inteligr8/SearchServices
1
0
Fork 0
mirror of https://github.com/Alfresco/SearchServices.git synced 2026-09-16 18:12:56 +00:00
Code Issues Packages Projects Releases Wiki Activity

REPO-2365 - GET /shared-links?include=allowableOperations returns 403 for a user that has granular permissions on a shared file:

Browse Source 
- added a TAS test for the issue
This commit is contained in:
Andrei Forascu
2017-08-08 17:51:27 +03:00
parent 0709643308
commit b5b852ce0c
2 changed files with 55 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
e2e-test/java/org/alfresco/rest/SharedLinks/SharedLinksSanityTests.java
+1 -1
View File
@@ -1,4 +1,4 @@
package org.alfresco.rest.SharedLinks;
package org.alfresco.rest.sharedlinks;
import org.alfresco.dataprep.CMISUtil.DocumentType;
import org.alfresco.rest.RestTest;
e2e-test/java/org/alfresco/rest/sharedlinks/GetSharedLinksFullTests.java
+54
View File
@@ -0,0 +1,54 @@
package org.alfresco.rest.sharedlinks;
import org.alfresco.dataprep.CMISUtil.DocumentType;
import org.alfresco.rest.RestTest;
import org.alfresco.rest.model.RestSharedLinksModel;
import org.alfresco.rest.model.RestSharedLinksModelCollection;
import org.alfresco.utility.constants.UserRole;
import org.alfresco.utility.exception.DataPreparationException;
import org.alfresco.utility.model.FileModel;
import org.alfresco.utility.model.SiteModel;
import org.alfresco.utility.model.TestGroup;
import org.alfresco.utility.model.UserModel;
import org.alfresco.utility.report.Bug;
import org.alfresco.utility.testrail.ExecutionType;
import org.alfresco.utility.testrail.annotation.TestRail;
import org.springframework.http.HttpStatus;
import org.testng.annotations.BeforeClass;
import org.testng.annotations.Test;
public class GetSharedLinksFullTests extends RestTest
{
private SiteModel privateSite;
private UserModel adminUser, userModel;
protected FileModel file;
@BeforeClass(alwaysRun = true)
public void dataPreparation() throws DataPreparationException
{
adminUser = dataUser.getAdminUser();
userModel = dataUser.createRandomTestUser();
privateSite = dataSite.usingUser(adminUser).createPrivateRandomSite();
}
@Bug(id="REPO-2365")
@TestRail(section = { TestGroup.REST_API,
TestGroup.SHAREDLINKS }, executionType = ExecutionType.REGRESSION, description = "Verify that a user with permission can get allowableOperations on sharedLinks")
@Test(groups = { TestGroup.REST_API, TestGroup.SHAREDLINKS, TestGroup.FULL })
public void getSharedLinksWithAllowableOperations() throws Exception
{
file = dataContent.usingUser(adminUser).usingSite(privateSite).createContent(DocumentType.TEXT_PLAIN);
RestSharedLinksModel sharedLink = restClient.authenticateUser(adminUser).withCoreAPI().usingSharedLinks().createSharedLink(file);
restClient.assertStatusCodeIs(HttpStatus.CREATED);
dataContent.usingUser(adminUser).usingResource(file).setPermissionsForUser(userModel, UserRole.SiteCollaborator, false);
restClient.authenticateUser(userModel).withCoreAPI().usingNode(file).usingParams("include=permissions").getNode();
restClient.authenticateUser(userModel).withCoreAPI().usingSharedLinks().usingParams("include=allowableOperations").getSharedLinks();
restClient.assertStatusCodeIs(HttpStatus.OK);
restClient.authenticateUser(userModel).withCoreAPI().usingSharedLinks().getSharedLink(sharedLink);
restClient.assertStatusCodeIs(HttpStatus.OK);
}
}