tilia-dav 3.1.0.pre.alpha2

data/test/dav_acl/fs/collection_test.rb

@@ -0,0 +1,39 @@
+require 'dav_acl/fs/file_test'
+
+module Tilia
+  module DavAcl
+    module Fs
+      class CollectionTest < FileTest
+        def setup
+          super
+          @path = Dir.mktmpdir
+          @sut = Collection.new(@path, @acl, @owner)
+        end
+
+        def teardown
+          FileUtils.remove_entry @path
+        end
+
+        def test_get_child_file
+          ::File.open("#{@path}/file.txt", 'w') { |f| f.write('hello') }
+          child = @sut.child('file.txt')
+          assert_kind_of(File, child)
+
+          assert_equal('file.txt', child.name)
+          assert_equal(@acl, child.acl)
+          assert_equal(@owner, child.owner)
+        end
+
+        def test_get_child_directory
+          Dir.mkdir("#{@path}/dir")
+          child = @sut.child('dir')
+          assert_kind_of(Collection, child)
+
+          assert_equal('dir', child.name)
+          assert_equal(@acl, child.acl)
+          assert_equal(@owner, child.owner)
+        end
+      end
+    end
+  end
+end

data/test/dav_acl/fs/file_test.rb

@@ -0,0 +1,47 @@
+require 'test_helper'
+
+module Tilia
+  module DavAcl
+    module Fs
+      class FileTest < Minitest::Test
+        def setup
+          @path = 'foo'
+          @acl = [
+            {
+              'privilege' => '{DAV:}read',
+              'principal' => '{DAV:}authenticated'
+            }
+          ]
+          @owner = 'principals/evert'
+          @sut = File.new(@path, @acl, @owner)
+        end
+
+        def test_get_owner
+          assert_equal(
+            @owner,
+            @sut.owner
+          )
+        end
+
+        def test_get_group
+          assert_nil(@sut.group)
+        end
+
+        def test_get_acl
+          assert_equal(
+            @acl,
+            @sut.acl
+          )
+        end
+
+        def test_set_acl
+          assert_raises(Dav::Exception::Forbidden) { @sut.acl = [] }
+        end
+
+        def test_get_supported_privilege_set
+          assert_nil(@sut.supported_privilege_set)
+        end
+      end
+    end
+  end
+end

data/test/dav_acl/fs/home_collection_test.rb

@@ -0,0 +1,82 @@
+require 'test_helper'
+
+module Tilia
+  module DavAcl
+    module Fs
+      class HomeCollectionTest < Minitest::Test
+        def setup
+          @name = 'thuis'
+          @path = Dir.mktmpdir
+          principal_backend = PrincipalBackend::Mock.new
+          @sut = HomeCollection.new(principal_backend, @path)
+          @sut.collection_name = @name
+        end
+
+        def teardown
+          FileUtils.remove_entry @path
+        end
+
+        def test_get_name
+          assert_equal(
+            @name,
+            @sut.name
+          )
+        end
+
+        def test_get_child
+          child = @sut.child('user1')
+          assert_kind_of(Collection, child)
+          assert_equal('user1', child.name)
+
+          owner = 'principals/user1'
+          acl = [
+            {
+              'privilege' => '{DAV:}read',
+              'principal' => owner,
+              'protected' => true
+            },
+            {
+              'privilege' => '{DAV:}write',
+              'principal' => owner,
+              'protected' => true
+            }
+          ]
+
+          assert_equal(acl, child.acl)
+          assert_equal(owner, child.owner)
+        end
+
+        def test_get_owner
+          assert_nil(@sut.owner)
+        end
+
+        def test_get_group
+          assert_nil(@sut.group)
+        end
+
+        def test_get_acl
+          acl = [
+            {
+              'principal' => '{DAV:}authenticated',
+              'privilege' => '{DAV:}read',
+              'protected' => true
+            }
+          ]
+
+          assert_equal(
+            acl,
+            @sut.acl
+          )
+        end
+
+        def test_set_acl
+          assert_raises(Dav::Exception::Forbidden) { @sut.acl = [] }
+        end
+
+        def test_get_supported_privilege_set
+          assert_nil(@sut.supported_privilege_set)
+        end
+      end
+    end
+  end
+end

data/test/dav_acl/mock_acl_node.rb

@@ -0,0 +1,27 @@
+module Tilia
+  module DavAcl
+    class MockAclNode < Dav::Node
+      include IAcl
+
+      attr_accessor :name
+      attr_accessor :acl
+
+      def initialize(name, acl = [])
+        @name = name
+        @acl = acl
+      end
+
+      def owner
+        nil
+      end
+
+      def group
+        nil
+      end
+
+      def supported_privilege_set
+        nil
+      end
+    end
+  end
+end

data/test/dav_acl/mock_principal.rb

@@ -0,0 +1,27 @@
+module Tilia
+  module DavAcl
+    class MockPrincipal < Dav::Node
+      include IPrincipal
+
+      attr_accessor :name
+      attr_accessor :principal_url
+      attr_accessor :group_membership
+      attr_accessor :group_member_set
+
+      def initialize(name, principal_url, group_membership = [], group_member_set = [])
+        @name = name
+        @principal_url = principal_url
+        @group_membership = group_membership
+        @group_member_set = group_member_set
+      end
+
+      def displayname
+        @name
+      end
+
+      def alternate_uri_set
+        []
+      end
+    end
+  end
+end

data/test/dav_acl/plugin_admin_test.rb

@@ -0,0 +1,60 @@
+require 'test_helper'
+
+module Tilia
+  module DavAcl
+    class PluginAdminTest < Minitest::Test
+      def setup
+        principal_backend = PrincipalBackend::Mock.new
+
+        tree = [
+          MockAclNode.new('adminonly', []),
+          PrincipalCollection.new(principal_backend)
+        ]
+
+        @server = Dav::ServerMock.new(tree)
+        @server.sapi = Http::SapiMock.new
+        plugin = Dav::Auth::Plugin.new(Dav::Auth::Backend::Mock.new)
+        @server.add_plugin(plugin)
+      end
+
+      def test_no_admin_access
+        plugin = Plugin.new
+        @server.add_plugin(plugin)
+
+        request = Http::Sapi.create_from_server_array(
+          'REQUEST_METHOD' => 'OPTIONS',
+          'HTTP_DEPTH'     => 1,
+          'REQUEST_PATH'   => '/adminonly'
+        )
+
+        response = Http::ResponseMock.new
+
+        @server.http_request = request
+        @server.http_response = response
+        @server.exec
+
+        assert_equal(403, response.status)
+      end
+
+      def test_admin_access
+        plugin = Plugin.new
+        plugin.admin_principals = ['principals/admin']
+        @server.add_plugin(plugin)
+
+        request = Http::Sapi.create_from_server_array(
+          'REQUEST_METHOD' => 'OPTIONS',
+          'HTTP_DEPTH'     => 1,
+          'REQUEST_PATH'   => '/adminonly'
+        )
+
+        response = Http::ResponseMock.new
+
+        @server.http_request = request
+        @server.http_response = response
+        @server.exec
+
+        assert_equal(200, response.status)
+      end
+    end
+  end
+end

data/test/dav_acl/plugin_properties_test.rb

@@ -0,0 +1,346 @@
+require 'test_helper'
+
+module Tilia
+  module DavAcl
+    class PluginPropertiesTest < Minitest::Test
+      def test_principal_collection_set
+        plugin = Plugin.new
+        plugin.principal_collection_set = [
+          'principals1',
+          'principals2'
+        ]
+
+        requested_properties = [
+          '{DAV:}principal-collection-set'
+        ]
+
+        server = Dav::ServerMock.new(Dav::SimpleCollection.new('root'))
+        server.add_plugin(plugin)
+
+        result = server.properties_for_path('', requested_properties)
+        result = result[0]
+
+        assert_equal(1, result[200].size)
+        assert_has_key('{DAV:}principal-collection-set', result[200])
+        assert_kind_of(Dav::Xml::Property::Href, result[200]['{DAV:}principal-collection-set'])
+
+        expected = [
+          'principals1/',
+          'principals2/'
+        ]
+
+        assert_equal(expected, result[200]['{DAV:}principal-collection-set'].hrefs)
+      end
+
+      def test_current_user_principal
+        fake_server = Dav::ServerMock.new
+        plugin = Dav::Auth::Plugin.new(Dav::Auth::Backend::Mock.new)
+        fake_server.add_plugin(plugin)
+        plugin = Plugin.new
+        fake_server.add_plugin(plugin)
+
+        requested_properties = [
+          '{DAV:}current-user-principal'
+        ]
+
+        result = fake_server.properties_for_path('', requested_properties)
+        result = result[0]
+
+        assert_equal(1, result[200].size)
+        assert_has_key('{DAV:}current-user-principal', result[200])
+        assert_kind_of(Tilia::DavAcl::Xml::Property::Principal, result[200]['{DAV:}current-user-principal'])
+        assert_equal(Xml::Property::Principal::UNAUTHENTICATED, result[200]['{DAV:}current-user-principal'].type)
+
+        # This will force the login
+        fake_server.emit('beforeMethod', [fake_server.http_request, fake_server.http_response])
+
+        result = fake_server.properties_for_path('', requested_properties)
+        result = result[0]
+
+        assert_equal(1, result[200].size)
+        assert_has_key('{DAV:}current-user-principal', result[200])
+        assert_kind_of(Tilia::DavAcl::Xml::Property::Principal, result[200]['{DAV:}current-user-principal'])
+        assert_equal(Xml::Property::Principal::HREF, result[200]['{DAV:}current-user-principal'].type)
+        assert_equal('principals/admin/', result[200]['{DAV:}current-user-principal'].href)
+      end
+
+      def test_supported_privilege_set
+        plugin = Plugin.new
+        server = Dav::ServerMock.new
+        server.add_plugin(plugin)
+
+        requested_properties = [
+          '{DAV:}supported-privilege-set'
+        ]
+
+        result = server.properties_for_path('', requested_properties)
+        result = result[0]
+
+        assert_equal(1, result[200].size)
+        assert_has_key('{DAV:}supported-privilege-set', result[200])
+        assert_kind_of(Xml::Property::SupportedPrivilegeSet, result[200]['{DAV:}supported-privilege-set'])
+
+        server = Dav::ServerMock.new
+
+        prop = result[200]['{DAV:}supported-privilege-set']
+        result = server.xml.write('{DAV:}root', prop)
+
+        xpaths = {
+          '/d:root' => 1,
+          '/d:root/d:supported-privilege' => 1,
+          '/d:root/d:supported-privilege/d:privilege' => 1,
+          '/d:root/d:supported-privilege/d:privilege/d:all' => 1,
+          '/d:root/d:supported-privilege/d:abstract' => 1,
+          '/d:root/d:supported-privilege/d:supported-privilege' => 2,
+          '/d:root/d:supported-privilege/d:supported-privilege/d:privilege' => 2,
+          '/d:root/d:supported-privilege/d:supported-privilege/d:privilege/d:read' => 1,
+          '/d:root/d:supported-privilege/d:supported-privilege/d:privilege/d:write' => 1,
+          '/d:root/d:supported-privilege/d:supported-privilege/d:supported-privilege' => 8,
+          '/d:root/d:supported-privilege/d:supported-privilege/d:supported-privilege/d:privilege' => 8,
+          '/d:root/d:supported-privilege/d:supported-privilege/d:supported-privilege/d:privilege/d:read-acl' => 1,
+          '/d:root/d:supported-privilege/d:supported-privilege/d:supported-privilege/d:privilege/d:read-current-user-privilege-set' => 1,
+          '/d:root/d:supported-privilege/d:supported-privilege/d:supported-privilege/d:privilege/d:write-content' => 1,
+          '/d:root/d:supported-privilege/d:supported-privilege/d:supported-privilege/d:privilege/d:write-properties' => 1,
+          '/d:root/d:supported-privilege/d:supported-privilege/d:supported-privilege/d:privilege/d:write-acl' => 1,
+          '/d:root/d:supported-privilege/d:supported-privilege/d:supported-privilege/d:privilege/d:bind' => 1,
+          '/d:root/d:supported-privilege/d:supported-privilege/d:supported-privilege/d:privilege/d:unbind' => 1,
+          '/d:root/d:supported-privilege/d:supported-privilege/d:supported-privilege/d:privilege/d:unlock' => 1,
+          '/d:root/d:supported-privilege/d:supported-privilege/d:supported-privilege/d:abstract' => 0
+        }
+
+        dom2 = LibXML::XML::Document.string(result)
+
+        xpaths.each do |xpath, count|
+          path = dom2.find(xpath)
+          assert_equal(count, path.size, "we expected #{count} appearances of #{xpath}. We found #{path.size}. Full response body: #{result}")
+        end
+      end
+
+      def test_acl
+        plugin = Plugin.new
+
+        nodes = [
+          MockAclNode.new(
+            'foo',
+            [
+              {
+                'principal' => 'principals/admin',
+                'privilege' => '{DAV:}read'
+              }
+            ]
+          ),
+          Dav::SimpleCollection.new(
+            'principals',
+            [
+              MockPrincipal.new('admin', 'principals/admin')
+            ]
+          )
+        ]
+
+        server = Dav::ServerMock.new(nodes)
+        server.add_plugin(plugin)
+        auth_plugin = Dav::Auth::Plugin.new(Dav::Auth::Backend::Mock.new)
+        server.add_plugin(auth_plugin)
+
+        # Force login
+        auth_plugin.before_method(Http::Request.new, Http::Response.new)
+
+        requested_properties = [
+          '{DAV:}acl'
+        ]
+
+        result = server.properties_for_path('foo', requested_properties)
+        result = result[0]
+
+        assert_equal(1, result[200].size, "The {DAV:}acl property did not return from the list. Full list: #{result.inspect}")
+        assert_has_key('{DAV:}acl', result[200])
+        assert_kind_of(Xml::Property::Acl, result[200]['{DAV:}acl'])
+      end
+
+      def test_acl_restrictions
+        plugin = Plugin.new
+
+        nodes = [
+          MockAclNode.new(
+            'foo',
+            [
+              {
+                'principal' => 'principals/admin',
+                'privilege' => '{DAV:}read'
+              }
+            ]
+          ),
+          Dav::SimpleCollection.new(
+            'principals',
+            [
+              MockPrincipal.new('admin', 'principals/admin')
+            ]
+          )
+        ]
+
+        server = Dav::ServerMock.new(nodes)
+        server.add_plugin(plugin)
+        auth_plugin = Dav::Auth::Plugin.new(Dav::Auth::Backend::Mock.new)
+        server.add_plugin(auth_plugin)
+
+        # Force login
+        auth_plugin.before_method(Http::Request.new, Http::Response.new)
+
+        requested_properties = [
+          '{DAV:}acl-restrictions'
+        ]
+
+        result = server.properties_for_path('foo', requested_properties)
+        result = result[0]
+
+        assert_equal(1, result[200].size, "The {DAV:}acl-restrictions property did not return from the list. Full list: #{result.inspect}")
+        assert_has_key('{DAV:}acl-restrictions', result[200])
+        assert_kind_of(Xml::Property::AclRestrictions, result[200]['{DAV:}acl-restrictions'])
+      end
+
+      def test_alternate_uri_set
+        tree = [
+          Dav::SimpleCollection.new(
+            'principals',
+            [
+              MockPrincipal.new('user', 'principals/user')
+            ]
+          )
+        ]
+
+        fake_server = Dav::ServerMock.new(tree)
+        # plugin = new DAV\Auth\Plugin(new DAV\Auth\Mock_backend,'realm')
+        # fake_server.add_plugin(plugin)
+        plugin = Plugin.new
+        fake_server.add_plugin(plugin)
+
+        requested_properties = [
+          '{DAV:}alternate-URI-set'
+        ]
+        result = fake_server.properties_for_path('principals/user', requested_properties)
+        result = result[0]
+
+        assert_has_key(200, result)
+        assert_has_key('{DAV:}alternate-URI-set', result[200])
+        assert_kind_of(Dav::Xml::Property::Href, result[200]['{DAV:}alternate-URI-set'])
+
+        assert_equal([], result[200]['{DAV:}alternate-URI-set'].hrefs)
+      end
+
+      def test_principal_url
+        tree = [
+          Dav::SimpleCollection.new(
+            'principals',
+            [
+              MockPrincipal.new('user', 'principals/user')
+            ]
+          )
+        ]
+
+        fake_server = Dav::ServerMock.new(tree)
+        # plugin = new DAV\Auth\Plugin(new DAV\Auth\Mock_backend,'realm')
+        # fake_server.add_plugin(plugin)
+        plugin = Plugin.new
+        fake_server.add_plugin(plugin)
+
+        requested_properties = [
+          '{DAV:}principal-URL'
+        ]
+
+        result = fake_server.properties_for_path('principals/user', requested_properties)
+        result = result[0]
+
+        assert_has_key(200, result)
+        assert_has_key('{DAV:}principal-URL', result[200])
+        assert_kind_of(Dav::Xml::Property::Href, result[200]['{DAV:}principal-URL'])
+
+        assert_equal('principals/user/', result[200]['{DAV:}principal-URL'].href)
+      end
+
+      def test_group_member_set
+        tree = [
+          Dav::SimpleCollection.new(
+            'principals',
+            [
+              MockPrincipal.new('user', 'principals/user')
+            ]
+          )
+        ]
+
+        fake_server = Dav::ServerMock.new(tree)
+        # plugin = new DAV\Auth\Plugin(new DAV\Auth\Mock_backend,'realm')
+        # fake_server.add_plugin(plugin)
+        plugin = Plugin.new
+        fake_server.add_plugin(plugin)
+
+        requested_properties = [
+          '{DAV:}group-member-set'
+        ]
+
+        result = fake_server.properties_for_path('principals/user', requested_properties)
+        result = result[0]
+
+        assert_has_key(200, result)
+        assert_has_key('{DAV:}group-member-set', result[200])
+        assert_kind_of(Dav::Xml::Property::Href, result[200]['{DAV:}group-member-set'])
+
+        assert_equal([], result[200]['{DAV:}group-member-set'].hrefs)
+      end
+
+      def test_group_member_ship
+        tree = [
+          Dav::SimpleCollection.new(
+            'principals',
+            [
+              MockPrincipal.new('user', 'principals/user')
+            ]
+          )
+        ]
+
+        fake_server = Dav::ServerMock.new(tree)
+        plugin = Plugin.new
+        fake_server.add_plugin(plugin)
+
+        requested_properties = [
+          '{DAV:}group-membership'
+        ]
+
+        result = fake_server.properties_for_path('principals/user', requested_properties)
+        result = result[0]
+
+        assert_has_key(200, result)
+        assert_has_key('{DAV:}group-membership', result[200])
+        assert_kind_of(Dav::Xml::Property::Href, result[200]['{DAV:}group-membership'])
+
+        assert_equal([], result[200]['{DAV:}group-membership'].hrefs)
+      end
+
+      def test_get_display_name
+        tree = [
+          Dav::SimpleCollection.new(
+            'principals',
+            [
+              MockPrincipal.new('user', 'principals/user')
+            ]
+          )
+        ]
+
+        fake_server = Dav::ServerMock.new(tree)
+        plugin = Plugin.new
+        fake_server.add_plugin(plugin)
+
+        requested_properties = [
+          '{DAV:}displayname'
+        ]
+
+        result = fake_server.properties_for_path('principals/user', requested_properties)
+        result = result[0]
+
+        assert_has_key(200, result)
+        assert_has_key('{DAV:}displayname', result[200])
+
+        assert_equal('user', result[200]['{DAV:}displayname'])
+      end
+    end
+  end
+end