po

@@ -493,7 +493,7 @@ msgid "List of host ids to perform the action on"
 msgstr ""
 
 msgid "Loading"
-msgstr ""
+msgstr "Загружается"
 
 msgid "Loading..."
 msgstr "Загрузка..."

data/locale/sv_SE/foreman_openscap.po

@@ -489,7 +489,7 @@ msgid "List of host ids to perform the action on"
 msgstr ""
 
 msgid "Loading"
-msgstr ""
+msgstr "Laddar"
 
 msgid "Loading..."
 msgstr ""

data/locale/zh_CN/foreman_openscap.po

@@ -47,7 +47,7 @@ msgid "%s reports over time"
 msgstr "一直以來的 %s 报告"
 
 msgid "%s selected hosts."
-msgstr ""
+msgstr "%{failed} 所选的主机"
 
 msgid "%s spool errors detected, inspect the appropriate file directly on proxy"
 msgstr "发现了 %s 个 spool 错误，在代理上直接检查相关的文件"
@@ -68,7 +68,7 @@ msgid "A summary of reports for OpenSCAP policies"
 msgstr "OpenSCAP 策略报告摘要"
 
 msgid "ALL selected hosts."
-msgstr ""
+msgstr "所有选定的主机。"
 
 msgid "Actions"
 msgstr "操作"
@@ -89,19 +89,19 @@ msgid "Apply policy to hosts"
 msgstr "对主机应用策略"
 
 msgid "Assign"
-msgstr ""
+msgstr "分配"
 
 msgid "Assign Compliance Policy"
 msgstr "分配合规政策"
 
 msgid "Assign OpenSCAP Proxy"
-msgstr ""
+msgstr "分配 OpenSCAP 代理"
 
 msgid "Assign OpenSCAP Proxy for "
-msgstr ""
+msgstr "分配 OpenSCAP 代理 "
 
 msgid "Assign OpenSCAP Proxy to multiple hosts"
-msgstr ""
+msgstr "为多个主机分配 OpenSCAP 代理"
 
 msgid "Back"
 msgstr "返回"
@@ -321,8 +321,7 @@ msgstr "保存失败 %s:"
 
 msgid "Failed to assign OpenSCAP Proxy to %{failed} of %{total} host."
 msgid_plural "Failed to assign OpenSCAP Proxy to %{failed} of %{total} hosts."
-msgstr[0] ""
-msgstr[1] ""
+msgstr[0] "将 OpenSCAP 代理分配给 %{total} 主机的 %{failed} 失败。"
 
 msgid "Failed to delete %s compliance reports"
 msgstr "刪除 %s 合规报告失败"
@@ -413,10 +412,10 @@ msgid "Hosts passing this rule"
 msgstr "主机通过了这个规则"
 
 msgid "Hosts to explicitly exclude in the action. All other hosts will be included in the action, unless an included parameter is passed as well."
-msgstr ""
+msgstr "主机明确排除在操作之外。除非还传递了包含的参数，否则所有其他主机都将包含在操作中。"
 
 msgid "Hosts to include in the action"
-msgstr ""
+msgstr "操作中要包含的主机"
 
 msgid "How the policy should be deployed"
 msgstr "应如何部署策略"
@@ -425,7 +424,7 @@ msgid "ID of OpenSCAP Proxy"
 msgstr "OpenSCAP 代理服务器的 ID"
 
 msgid "ID of the OpenSCAP Proxy to assign to the hosts"
-msgstr ""
+msgstr "分配给主机的 OpenSCAP 代理的 ID"
 
 msgid "In Foreman, a compliance policy checklist is defined via %s."
 msgstr "在 Foreman 中，合规策略检查清单通过 %s 定义。"
@@ -469,7 +468,7 @@ msgid "Latest reports for policy: %s"
 msgstr "最新的政策报告：%s"
 
 msgid "Line chart"
-msgstr ""
+msgstr "折线图"
 
 msgid "List ARF reports"
 msgstr "列出 ARF 报告"
@@ -487,13 +486,13 @@ msgid "List Tailoring files"
 msgstr "列出 Tailoring 文件"
 
 msgid "List of host ids to exclude and not perform the action on"
-msgstr ""
+msgstr "要排除的主机 ID 列表，不对其执行操作"
 
 msgid "List of host ids to perform the action on"
-msgstr ""
+msgstr "要执行操作的主机 ID 列表"
 
 msgid "Loading"
-msgstr ""
+msgstr "加载"
 
 msgid "Loading..."
 msgstr "载入中..."
@@ -541,7 +540,7 @@ msgid "No ARF reports for this policy"
 msgstr "此政策沒有 ARF 報告"
 
 msgid "No OpenSCAP Proxies available. Please configure a Smart Proxy with the OpenSCAP feature."
-msgstr ""
+msgstr "没有可用的 OpenSCAP 代理。请使用 OpenSCAP 功能配置智能代理。"
 
 msgid "No OpenSCAP Proxy selected."
 msgstr "没有选择 OpenSCAP 代理。"
@@ -565,7 +564,7 @@ msgid "No compliance reports were found."
 msgstr "没有找到合规报告。"
 
 msgid "No data available"
-msgstr ""
+msgstr "无可用数据"
 
 msgid "No hosts selected"
 msgstr "未选择主机"
@@ -631,13 +630,13 @@ msgid "OpenSCAP Proxy"
 msgstr "OpenSCAP 代理"
 
 msgid "OpenSCAP Proxy is set to %s"
-msgstr ""
+msgstr "OpenSCAP 代理被设置为 %s"
 
 msgid "OpenSCAP Proxy to use for fetching SCAP content and uploading ARF reports. Leave blank and override appropriate parameters when using proxy load balancer."
 msgstr "用来获取 SCAP 内容以及上传 ARF 报告的 OpenSCAP 代理。如果为空，则在使用代理负责均衡器时覆盖相应的参数。"
 
 msgid "OpenSCAP Proxy with id %s not found"
-msgstr ""
+msgstr "未找到 ID 为 %s 的 OpenSCAP 代理"
 
 msgid "Openscap Proxy"
 msgstr "Openscap 代理"
@@ -843,7 +842,7 @@ msgid "Schedule"
 msgstr "调度"
 
 msgid "Search string describing which hosts to perform the action on"
-msgstr ""
+msgstr "搜索字符串，描述要对其执行操作的主机"
 
 msgid "Select Action"
 msgstr "选择操作"
@@ -928,8 +927,7 @@ msgstr "成功删除了 ARF 报告。"
 
 msgid "Successfully updated %{success} host."
 msgid_plural "Successfully updated %{success} hosts."
-msgstr[0] ""
-msgstr[1] ""
+msgstr[0] "成功更新了 %{success} 主机。"
 
 msgid "Summary from %{time} ago to now"
 msgstr "从 %{time} 到现在的摘要"
@@ -978,7 +976,7 @@ msgid "The job has started on selected host(s), you can check the status on the
 msgstr "作业已在所选主机上启动，您可以在详情页中检查作业的状态。"
 
 msgid "The selected OpenSCAP Proxy does not have the OpenSCAP feature enabled."
-msgstr ""
+msgstr "所选的 OpenSCAP 代理没有启用 OpenSCAP 功能。"
 
 msgid "There are significant differences in deployment options."
 msgstr "部署选项之间存在重大差异。"
@@ -996,7 +994,7 @@ msgid "This profile will be used to override the one from scap content"
 msgstr "这个配置文件将用于覆盖 scap 内容中的配置文件"
 
 msgid "This will change previous proxy assignments on the selected hosts."
-msgstr ""
+msgstr "这将更改所选主机上的以前的代理分配。"
 
 msgid "Title"
 msgstr "提示"

data/locale/zh_TW/foreman_openscap.po

@@ -490,7 +490,7 @@ msgid "List of host ids to perform the action on"
 msgstr ""
 
 msgid "Loading"
-msgstr ""
+msgstr "載入中"
 
 msgid "Loading..."
 msgstr "載入中…"

data/test/functional/api/v2/compliance/hosts_bulk_actions_controller_test.rb

@@ -3,7 +3,7 @@ require 'test_plugin_helper'
 class Api::V2::Compliance::HostsBulkActionsControllerTest < ActionController::TestCase
   tests Api::V2::Compliance::HostsBulkActionsController
 
-  def setup
+  setup do
     as_admin do
       @organization = FactoryBot.create(:organization)
       @location = FactoryBot.create(:location)
@@ -17,6 +17,10 @@ class Api::V2::Compliance::HostsBulkActionsControllerTest < ActionController::Te
                                  :organization => @organization,
                                  :location => @location)
       @host_ids = [@host1.id, @host2.id]
+      @policy = FactoryBot.create(:policy,
+                                  :organizations => [@organization],
+                                  :locations => [@location])
+      @policy.scap_content.update(:organization_ids => [@organization.id], :location_ids => [@location.id])
     end
   end
 
@@ -129,4 +133,174 @@ class Api::V2::Compliance::HostsBulkActionsControllerTest < ActionController::Te
     refute_match(/Successfully updated/, response['error']['message'])
     assert_equal @host_ids.sort, response['error']['failed_host_ids'].sort
   end
+
+  test "should assign compliance policy to selected hosts" do
+    put :assign_compliance_policy,
+        params: valid_bulk_params.merge(:policy_id => @policy.id),
+        session: set_session_user
+
+    assert_response :success
+    response = ActiveSupport::JSON.decode(@response.body)
+    assert_match(/Updated hosts: Assigned with compliance policy/, response['message'])
+    assert_includes response['message'], @policy.name
+
+    @policy.reload
+    assert_includes @policy.hosts.map(&:id), @host1.id
+    assert_includes @policy.hosts.map(&:id), @host2.id
+  end
+
+  test "should assign compliance policy to a single host" do
+    put :assign_compliance_policy,
+        params: valid_bulk_params([@host1.id]).merge(:policy_id => @policy.id),
+        session: set_session_user
+
+    assert_response :success
+    response = ActiveSupport::JSON.decode(@response.body)
+    assert_match(/Updated host: Assigned with compliance policy/, response['message'])
+
+    @policy.reload
+    assert_includes @policy.hosts.map(&:id), @host1.id
+    refute_includes @policy.hosts.map(&:id), @host2.id
+  end
+
+  test "should require policy_id for assign" do
+    put :assign_compliance_policy,
+        params: valid_bulk_params,
+        session: set_session_user
+
+    assert_response :unprocessable_entity
+    response = ActiveSupport::JSON.decode(@response.body)
+    assert_match(/policy_id/, response['error']['message'])
+  end
+
+  test "should return error when policy is not found for assign" do
+    put :assign_compliance_policy,
+        params: valid_bulk_params.merge(:policy_id => 0),
+        session: set_session_user
+
+    assert_response :unprocessable_entity
+    response = ActiveSupport::JSON.decode(@response.body)
+    assert_match(/Compliance policy with id .* not found/, response['error']['message'])
+  end
+
+  test "should unassign compliance policy from selected hosts" do
+    as_admin do
+      @host1.policies = [@policy]
+      @host1.save!
+      @host2.policies = [@policy]
+      @host2.save!
+    end
+
+    put :unassign_compliance_policy,
+        params: valid_bulk_params.merge(:policy_id => @policy.id),
+        session: set_session_user
+
+    assert_response :success
+    response = ActiveSupport::JSON.decode(@response.body)
+    assert_match(/Updated hosts: Unassigned from compliance policy/, response['message'])
+    assert_includes response['message'], @policy.name
+
+    @policy.reload
+    refute_includes @policy.hosts.map(&:id), @host1.id
+    refute_includes @policy.hosts.map(&:id), @host2.id
+  end
+
+  test "should unassign compliance policy from a single host" do
+    as_admin do
+      @host1.policies = [@policy]
+      @host1.save!
+      @host2.policies = [@policy]
+      @host2.save!
+    end
+
+    put :unassign_compliance_policy,
+        params: valid_bulk_params([@host1.id]).merge(:policy_id => @policy.id),
+        session: set_session_user
+
+    assert_response :success
+    response = ActiveSupport::JSON.decode(@response.body)
+    assert_match(/Updated host: Unassigned from compliance policy/, response['message'])
+
+    @policy.reload
+    refute_includes @policy.hosts.map(&:id), @host1.id
+    assert_includes @policy.hosts.map(&:id), @host2.id
+  end
+
+  test "should require policy_id for unassign" do
+    put :unassign_compliance_policy,
+        params: valid_bulk_params,
+        session: set_session_user
+
+    assert_response :unprocessable_entity
+    response = ActiveSupport::JSON.decode(@response.body)
+    assert_match(/policy_id/, response['error']['message'])
+  end
+
+  test "should return error when policy is not found for unassign" do
+    put :unassign_compliance_policy,
+        params: valid_bulk_params.merge(:policy_id => 0),
+        session: set_session_user
+
+    assert_response :unprocessable_entity
+    response = ActiveSupport::JSON.decode(@response.body)
+    assert_match(/Compliance policy with id .* not found/, response['error']['message'])
+  end
+
+  context "forbidden user" do
+    setup do
+      @user = FactoryBot.create(:user, :admin => false,
+                                :organizations => [@organization],
+                                :locations => [@location])
+    end
+
+    test "should forbid assign compliance policy without assign_policies permission" do
+      setup_user('edit', 'hosts', nil, @user)
+
+      put :assign_compliance_policy,
+          params: valid_bulk_params.merge(:policy_id => @policy.id),
+          session: set_session_user(@user)
+
+      assert_forbidden_missing_permission('assign_policies')
+    end
+
+    test "should forbid unassign compliance policy without assign_policies permission" do
+      setup_user('edit', 'hosts', nil, @user)
+
+      put :unassign_compliance_policy,
+          params: valid_bulk_params.merge(:policy_id => @policy.id),
+          session: set_session_user(@user)
+
+      assert_forbidden_missing_permission('assign_policies')
+    end
+
+    test "should forbid change openscap proxy without edit_hosts permission" do
+      setup_user('assign', 'policies', nil, @user)
+
+      put :change_openscap_proxy,
+          params: valid_bulk_params.merge(:openscap_proxy_id => @proxy.id),
+          session: set_session_user(@user)
+
+      assert_forbidden_missing_permission('edit_hosts')
+    end
+
+    test "should forbid assign compliance policy when user cannot edit hosts" do
+      setup_user('assign', 'policies', nil, @user)
+
+      put :assign_compliance_policy,
+          params: valid_bulk_params.merge(:policy_id => @policy.id),
+          session: set_session_user(@user)
+
+      assert_response :forbidden
+      response = ActiveSupport::JSON.decode(@response.body)
+      assert_match(/No hosts matched search, or action unauthorized for selected hosts/, response['error']['message'])
+    end
+  end
+
+  private
+
+  def assert_forbidden_missing_permission(permission)
+    assert_response :forbidden
+    response = ActiveSupport::JSON.decode(@response.body)
+    assert_includes response['error']['missing_permissions'], permission
+  end
 end

data/test/test_plugin_helper.rb

@@ -59,6 +59,13 @@ end
 module ScapTestCommon
   private
 
+  def set_compliance_status(host, status)
+    compliance_status = host.get_status(ForemanOpenscap::ComplianceStatus)
+    compliance_status.status = status
+    compliance_status.reported_at = Time.current
+    compliance_status.save!
+  end
+
   def create_report_with_rules(host, rule_names, rule_results)
     raise "rule_names and rule_results should have the same length!" if rule_names.size != rule_results.size
     metrics = {

data/test/unit/compliance_status_resetter_test.rb

@@ -0,0 +1,48 @@
+require 'test_plugin_helper'
+
+class ComplianceStatusResetterTest < ActiveSupport::TestCase
+  setup do
+    ForemanOpenscap::Policy.any_instance.stubs(:ensure_needed_puppetclasses).returns(true)
+    @policy = FactoryBot.create(:policy)
+  end
+
+  test 'creates inconclusive status for host without existing status' do
+    host = FactoryBot.create(:compliance_host, :policies => [@policy])
+
+    ForemanOpenscap::ComplianceStatusResetter.to_inconclusive([host.id])
+
+    assert_equal ForemanOpenscap::ComplianceStatus::INCONCLUSIVE, host.reload.compliance_status
+  end
+
+  test 'resets existing compliant status to inconclusive' do
+    host = FactoryBot.create(:compliance_host, :policies => [@policy])
+    set_compliance_status(host, ForemanOpenscap::ComplianceStatus::COMPLIANT)
+
+    ForemanOpenscap::ComplianceStatusResetter.to_inconclusive([host.id])
+
+    assert_equal ForemanOpenscap::ComplianceStatus::INCONCLUSIVE, host.reload.compliance_status
+  end
+
+  test 'ignores blank and duplicate host ids without error' do
+    host = FactoryBot.create(:compliance_host, :policies => [@policy])
+
+    ForemanOpenscap::ComplianceStatusResetter.to_inconclusive([host.id, host.id, nil])
+
+    assert_equal ForemanOpenscap::ComplianceStatus::INCONCLUSIVE, host.reload.compliance_status
+  end
+
+  test 'does nothing for an empty list of host ids' do
+    assert_nil ForemanOpenscap::ComplianceStatusResetter.to_inconclusive([])
+  end
+
+  test 'refreshes host global_status so it reflects the new inconclusive compliance status' do
+    host = FactoryBot.create(:compliance_host, :policies => [@policy])
+    set_compliance_status(host, ForemanOpenscap::ComplianceStatus::COMPLIANT)
+    host.refresh_global_status!
+    assert_equal ::HostStatus::Global::OK, host.reload.global_status
+
+    ForemanOpenscap::ComplianceStatusResetter.to_inconclusive([host.id])
+
+    assert_equal ::HostStatus::Global::WARN, host.reload.global_status
+  end
+end