05f120b7d4
* Added enum for more granular access control; Expanded functionality of fine grained access checker; Propagated changes to Edit, Deny and Revoke permissions methods in interpreter * Introduced Merge method for merging two colle with permissions * e2e tests implementation started * Expanded cypher to support fine grained permissions * ast.lcp::AuthQuery removed labels, added support for label permissions * promoted label permissions to vector * removed unnecesary enum value * expanded glue/auth with LabelPrivilegeToLabelPermission * added const * extended Grant Deny and Revoke Privileges with new label privileges * extended Edit Grant Deny and Revoke Privileges to properly use new model * Fixed unit tests * FineGrainedAccessChecker Grant and Deny methods reworked * Revoke cypher slightly reworked; Revoke for labels works without label permissions * EditPermission's label_permission lambda now takes two parameters * constants naming enforced; replaced asterisks with string constant * removed faulty test addition * Naming fixes; FineGrainedAccessChecker unit tests introduced * unnecessary includes removed; minor code improvements * minor fix * Access checker reworked; denies and grant merged into single permission object; Created global_permission that applies to all non-created permissions. Grant, Deny and Revoke reworked; Merge method reworked * Fixed wrong check; * Fix after merge; renamed constants; removed unused constant * Fix after merge; workloads.yaml for lbaprocedures e2e tests updated with new grammar * Fixes after merge * Fixes after merge * fixed Revoke that was not fixed after the merge * updated cypher main visitor tests * PR review changes; Naming and const fixed, replaced double tertiary with lambda * unwrapping the iterator fix * merge 1003 minor fix * minor spelling fixes * Introduced visitPrivilegesList because of the doubled code * const added * string const to enum * redundant braces * added const * minor code improvement * e2e tests expanded * if -> switch * enum class inherits uint8_t now * LabelPrililege::EDIT -> LabelPrivilege::UPDATE * LabelPermission -> EntityPermission; LabelPrivilege -> EntityPrivilege * EntityPrivilege -> FineGrainedPrivilege; EntityPermission -> FineGrainedPermission
29 lines
900 B
YAML
29 lines
900 B
YAML
template_cluster: &template_cluster
|
|
cluster:
|
|
main:
|
|
args: ["--bolt-port", "7687", "--log-level=TRACE"]
|
|
log_file: "lba-e2e.log"
|
|
setup_queries: [
|
|
"Create (:Label1 {id: 1}) ;",
|
|
"Create (:Label1 {id: 2}) ;",
|
|
"Create (:Label1 {id: 3}) ;",
|
|
"Create (:Label1 {id: 4}) ;",
|
|
"Create (:Label1 {id: 5}) ;",
|
|
"Create (:Label1 {id: 6}) ;",
|
|
"Create (:Label2 {id: 1}) ;",
|
|
"Create (:Label2 {id: 2}) ;",
|
|
"Create (:Label2 {id: 3}) ;",
|
|
"Create (:Label2 {id: 4}) ;",
|
|
"Create User Josip ;",
|
|
"Create User Boris ;",
|
|
"Grant Read On Labels :Label1 to Boris;",
|
|
]
|
|
validation_queries: []
|
|
|
|
workloads:
|
|
- name: "Label-based auth"
|
|
binary: "tests/e2e/pytest_runner.sh"
|
|
proc: "tests/e2e/lba_procedures/procedures/"
|
|
args: ["lba_procedures/lba_procedures.py"]
|
|
<<: *template_cluster
|