Skip to content

Commit af9669e

Browse files
committed
Update auth tests for SELECT_MASKED permission
1 parent b2a9f7a commit af9669e

File tree

2 files changed

+17
-13
lines changed

2 files changed

+17
-13
lines changed

auth_test.py

Lines changed: 7 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -34,7 +34,7 @@ def role_creator_permissions(self, creator, role):
3434
permissions = ('ALTER', 'DROP', 'DESCRIBE')
3535
return [(creator, role, perm) for perm in permissions]
3636

37-
def cluster_version_has_unmask_permission(self):
37+
def cluster_version_has_masking_permissions(self):
3838
return self.cluster.version() >= LooseVersion('4.2')
3939

4040
def data_resource_creator_permissions(self, creator, resource):
@@ -48,8 +48,9 @@ def data_resource_creator_permissions(self, creator, resource):
4848
for perm in 'SELECT', 'MODIFY', 'ALTER', 'DROP', 'AUTHORIZE':
4949
permissions.append((creator, resource, perm))
5050

51-
if self.cluster_version_has_unmask_permission():
51+
if self.cluster_version_has_masking_permissions():
5252
permissions.append((creator, resource, 'UNMASK'))
53+
permissions.append((creator, resource, 'SELECT_MASKED'))
5354

5455
if resource.startswith("<keyspace "):
5556
permissions.append((creator, resource, 'CREATE'))
@@ -1683,8 +1684,9 @@ def test_filter_granted_permissions_by_resource_type(self):
16831684
("mike", "<keyspace ks>", "SELECT"),
16841685
("mike", "<keyspace ks>", "MODIFY"),
16851686
("mike", "<keyspace ks>", "AUTHORIZE")]
1686-
if self.cluster_version_has_unmask_permission():
1687+
if self.cluster_version_has_masking_permissions():
16871688
permissions.append(("mike", "<keyspace ks>", "UNMASK"))
1689+
permissions.append(("mike", "<keyspace ks>", "SELECT_MASKED"))
16881690
self.assert_permissions_listed(permissions,
16891691
self.superuser,
16901692
"LIST ALL PERMISSIONS OF mike")
@@ -1697,8 +1699,9 @@ def test_filter_granted_permissions_by_resource_type(self):
16971699
("mike", "<table ks.cf>", "SELECT"),
16981700
("mike", "<table ks.cf>", "MODIFY"),
16991701
("mike", "<table ks.cf>", "AUTHORIZE")]
1700-
if self.cluster_version_has_unmask_permission():
1702+
if self.cluster_version_has_masking_permissions():
17011703
permissions.append(("mike", "<table ks.cf>", "UNMASK"))
1704+
permissions.append(("mike", "<table ks.cf>", "SELECT_MASKED"))
17021705
self.assert_permissions_listed(permissions,
17031706
self.superuser,
17041707
"LIST ALL PERMISSIONS OF mike")

cqlsh_tests/test_cqlsh.py

Lines changed: 10 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -786,15 +786,16 @@ def test_list_queries(self):
786786
if self.cluster.version() >= LooseVersion('4.2'):
787787
self.verify_output("LIST ALL PERMISSIONS OF user1", node1, """
788788
role | username | resource | permission
789-
-------+----------+---------------+------------
790-
user1 | user1 | <table ks.t1> | ALTER
791-
user1 | user1 | <table ks.t1> | DROP
792-
user1 | user1 | <table ks.t1> | SELECT
793-
user1 | user1 | <table ks.t1> | MODIFY
794-
user1 | user1 | <table ks.t1> | AUTHORIZE
795-
user1 | user1 | <table ks.t1> | UNMASK
796-
797-
(6 rows)
789+
-------+----------+---------------+---------------
790+
user1 | user1 | <table ks.t1> | ALTER
791+
user1 | user1 | <table ks.t1> | DROP
792+
user1 | user1 | <table ks.t1> | SELECT
793+
user1 | user1 | <table ks.t1> | MODIFY
794+
user1 | user1 | <table ks.t1> | AUTHORIZE
795+
user1 | user1 | <table ks.t1> | UNMASK
796+
user1 | user1 | <table ks.t1> | SELECT_MASKED
797+
798+
(7 rows)
798799
""")
799800
elif self.cluster.version() >= LooseVersion('2.2'):
800801
self.verify_output("LIST ALL PERMISSIONS OF user1", node1, """

0 commit comments

Comments
 (0)