Skip to content

Commit 188a208

Browse files
committed
Update auth tests for SELECT_MASKED permission
1 parent db9b9b2 commit 188a208

File tree

2 files changed

+17
-13
lines changed

2 files changed

+17
-13
lines changed

auth_test.py

Lines changed: 7 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -34,7 +34,7 @@ def role_creator_permissions(self, creator, role):
3434
permissions = ('ALTER', 'DROP', 'DESCRIBE')
3535
return [(creator, role, perm) for perm in permissions]
3636

37-
def cluster_version_has_unmask_permission(self):
37+
def cluster_version_has_masking_permissions(self):
3838
return self.cluster.version() >= LooseVersion('4.2')
3939

4040
def data_resource_creator_permissions(self, creator, resource):
@@ -48,8 +48,9 @@ def data_resource_creator_permissions(self, creator, resource):
4848
for perm in 'SELECT', 'MODIFY', 'ALTER', 'DROP', 'AUTHORIZE':
4949
permissions.append((creator, resource, perm))
5050

51-
if self.cluster_version_has_unmask_permission():
51+
if self.cluster_version_has_masking_permissions():
5252
permissions.append((creator, resource, 'UNMASK'))
53+
permissions.append((creator, resource, 'SELECT_MASKED'))
5354

5455
if resource.startswith("<keyspace "):
5556
permissions.append((creator, resource, 'CREATE'))
@@ -1673,8 +1674,9 @@ def test_filter_granted_permissions_by_resource_type(self):
16731674
("mike", "<keyspace ks>", "SELECT"),
16741675
("mike", "<keyspace ks>", "MODIFY"),
16751676
("mike", "<keyspace ks>", "AUTHORIZE")]
1676-
if self.cluster_version_has_unmask_permission():
1677+
if self.cluster_version_has_masking_permissions():
16771678
permissions.append(("mike", "<keyspace ks>", "UNMASK"))
1679+
permissions.append(("mike", "<keyspace ks>", "SELECT_MASKED"))
16781680
self.assert_permissions_listed(permissions,
16791681
self.superuser,
16801682
"LIST ALL PERMISSIONS OF mike")
@@ -1687,8 +1689,9 @@ def test_filter_granted_permissions_by_resource_type(self):
16871689
("mike", "<table ks.cf>", "SELECT"),
16881690
("mike", "<table ks.cf>", "MODIFY"),
16891691
("mike", "<table ks.cf>", "AUTHORIZE")]
1690-
if self.cluster_version_has_unmask_permission():
1692+
if self.cluster_version_has_masking_permissions():
16911693
permissions.append(("mike", "<table ks.cf>", "UNMASK"))
1694+
permissions.append(("mike", "<table ks.cf>", "SELECT_MASKED"))
16921695
self.assert_permissions_listed(permissions,
16931696
self.superuser,
16941697
"LIST ALL PERMISSIONS OF mike")

cqlsh_tests/test_cqlsh.py

Lines changed: 10 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -786,15 +786,16 @@ def test_list_queries(self):
786786
if self.cluster.version() >= LooseVersion('4.2'):
787787
self.verify_output("LIST ALL PERMISSIONS OF user1", node1, """
788788
role | username | resource | permission
789-
-------+----------+---------------+------------
790-
user1 | user1 | <table ks.t1> | ALTER
791-
user1 | user1 | <table ks.t1> | DROP
792-
user1 | user1 | <table ks.t1> | SELECT
793-
user1 | user1 | <table ks.t1> | MODIFY
794-
user1 | user1 | <table ks.t1> | AUTHORIZE
795-
user1 | user1 | <table ks.t1> | UNMASK
796-
797-
(6 rows)
789+
-------+----------+---------------+---------------
790+
user1 | user1 | <table ks.t1> | ALTER
791+
user1 | user1 | <table ks.t1> | DROP
792+
user1 | user1 | <table ks.t1> | SELECT
793+
user1 | user1 | <table ks.t1> | MODIFY
794+
user1 | user1 | <table ks.t1> | AUTHORIZE
795+
user1 | user1 | <table ks.t1> | UNMASK
796+
user1 | user1 | <table ks.t1> | SELECT_MASKED
797+
798+
(7 rows)
798799
""")
799800
elif self.cluster.version() >= LooseVersion('2.2'):
800801
self.verify_output("LIST ALL PERMISSIONS OF user1", node1, """

0 commit comments

Comments
 (0)