mirror of
https://gitee.com/milvus-io/milvus.git
synced 2024-12-02 20:09:57 +08:00
bcd6865b29
issue: #28960 [milvus-proto #212](https://github.com/milvus-io/milvus-proto/issues/212) add new configuration: builtinRoles user can define roles in config file: `milvus.yaml` there is an example: 1. db_ro, only have read privileges, include load 2. db_rw, read and write privileges, include create/drop/rename collection 3. db_admin, not only read and write privileges, but also user administration Signed-off-by: PowderLi <min.li@zilliz.com>
58 lines
1.5 KiB
Go
58 lines
1.5 KiB
Go
package paramtable
|
|
|
|
import (
|
|
"testing"
|
|
|
|
"github.com/stretchr/testify/assert"
|
|
|
|
"github.com/milvus-io/milvus/pkg/config"
|
|
)
|
|
|
|
func TestRoleConfig_Init(t *testing.T) {
|
|
params := ComponentParam{}
|
|
params.Init(NewBaseTable(SkipRemote(true)))
|
|
cfg := ¶ms.RoleCfg
|
|
assert.Equal(t, cfg.Enabled.GetAsBool(), false)
|
|
assert.Equal(t, cfg.Roles.GetValue(), "{}")
|
|
assert.Equal(t, len(cfg.Roles.GetAsJSONMap()), 0)
|
|
}
|
|
|
|
func TestRoleConfig_Invalid(t *testing.T) {
|
|
t.Run("valid roles", func(t *testing.T) {
|
|
mgr := config.NewManager()
|
|
mgr.SetConfig("builtinRoles.enable", "true")
|
|
mgr.SetConfig("builtinRoles.roles", `{"db_admin": {"privileges": [{"object_type": "Global", "object_name": "*", "privilege": "CreateCollection", "db_name": "*"}]}}`)
|
|
p := &roleConfig{
|
|
Enabled: ParamItem{
|
|
Key: "builtinRoles.enable",
|
|
},
|
|
Roles: ParamItem{
|
|
Key: "builtinRoles.roles",
|
|
},
|
|
}
|
|
p.Enabled.Init(mgr)
|
|
p.Roles.Init(mgr)
|
|
assert.NotPanics(t, func() {
|
|
p.panicIfNotValid(mgr)
|
|
})
|
|
})
|
|
t.Run("invalid roles", func(t *testing.T) {
|
|
mgr := config.NewManager()
|
|
mgr.SetConfig("builtinRoles.enable", "true")
|
|
mgr.SetConfig("builtinRoles.roles", `{"db_admin": {"privileges": {"object_type": "Global", "object_name": "*", "privilege": "CreateCollection", "db_name": "*"}}}`)
|
|
p := &roleConfig{
|
|
Enabled: ParamItem{
|
|
Key: "builtinRoles.enable",
|
|
},
|
|
Roles: ParamItem{
|
|
Key: "builtinRoles.roles",
|
|
},
|
|
}
|
|
p.Enabled.Init(mgr)
|
|
p.Roles.Init(mgr)
|
|
assert.Panics(t, func() {
|
|
p.panicIfNotValid(mgr)
|
|
})
|
|
})
|
|
}
|