2519 lines
105 KiB
C++
2519 lines
105 KiB
C++
// Copyright 2022 Memgraph Ltd.
|
|
//
|
|
// Use of this software is governed by the Business Source License
|
|
// included in the file licenses/BSL.txt; by using this file, you agree to be bound by the terms of the Business Source
|
|
// License, and you may not use this file except in compliance with the Business Source License.
|
|
//
|
|
// As of the Change Date specified in that file, in accordance with
|
|
// the Business Source License, use of this software will be governed
|
|
// by the Apache License, Version 2.0, included in the file
|
|
// licenses/APL.txt.
|
|
|
|
#include <iterator>
|
|
#include <memory>
|
|
#include <string>
|
|
#include <variant>
|
|
#include <vector>
|
|
|
|
#include "auth/models.hpp"
|
|
#include "glue/auth_checker.hpp"
|
|
#include "gmock/gmock.h"
|
|
#include "gtest/gtest.h"
|
|
|
|
#include "query/context.hpp"
|
|
#include "query/exceptions.hpp"
|
|
#include "query/interpret/frame.hpp"
|
|
#include "query/plan/operator.hpp"
|
|
#include "utils/license.hpp"
|
|
|
|
#include "query_plan_common.hpp"
|
|
#include "storage/v2/id_types.hpp"
|
|
#include "storage/v2/property_value.hpp"
|
|
#include "storage/v2/vertex_accessor.hpp"
|
|
|
|
using namespace memgraph::query;
|
|
using namespace memgraph::query::plan;
|
|
|
|
TEST(QueryPlan, CreateNodeWithAttributes) {
|
|
memgraph::storage::Storage db;
|
|
auto storage_dba = db.Access();
|
|
memgraph::query::DbAccessor dba(&storage_dba);
|
|
|
|
memgraph::storage::LabelId label = dba.NameToLabel("Person");
|
|
auto property = PROPERTY_PAIR("prop");
|
|
|
|
AstStorage storage;
|
|
SymbolTable symbol_table;
|
|
|
|
NodeCreationInfo node;
|
|
node.symbol = symbol_table.CreateSymbol("n", true);
|
|
node.labels.emplace_back(label);
|
|
std::get<std::vector<std::pair<memgraph::storage::PropertyId, Expression *>>>(node.properties)
|
|
.emplace_back(property.second, LITERAL(42));
|
|
|
|
auto create = std::make_shared<CreateNode>(nullptr, node);
|
|
auto context = MakeContext(storage, symbol_table, &dba);
|
|
PullAll(*create, &context);
|
|
dba.AdvanceCommand();
|
|
|
|
// count the number of vertices
|
|
int vertex_count = 0;
|
|
for (auto vertex : dba.Vertices(memgraph::storage::View::OLD)) {
|
|
vertex_count++;
|
|
auto maybe_labels = vertex.Labels(memgraph::storage::View::OLD);
|
|
ASSERT_TRUE(maybe_labels.HasValue());
|
|
const auto &labels = *maybe_labels;
|
|
EXPECT_EQ(labels.size(), 1);
|
|
EXPECT_EQ(*labels.begin(), label);
|
|
auto maybe_properties = vertex.Properties(memgraph::storage::View::OLD);
|
|
ASSERT_TRUE(maybe_properties.HasValue());
|
|
const auto &properties = *maybe_properties;
|
|
EXPECT_EQ(properties.size(), 1);
|
|
auto maybe_prop = vertex.GetProperty(memgraph::storage::View::OLD, property.second);
|
|
ASSERT_TRUE(maybe_prop.HasValue());
|
|
auto prop_eq = TypedValue(*maybe_prop) == TypedValue(42);
|
|
ASSERT_EQ(prop_eq.type(), TypedValue::Type::Bool);
|
|
EXPECT_TRUE(prop_eq.ValueBool());
|
|
}
|
|
EXPECT_EQ(vertex_count, 1);
|
|
}
|
|
|
|
#ifdef MG_ENTERPRISE
|
|
TEST(QueryPlan, FineGrainedCreateNodeWithAttributes) {
|
|
memgraph::utils::license::global_license_checker.EnableTesting();
|
|
memgraph::query::AstStorage ast;
|
|
memgraph::query::SymbolTable symbol_table;
|
|
memgraph::storage::Storage db;
|
|
auto dba = db.Access();
|
|
DbAccessor execution_dba(&dba);
|
|
const auto label = dba.NameToLabel("label1");
|
|
const auto property = memgraph::storage::PropertyId::FromInt(1);
|
|
|
|
memgraph::query::plan::NodeCreationInfo node;
|
|
std::get<std::vector<std::pair<memgraph::storage::PropertyId, Expression *>>>(node.properties)
|
|
.emplace_back(property, ast.Create<PrimitiveLiteral>(42));
|
|
|
|
node.symbol = symbol_table.CreateSymbol("n", true);
|
|
node.labels.emplace_back(label);
|
|
|
|
const auto test_create = [&](memgraph::auth::User &user) {
|
|
memgraph::glue::FineGrainedAuthChecker auth_checker{user, &execution_dba};
|
|
auto context = MakeContextWithFineGrainedChecker(ast, symbol_table, &execution_dba, &auth_checker);
|
|
auto create = std::make_shared<CreateNode>(nullptr, node);
|
|
|
|
return PullAll(*create, &context);
|
|
};
|
|
|
|
// Granted label
|
|
{
|
|
memgraph::auth::User user{"test"};
|
|
user.fine_grained_access_handler().label_permissions().Grant("label1",
|
|
memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
EXPECT_EQ(test_create(user), 1);
|
|
}
|
|
|
|
// Denied label
|
|
{
|
|
memgraph::auth::User user{"test"};
|
|
user.fine_grained_access_handler().label_permissions().Deny("label1",
|
|
memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
ASSERT_THROW(test_create(user), QueryRuntimeException);
|
|
}
|
|
}
|
|
#endif
|
|
|
|
TEST(QueryPlan, CreateReturn) {
|
|
// test CREATE (n:Person {age: 42}) RETURN n, n.age
|
|
memgraph::storage::Storage db;
|
|
auto storage_dba = db.Access();
|
|
memgraph::query::DbAccessor dba(&storage_dba);
|
|
|
|
memgraph::storage::LabelId label = dba.NameToLabel("Person");
|
|
auto property = PROPERTY_PAIR("property");
|
|
|
|
AstStorage storage;
|
|
SymbolTable symbol_table;
|
|
|
|
NodeCreationInfo node;
|
|
node.symbol = symbol_table.CreateSymbol("n", true);
|
|
node.labels.emplace_back(label);
|
|
std::get<std::vector<std::pair<memgraph::storage::PropertyId, Expression *>>>(node.properties)
|
|
.emplace_back(property.second, LITERAL(42));
|
|
|
|
auto create = std::make_shared<CreateNode>(nullptr, node);
|
|
auto named_expr_n =
|
|
NEXPR("n", IDENT("n")->MapTo(node.symbol))->MapTo(symbol_table.CreateSymbol("named_expr_n", true));
|
|
auto prop_lookup = PROPERTY_LOOKUP(IDENT("n")->MapTo(node.symbol), property);
|
|
auto named_expr_n_p = NEXPR("n", prop_lookup)->MapTo(symbol_table.CreateSymbol("named_expr_n_p", true));
|
|
|
|
auto produce = MakeProduce(create, named_expr_n, named_expr_n_p);
|
|
auto context = MakeContext(storage, symbol_table, &dba);
|
|
auto results = CollectProduce(*produce, &context);
|
|
EXPECT_EQ(1, results.size());
|
|
EXPECT_EQ(2, results[0].size());
|
|
EXPECT_EQ(TypedValue::Type::Vertex, results[0][0].type());
|
|
auto maybe_labels = results[0][0].ValueVertex().Labels(memgraph::storage::View::NEW);
|
|
EXPECT_EQ(1, maybe_labels->size());
|
|
EXPECT_EQ(label, (*maybe_labels)[0]);
|
|
EXPECT_EQ(TypedValue::Type::Int, results[0][1].type());
|
|
EXPECT_EQ(42, results[0][1].ValueInt());
|
|
|
|
dba.AdvanceCommand();
|
|
EXPECT_EQ(1, CountIterable(dba.Vertices(memgraph::storage::View::OLD)));
|
|
}
|
|
|
|
#ifdef MG_ENTERPRISE
|
|
TEST(QueryPlan, FineGrainedCreateReturn) {
|
|
memgraph::utils::license::global_license_checker.EnableTesting();
|
|
|
|
// test CREATE (n:Person {age: 42}) RETURN n, n.age
|
|
memgraph::storage::Storage db;
|
|
auto storage_dba = db.Access();
|
|
memgraph::query::DbAccessor dba(&storage_dba);
|
|
|
|
const auto label = dba.NameToLabel("label");
|
|
const auto property = PROPERTY_PAIR("property");
|
|
|
|
AstStorage storage;
|
|
SymbolTable symbol_table;
|
|
|
|
NodeCreationInfo node;
|
|
node.symbol = symbol_table.CreateSymbol("n", true);
|
|
node.labels.emplace_back(label);
|
|
std::get<std::vector<std::pair<memgraph::storage::PropertyId, Expression *>>>(node.properties)
|
|
.emplace_back(property.second, LITERAL(42));
|
|
|
|
auto create = std::make_shared<CreateNode>(nullptr, node);
|
|
auto named_expr_n =
|
|
NEXPR("n", IDENT("n")->MapTo(node.symbol))->MapTo(symbol_table.CreateSymbol("named_expr_n", true));
|
|
auto prop_lookup = PROPERTY_LOOKUP(IDENT("n")->MapTo(node.symbol), property);
|
|
auto named_expr_n_p = NEXPR("n", prop_lookup)->MapTo(symbol_table.CreateSymbol("named_expr_n_p", true));
|
|
|
|
auto produce = MakeProduce(create, named_expr_n, named_expr_n_p);
|
|
|
|
// Granted label
|
|
{
|
|
memgraph::auth::User user{"Test"};
|
|
user.fine_grained_access_handler().label_permissions().Grant("label",
|
|
memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
memgraph::glue::FineGrainedAuthChecker auth_checker{user, &dba};
|
|
auto context = MakeContextWithFineGrainedChecker(storage, symbol_table, &dba, &auth_checker);
|
|
auto results = CollectProduce(*produce, &context);
|
|
EXPECT_EQ(1, results.size());
|
|
EXPECT_EQ(2, results[0].size());
|
|
EXPECT_EQ(TypedValue::Type::Vertex, results[0][0].type());
|
|
auto maybe_labels = results[0][0].ValueVertex().Labels(memgraph::storage::View::NEW);
|
|
EXPECT_EQ(1, maybe_labels->size());
|
|
EXPECT_EQ(label, (*maybe_labels)[0]);
|
|
EXPECT_EQ(TypedValue::Type::Int, results[0][1].type());
|
|
EXPECT_EQ(42, results[0][1].ValueInt());
|
|
|
|
dba.AdvanceCommand();
|
|
EXPECT_EQ(1, CountIterable(dba.Vertices(memgraph::storage::View::OLD)));
|
|
}
|
|
|
|
// Denied label
|
|
{
|
|
memgraph::auth::User user{"Test"};
|
|
user.fine_grained_access_handler().label_permissions().Deny("label",
|
|
memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
memgraph::glue::FineGrainedAuthChecker auth_checker{user, &dba};
|
|
auto context = MakeContextWithFineGrainedChecker(storage, symbol_table, &dba, &auth_checker);
|
|
ASSERT_THROW(CollectProduce(*produce, &context), QueryRuntimeException);
|
|
}
|
|
}
|
|
#endif
|
|
|
|
TEST(QueryPlan, CreateExpand) {
|
|
memgraph::storage::Storage db;
|
|
auto storage_dba = db.Access();
|
|
memgraph::query::DbAccessor dba(&storage_dba);
|
|
|
|
memgraph::storage::LabelId label_node_1 = dba.NameToLabel("Node1");
|
|
memgraph::storage::LabelId label_node_2 = dba.NameToLabel("Node2");
|
|
auto property = PROPERTY_PAIR("property");
|
|
memgraph::storage::EdgeTypeId edge_type = dba.NameToEdgeType("edge_type");
|
|
|
|
SymbolTable symbol_table;
|
|
AstStorage storage;
|
|
|
|
auto test_create_path = [&](bool cycle, int expected_nodes_created, int expected_edges_created) {
|
|
int before_v = CountIterable(dba.Vertices(memgraph::storage::View::OLD));
|
|
int before_e = CountEdges(&dba, memgraph::storage::View::OLD);
|
|
|
|
// data for the first node
|
|
NodeCreationInfo n;
|
|
n.symbol = symbol_table.CreateSymbol("n", true);
|
|
n.labels.emplace_back(label_node_1);
|
|
std::get<std::vector<std::pair<memgraph::storage::PropertyId, Expression *>>>(n.properties)
|
|
.emplace_back(property.second, LITERAL(1));
|
|
|
|
// data for the second node
|
|
NodeCreationInfo m;
|
|
m.symbol = cycle ? n.symbol : symbol_table.CreateSymbol("m", true);
|
|
m.labels.emplace_back(label_node_2);
|
|
std::get<std::vector<std::pair<memgraph::storage::PropertyId, Expression *>>>(m.properties)
|
|
.emplace_back(property.second, LITERAL(2));
|
|
|
|
EdgeCreationInfo r;
|
|
r.symbol = symbol_table.CreateSymbol("r", true);
|
|
r.edge_type = edge_type;
|
|
std::get<0>(r.properties).emplace_back(property.second, LITERAL(3));
|
|
|
|
auto create_op = std::make_shared<CreateNode>(nullptr, n);
|
|
auto create_expand = std::make_shared<CreateExpand>(m, r, create_op, n.symbol, cycle);
|
|
auto context = MakeContext(storage, symbol_table, &dba);
|
|
PullAll(*create_expand, &context);
|
|
dba.AdvanceCommand();
|
|
|
|
EXPECT_EQ(CountIterable(dba.Vertices(memgraph::storage::View::OLD)) - before_v, expected_nodes_created);
|
|
EXPECT_EQ(CountEdges(&dba, memgraph::storage::View::OLD) - before_e, expected_edges_created);
|
|
};
|
|
|
|
test_create_path(false, 2, 1);
|
|
test_create_path(true, 1, 1);
|
|
|
|
for (auto vertex : dba.Vertices(memgraph::storage::View::OLD)) {
|
|
auto maybe_labels = vertex.Labels(memgraph::storage::View::OLD);
|
|
MG_ASSERT(maybe_labels.HasValue());
|
|
const auto &labels = *maybe_labels;
|
|
EXPECT_EQ(labels.size(), 1);
|
|
memgraph::storage::LabelId label = labels[0];
|
|
if (label == label_node_1) {
|
|
// node created by first op
|
|
EXPECT_EQ(vertex.GetProperty(memgraph::storage::View::OLD, property.second)->ValueInt(), 1);
|
|
} else if (label == label_node_2) {
|
|
// node create by expansion
|
|
EXPECT_EQ(vertex.GetProperty(memgraph::storage::View::OLD, property.second)->ValueInt(), 2);
|
|
} else {
|
|
// should not happen
|
|
FAIL();
|
|
}
|
|
|
|
for (auto vertex : dba.Vertices(memgraph::storage::View::OLD)) {
|
|
auto maybe_edges = vertex.OutEdges(memgraph::storage::View::OLD);
|
|
MG_ASSERT(maybe_edges.HasValue());
|
|
for (auto edge : *maybe_edges) {
|
|
EXPECT_EQ(edge.EdgeType(), edge_type);
|
|
EXPECT_EQ(edge.GetProperty(memgraph::storage::View::OLD, property.second)->ValueInt(), 3);
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
#ifdef MG_ENTERPRISE
|
|
class CreateExpandWithAuthFixture : public testing::Test {
|
|
protected:
|
|
memgraph::storage::Storage db;
|
|
memgraph::storage::Storage::Accessor storage_dba{db.Access()};
|
|
memgraph::query::DbAccessor dba{&storage_dba};
|
|
AstStorage storage;
|
|
SymbolTable symbol_table;
|
|
|
|
void SetUp() override { memgraph::utils::license::global_license_checker.EnableTesting(); }
|
|
|
|
void ExecuteCreateExpand(bool cycle, memgraph::auth::User &user) {
|
|
const auto label_node_1 = dba.NameToLabel("Node1");
|
|
const auto label_node_2 = dba.NameToLabel("Node2");
|
|
const auto property = PROPERTY_PAIR("property");
|
|
const auto edge_type = dba.NameToEdgeType("edge_type");
|
|
|
|
// data for the first node
|
|
NodeCreationInfo n;
|
|
n.symbol = symbol_table.CreateSymbol("n", true);
|
|
n.labels.emplace_back(label_node_1);
|
|
std::get<std::vector<std::pair<memgraph::storage::PropertyId, Expression *>>>(n.properties)
|
|
.emplace_back(property.second, LITERAL(1));
|
|
|
|
// data for the second node
|
|
NodeCreationInfo m;
|
|
m.symbol = cycle ? n.symbol : symbol_table.CreateSymbol("m", true);
|
|
m.labels.emplace_back(label_node_2);
|
|
std::get<std::vector<std::pair<memgraph::storage::PropertyId, Expression *>>>(m.properties)
|
|
.emplace_back(property.second, LITERAL(2));
|
|
|
|
EdgeCreationInfo r;
|
|
r.symbol = symbol_table.CreateSymbol("r", true);
|
|
r.edge_type = edge_type;
|
|
std::get<0>(r.properties).emplace_back(property.second, LITERAL(3));
|
|
|
|
auto create_op = std::make_shared<CreateNode>(nullptr, n);
|
|
auto create_expand = std::make_shared<CreateExpand>(m, r, create_op, n.symbol, cycle);
|
|
memgraph::glue::FineGrainedAuthChecker auth_checker{user, &dba};
|
|
auto context = MakeContextWithFineGrainedChecker(storage, symbol_table, &dba, &auth_checker);
|
|
PullAll(*create_expand, &context);
|
|
dba.AdvanceCommand();
|
|
}
|
|
|
|
void TestCreateExpandHypothesis(int expected_nodes_created, int expected_edges_created) {
|
|
EXPECT_EQ(CountIterable(dba.Vertices(memgraph::storage::View::NEW)), expected_nodes_created);
|
|
EXPECT_EQ(CountEdges(&dba, memgraph::storage::View::NEW), expected_edges_created);
|
|
}
|
|
};
|
|
|
|
TEST_F(CreateExpandWithAuthFixture, CreateExpandWithNoGrantsOnCreateDelete) {
|
|
// All labels denied, All edge types denied
|
|
memgraph::auth::User user{"test"};
|
|
user.fine_grained_access_handler().label_permissions().Deny("*",
|
|
memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
user.fine_grained_access_handler().edge_type_permissions().Deny("*",
|
|
memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
ASSERT_THROW(ExecuteCreateExpand(false, user), QueryRuntimeException);
|
|
ASSERT_THROW(ExecuteCreateExpand(true, user), QueryRuntimeException);
|
|
}
|
|
|
|
TEST_F(CreateExpandWithAuthFixture, CreateExpandWithLabelsGrantedOnly) {
|
|
// All labels granted, All edge types denied
|
|
memgraph::auth::User user{"test"};
|
|
user.fine_grained_access_handler().label_permissions().Grant("*",
|
|
memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
user.fine_grained_access_handler().edge_type_permissions().Deny("*",
|
|
memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
|
|
ASSERT_THROW(ExecuteCreateExpand(false, user), QueryRuntimeException);
|
|
ASSERT_THROW(ExecuteCreateExpand(true, user), QueryRuntimeException);
|
|
}
|
|
|
|
TEST_F(CreateExpandWithAuthFixture, CreateExpandWithEdgeTypesGrantedOnly) {
|
|
// All labels denied, All edge types granted
|
|
memgraph::auth::User user{"test"};
|
|
user.fine_grained_access_handler().label_permissions().Deny("*",
|
|
memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
user.fine_grained_access_handler().edge_type_permissions().Grant(
|
|
"*", memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
|
|
ASSERT_THROW(ExecuteCreateExpand(false, user), QueryRuntimeException);
|
|
ASSERT_THROW(ExecuteCreateExpand(true, user), QueryRuntimeException);
|
|
}
|
|
|
|
TEST_F(CreateExpandWithAuthFixture, CreateExpandWithFirstLabelGranted) {
|
|
// First label granted, All edge types granted
|
|
memgraph::auth::User user{"test"};
|
|
user.fine_grained_access_handler().label_permissions().Grant("Node1",
|
|
memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
user.fine_grained_access_handler().label_permissions().Deny("Node2",
|
|
memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
user.fine_grained_access_handler().label_permissions().Deny("Node2", memgraph::auth::FineGrainedPermission::UPDATE);
|
|
user.fine_grained_access_handler().edge_type_permissions().Grant(
|
|
"*", memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
|
|
ASSERT_THROW(ExecuteCreateExpand(false, user), QueryRuntimeException);
|
|
ASSERT_THROW(ExecuteCreateExpand(true, user), QueryRuntimeException);
|
|
}
|
|
|
|
TEST_F(CreateExpandWithAuthFixture, CreateExpandWithSecondLabelGranted) {
|
|
// Second label granted, All edge types granted
|
|
memgraph::auth::User user{"test"};
|
|
user.fine_grained_access_handler().label_permissions().Grant("Node2",
|
|
memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
user.fine_grained_access_handler().label_permissions().Deny("Node1",
|
|
memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
user.fine_grained_access_handler().edge_type_permissions().Grant(
|
|
"*", memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
|
|
ASSERT_THROW(ExecuteCreateExpand(false, user), QueryRuntimeException);
|
|
ASSERT_THROW(ExecuteCreateExpand(true, user), QueryRuntimeException);
|
|
}
|
|
|
|
TEST_F(CreateExpandWithAuthFixture, CreateExpandWithoutCycleWithEverythingGranted) {
|
|
// All labels granted, All edge types granted
|
|
memgraph::auth::User user{"test"};
|
|
user.fine_grained_access_handler().label_permissions().Grant("*",
|
|
memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
user.fine_grained_access_handler().edge_type_permissions().Grant(
|
|
"*", memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
|
|
ExecuteCreateExpand(false, user);
|
|
TestCreateExpandHypothesis(2, 1);
|
|
}
|
|
|
|
TEST_F(CreateExpandWithAuthFixture, CreateExpandWithCycleWithEverythingGranted) {
|
|
// All labels granted, All edge types granted
|
|
memgraph::auth::User user{"test"};
|
|
user.fine_grained_access_handler().label_permissions().Grant("*",
|
|
memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
user.fine_grained_access_handler().edge_type_permissions().Grant(
|
|
"*", memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
|
|
ExecuteCreateExpand(true, user);
|
|
TestCreateExpandHypothesis(1, 1);
|
|
}
|
|
|
|
TEST(QueryPlan, MatchCreateNode) {
|
|
memgraph::storage::Storage db;
|
|
auto storage_dba = db.Access();
|
|
memgraph::query::DbAccessor dba(&storage_dba);
|
|
|
|
// add three nodes we'll match and expand-create from
|
|
dba.InsertVertex();
|
|
dba.InsertVertex();
|
|
dba.InsertVertex();
|
|
dba.AdvanceCommand();
|
|
|
|
SymbolTable symbol_table;
|
|
AstStorage storage;
|
|
|
|
// first node
|
|
auto n_scan_all = MakeScanAll(storage, symbol_table, "n");
|
|
// second node
|
|
NodeCreationInfo m;
|
|
m.symbol = symbol_table.CreateSymbol("m", true);
|
|
// creation op
|
|
auto create_node = std::make_shared<CreateNode>(n_scan_all.op_, m);
|
|
|
|
EXPECT_EQ(CountIterable(dba.Vertices(memgraph::storage::View::OLD)), 3);
|
|
auto context = MakeContext(storage, symbol_table, &dba);
|
|
PullAll(*create_node, &context);
|
|
dba.AdvanceCommand();
|
|
EXPECT_EQ(CountIterable(dba.Vertices(memgraph::storage::View::OLD)), 6);
|
|
}
|
|
|
|
class MatchCreateNodeWithAuthFixture : public testing::Test {
|
|
protected:
|
|
memgraph::storage::Storage db;
|
|
memgraph::storage::Storage::Accessor storage_dba{db.Access()};
|
|
memgraph::query::DbAccessor dba{&storage_dba};
|
|
AstStorage storage;
|
|
SymbolTable symbol_table;
|
|
|
|
void SetUp() override { memgraph::utils::license::global_license_checker.EnableTesting(); }
|
|
|
|
void InitGraph() {
|
|
// add three nodes we'll match and expand-create from
|
|
memgraph::query::VertexAccessor v1{dba.InsertVertex()};
|
|
memgraph::query::VertexAccessor v2{dba.InsertVertex()};
|
|
memgraph::query::VertexAccessor v3{dba.InsertVertex()};
|
|
ASSERT_TRUE(v1.AddLabel(dba.NameToLabel("l1")).HasValue());
|
|
ASSERT_TRUE(v2.AddLabel(dba.NameToLabel("l2")).HasValue());
|
|
ASSERT_TRUE(v3.AddLabel(dba.NameToLabel("l3")).HasValue());
|
|
dba.AdvanceCommand();
|
|
}
|
|
|
|
void ExecuteMatchCreate(memgraph::auth::User &user) {
|
|
auto n_scan_all = MakeScanAll(storage, symbol_table, "n");
|
|
// second node
|
|
NodeCreationInfo m{};
|
|
|
|
m.symbol = symbol_table.CreateSymbol("m", true);
|
|
std::vector<memgraph::storage::LabelId> labels{dba.NameToLabel("l2")};
|
|
m.labels = labels;
|
|
// creation op
|
|
auto create_node = std::make_shared<CreateNode>(n_scan_all.op_, m);
|
|
memgraph::glue::FineGrainedAuthChecker auth_checker{user, &dba};
|
|
auto context = MakeContextWithFineGrainedChecker(storage, symbol_table, &dba, &auth_checker);
|
|
|
|
PullAll(*create_node, &context);
|
|
dba.AdvanceCommand();
|
|
}
|
|
|
|
void MatchCreateAssertion(int expected_result_size) {
|
|
EXPECT_EQ(CountIterable(dba.Vertices(memgraph::storage::View::OLD)), expected_result_size);
|
|
}
|
|
|
|
void ExecuteMatchCreateTestSuite(memgraph::auth::User &user, int expected_result_size) {
|
|
InitGraph();
|
|
ExecuteMatchCreate(user);
|
|
MatchCreateAssertion(expected_result_size);
|
|
}
|
|
};
|
|
|
|
TEST_F(MatchCreateNodeWithAuthFixture, MatchCreateWithAllLabelsDeniedThrows) {
|
|
// All labels denied
|
|
memgraph::auth::User user{"test"};
|
|
user.fine_grained_access_handler().label_permissions().Deny("*",
|
|
memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
|
|
ASSERT_THROW(ExecuteMatchCreateTestSuite(user, 3), QueryRuntimeException);
|
|
}
|
|
|
|
TEST_F(MatchCreateNodeWithAuthFixture, MatchCreateWithAllLabelsGrantedExecutes) {
|
|
// All labels granteddenieddenieddenied
|
|
|
|
memgraph::auth::User user{"test"};
|
|
user.fine_grained_access_handler().label_permissions().Grant("*",
|
|
memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
|
|
ExecuteMatchCreateTestSuite(user, 6);
|
|
}
|
|
|
|
TEST_F(MatchCreateNodeWithAuthFixture, MatchCreateWithOneLabelDeniedThrows) {
|
|
// Label2 denied
|
|
memgraph::auth::User user{"test"};
|
|
user.fine_grained_access_handler().label_permissions().Grant("l1",
|
|
memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
user.fine_grained_access_handler().label_permissions().Grant("l3",
|
|
memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
|
|
user.fine_grained_access_handler().label_permissions().Deny("l2",
|
|
memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
|
|
ASSERT_THROW(ExecuteMatchCreateTestSuite(user, 3), QueryRuntimeException);
|
|
}
|
|
#endif
|
|
|
|
TEST(QueryPlan, MatchCreateExpand) {
|
|
memgraph::storage::Storage db;
|
|
auto storage_dba = db.Access();
|
|
memgraph::query::DbAccessor dba(&storage_dba);
|
|
|
|
// add three nodes we'll match and expand-create from
|
|
dba.InsertVertex();
|
|
dba.InsertVertex();
|
|
dba.InsertVertex();
|
|
dba.AdvanceCommand();
|
|
|
|
// memgraph::storage::LabelId label_node_1 = dba.NameToLabel("Node1");
|
|
// memgraph::storage::LabelId label_node_2 = dba.NameToLabel("Node2");
|
|
// memgraph::storage::PropertyId property = dba.NameToLabel("prop");
|
|
memgraph::storage::EdgeTypeId edge_type = dba.NameToEdgeType("edge_type");
|
|
|
|
SymbolTable symbol_table;
|
|
AstStorage storage;
|
|
|
|
auto test_create_path = [&](bool cycle, int expected_nodes_created, int expected_edges_created) {
|
|
int before_v = CountIterable(dba.Vertices(memgraph::storage::View::OLD));
|
|
int before_e = CountEdges(&dba, memgraph::storage::View::OLD);
|
|
|
|
// data for the first node
|
|
auto n_scan_all = MakeScanAll(storage, symbol_table, "n");
|
|
|
|
// data for the second node
|
|
NodeCreationInfo m;
|
|
m.symbol = cycle ? n_scan_all.sym_ : symbol_table.CreateSymbol("m", true);
|
|
|
|
EdgeCreationInfo r;
|
|
r.symbol = symbol_table.CreateSymbol("r", true);
|
|
r.direction = EdgeAtom::Direction::OUT;
|
|
r.edge_type = edge_type;
|
|
|
|
auto create_expand = std::make_shared<CreateExpand>(m, r, n_scan_all.op_, n_scan_all.sym_, cycle);
|
|
auto context = MakeContext(storage, symbol_table, &dba);
|
|
PullAll(*create_expand, &context);
|
|
dba.AdvanceCommand();
|
|
|
|
EXPECT_EQ(CountIterable(dba.Vertices(memgraph::storage::View::OLD)) - before_v, expected_nodes_created);
|
|
EXPECT_EQ(CountEdges(&dba, memgraph::storage::View::OLD) - before_e, expected_edges_created);
|
|
};
|
|
|
|
test_create_path(false, 3, 3);
|
|
test_create_path(true, 0, 6);
|
|
}
|
|
|
|
#ifdef MG_ENTERPRISE
|
|
class MatchCreateExpandWithAuthFixture : public testing::Test {
|
|
protected:
|
|
memgraph::storage::Storage db;
|
|
memgraph::storage::Storage::Accessor storage_dba{db.Access()};
|
|
memgraph::query::DbAccessor dba{&storage_dba};
|
|
AstStorage storage;
|
|
SymbolTable symbol_table;
|
|
|
|
void SetUp() override { memgraph::utils::license::global_license_checker.EnableTesting(); }
|
|
|
|
void InitGraph() {
|
|
// add three nodes we'll match and expand-create from
|
|
memgraph::query::VertexAccessor v1{dba.InsertVertex()};
|
|
memgraph::query::VertexAccessor v2{dba.InsertVertex()};
|
|
memgraph::query::VertexAccessor v3{dba.InsertVertex()};
|
|
ASSERT_TRUE(v1.AddLabel(dba.NameToLabel("l1")).HasValue());
|
|
ASSERT_TRUE(v2.AddLabel(dba.NameToLabel("l2")).HasValue());
|
|
ASSERT_TRUE(v3.AddLabel(dba.NameToLabel("l3")).HasValue());
|
|
|
|
dba.AdvanceCommand();
|
|
}
|
|
|
|
void ExecuteMatchCreateExpand(memgraph::auth::User &user, bool cycle) {
|
|
// data for the first node
|
|
auto n_scan_all = MakeScanAll(storage, symbol_table, "n");
|
|
|
|
// data for the second node
|
|
NodeCreationInfo m;
|
|
m.symbol = cycle ? n_scan_all.sym_ : symbol_table.CreateSymbol("m", true);
|
|
std::vector<memgraph::storage::LabelId> labels{dba.NameToLabel("l2")};
|
|
m.labels = labels;
|
|
|
|
EdgeCreationInfo r;
|
|
r.symbol = symbol_table.CreateSymbol("r", true);
|
|
r.direction = EdgeAtom::Direction::OUT;
|
|
r.edge_type = dba.NameToEdgeType("edge_type");
|
|
;
|
|
|
|
auto create_expand = std::make_shared<CreateExpand>(m, r, n_scan_all.op_, n_scan_all.sym_, cycle);
|
|
memgraph::glue::FineGrainedAuthChecker auth_checker{user, &dba};
|
|
auto context = MakeContextWithFineGrainedChecker(storage, symbol_table, &dba, &auth_checker);
|
|
PullAll(*create_expand, &context);
|
|
dba.AdvanceCommand();
|
|
}
|
|
|
|
void MatchCreateExpandAssertion(int expected_nodes_size, int expected_edges_size) {
|
|
EXPECT_EQ(CountIterable(dba.Vertices(memgraph::storage::View::NEW)), expected_nodes_size);
|
|
EXPECT_EQ(CountEdges(&dba, memgraph::storage::View::NEW), expected_edges_size);
|
|
}
|
|
|
|
void ExecuteMatchCreateExpandTestSuite(bool cycle, int expected_nodes_size, int expected_edges_size,
|
|
memgraph::auth::User &user) {
|
|
InitGraph();
|
|
ExecuteMatchCreateExpand(user, cycle);
|
|
MatchCreateExpandAssertion(expected_nodes_size, expected_edges_size);
|
|
}
|
|
};
|
|
|
|
TEST_F(MatchCreateExpandWithAuthFixture, MatchCreateExpandThrowsWhenDeniedEverything) {
|
|
// All labels denied, All edge types denied
|
|
memgraph::auth::User user{"test"};
|
|
user.fine_grained_access_handler().label_permissions().Deny("*",
|
|
memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
user.fine_grained_access_handler().edge_type_permissions().Deny("*",
|
|
memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
ASSERT_THROW(ExecuteMatchCreateExpandTestSuite(false, 0, 0, user), QueryRuntimeException);
|
|
ASSERT_THROW(ExecuteMatchCreateExpandTestSuite(true, 0, 0, user), QueryRuntimeException);
|
|
}
|
|
|
|
TEST_F(MatchCreateExpandWithAuthFixture, MatchCreateExpandThrowsWhenDeniedEdgeTypes) {
|
|
// All labels granted, All edge types denied
|
|
memgraph::auth::User user{"test"};
|
|
user.fine_grained_access_handler().label_permissions().Grant("*",
|
|
memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
user.fine_grained_access_handler().edge_type_permissions().Deny("*",
|
|
memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
ASSERT_THROW(ExecuteMatchCreateExpandTestSuite(false, 0, 0, user), QueryRuntimeException);
|
|
ASSERT_THROW(ExecuteMatchCreateExpandTestSuite(true, 0, 0, user), QueryRuntimeException);
|
|
}
|
|
|
|
TEST_F(MatchCreateExpandWithAuthFixture, MatchCreateExpandThrowsWhenDeniedLabels) {
|
|
// All labels denied, All edge types granted
|
|
memgraph::auth::User user{"test"};
|
|
user.fine_grained_access_handler().label_permissions().Deny("*", memgraph::auth::FineGrainedPermission::UPDATE);
|
|
user.fine_grained_access_handler().edge_type_permissions().Grant(
|
|
"*", memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
ASSERT_THROW(ExecuteMatchCreateExpandTestSuite(false, 0, 0, user), QueryRuntimeException);
|
|
ASSERT_THROW(ExecuteMatchCreateExpandTestSuite(true, 0, 0, user), QueryRuntimeException);
|
|
}
|
|
|
|
TEST_F(MatchCreateExpandWithAuthFixture, MatchCreateExpandThrowsWhenDeniedOneLabel) {
|
|
// First two label granted, All edge types granted
|
|
memgraph::auth::User user{"test"};
|
|
user.fine_grained_access_handler().label_permissions().Grant("l1", memgraph::auth::FineGrainedPermission::UPDATE);
|
|
user.fine_grained_access_handler().label_permissions().Grant("l3", memgraph::auth::FineGrainedPermission::UPDATE);
|
|
user.fine_grained_access_handler().label_permissions().Deny("l2", memgraph::auth::FineGrainedPermission::UPDATE);
|
|
|
|
user.fine_grained_access_handler().edge_type_permissions().Grant(
|
|
"*", memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
|
|
ASSERT_THROW(ExecuteMatchCreateExpandTestSuite(false, 0, 0, user), QueryRuntimeException);
|
|
ASSERT_THROW(ExecuteMatchCreateExpandTestSuite(true, 0, 0, user), QueryRuntimeException);
|
|
}
|
|
|
|
TEST_F(MatchCreateExpandWithAuthFixture, MatchCreateExpandWithoutCycleExecutesWhenGrantedSpecificallyEverything) {
|
|
// All label granted, Specific edge type granted
|
|
memgraph::auth::User user{"test"};
|
|
user.fine_grained_access_handler().label_permissions().Grant("*",
|
|
memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
user.fine_grained_access_handler().edge_type_permissions().Grant(
|
|
"edge_type", memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
|
|
ExecuteMatchCreateExpandTestSuite(false, 6, 3, user);
|
|
}
|
|
|
|
TEST_F(MatchCreateExpandWithAuthFixture, MatchCreateExpandWithCycleExecutesWhenGrantedSpecificallyEverything) {
|
|
// All label granted, Specific edge type granted
|
|
memgraph::auth::User user{"test"};
|
|
user.fine_grained_access_handler().label_permissions().Grant("*",
|
|
memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
user.fine_grained_access_handler().edge_type_permissions().Grant(
|
|
"edge_type", memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
|
|
ExecuteMatchCreateExpandTestSuite(true, 3, 3, user);
|
|
}
|
|
|
|
TEST_F(MatchCreateExpandWithAuthFixture, MatchCreateExpandWithoutCycleExecutesWhenGrantedEverything) {
|
|
// All labels granted, All edge types granted
|
|
memgraph::auth::User user{"test"};
|
|
user.fine_grained_access_handler().label_permissions().Grant("*",
|
|
memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
user.fine_grained_access_handler().edge_type_permissions().Grant(
|
|
"*", memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
|
|
ExecuteMatchCreateExpandTestSuite(false, 6, 3, user);
|
|
}
|
|
|
|
TEST_F(MatchCreateExpandWithAuthFixture, MatchCreateExpandWithCycleExecutesWhenGrantedEverything) {
|
|
// All labels granted, All edge types granted
|
|
memgraph::auth::User user{"test"};
|
|
user.fine_grained_access_handler().label_permissions().Grant("*",
|
|
memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
user.fine_grained_access_handler().edge_type_permissions().Grant(
|
|
"*", memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
|
|
ExecuteMatchCreateExpandTestSuite(true, 3, 3, user);
|
|
}
|
|
#endif
|
|
|
|
TEST(QueryPlan, Delete) {
|
|
memgraph::storage::Storage db;
|
|
auto storage_dba = db.Access();
|
|
memgraph::query::DbAccessor dba(&storage_dba);
|
|
|
|
// make a fully-connected (one-direction, no cycles) with 4 nodes
|
|
std::vector<memgraph::query::VertexAccessor> vertices;
|
|
for (int i = 0; i < 4; ++i) vertices.push_back(dba.InsertVertex());
|
|
auto type = dba.NameToEdgeType("type");
|
|
for (int j = 0; j < 4; ++j)
|
|
for (int k = j + 1; k < 4; ++k) ASSERT_TRUE(dba.InsertEdge(&vertices[j], &vertices[k], type).HasValue());
|
|
|
|
dba.AdvanceCommand();
|
|
EXPECT_EQ(4, CountIterable(dba.Vertices(memgraph::storage::View::OLD)));
|
|
EXPECT_EQ(6, CountEdges(&dba, memgraph::storage::View::OLD));
|
|
|
|
AstStorage storage;
|
|
SymbolTable symbol_table;
|
|
|
|
// attempt to delete a vertex, and fail
|
|
{
|
|
auto n = MakeScanAll(storage, symbol_table, "n");
|
|
auto n_get = storage.Create<Identifier>("n")->MapTo(n.sym_);
|
|
auto delete_op = std::make_shared<plan::Delete>(n.op_, std::vector<Expression *>{n_get}, false);
|
|
auto context = MakeContext(storage, symbol_table, &dba);
|
|
EXPECT_THROW(PullAll(*delete_op, &context), QueryRuntimeException);
|
|
dba.AdvanceCommand();
|
|
EXPECT_EQ(4, CountIterable(dba.Vertices(memgraph::storage::View::OLD)));
|
|
EXPECT_EQ(6, CountEdges(&dba, memgraph::storage::View::OLD));
|
|
}
|
|
|
|
// detach delete a single vertex
|
|
{
|
|
auto n = MakeScanAll(storage, symbol_table, "n");
|
|
auto n_get = storage.Create<Identifier>("n")->MapTo(n.sym_);
|
|
auto delete_op = std::make_shared<plan::Delete>(n.op_, std::vector<Expression *>{n_get}, true);
|
|
Frame frame(symbol_table.max_position());
|
|
auto context = MakeContext(storage, symbol_table, &dba);
|
|
delete_op->MakeCursor(memgraph::utils::NewDeleteResource())->Pull(frame, context);
|
|
dba.AdvanceCommand();
|
|
EXPECT_EQ(3, CountIterable(dba.Vertices(memgraph::storage::View::OLD)));
|
|
EXPECT_EQ(3, CountEdges(&dba, memgraph::storage::View::OLD));
|
|
}
|
|
|
|
// delete all remaining edges
|
|
{
|
|
auto n = MakeScanAll(storage, symbol_table, "n");
|
|
auto r_m = MakeExpand(storage, symbol_table, n.op_, n.sym_, "r", EdgeAtom::Direction::OUT, {}, "m", false,
|
|
memgraph::storage::View::NEW);
|
|
auto r_get = storage.Create<Identifier>("r")->MapTo(r_m.edge_sym_);
|
|
auto delete_op = std::make_shared<plan::Delete>(r_m.op_, std::vector<Expression *>{r_get}, false);
|
|
auto context = MakeContext(storage, symbol_table, &dba);
|
|
PullAll(*delete_op, &context);
|
|
dba.AdvanceCommand();
|
|
EXPECT_EQ(3, CountIterable(dba.Vertices(memgraph::storage::View::OLD)));
|
|
EXPECT_EQ(0, CountEdges(&dba, memgraph::storage::View::OLD));
|
|
}
|
|
|
|
// delete all remaining vertices
|
|
{
|
|
auto n = MakeScanAll(storage, symbol_table, "n");
|
|
auto n_get = storage.Create<Identifier>("n")->MapTo(n.sym_);
|
|
auto delete_op = std::make_shared<plan::Delete>(n.op_, std::vector<Expression *>{n_get}, false);
|
|
auto context = MakeContext(storage, symbol_table, &dba);
|
|
PullAll(*delete_op, &context);
|
|
dba.AdvanceCommand();
|
|
EXPECT_EQ(0, CountIterable(dba.Vertices(memgraph::storage::View::OLD)));
|
|
EXPECT_EQ(0, CountEdges(&dba, memgraph::storage::View::OLD));
|
|
}
|
|
}
|
|
|
|
#ifdef MG_ENTERPRISE
|
|
class DeleteOperatorWithAuthFixture : public testing::Test {
|
|
protected:
|
|
memgraph::storage::Storage db;
|
|
memgraph::storage::Storage::Accessor storage_dba{db.Access()};
|
|
memgraph::query::DbAccessor dba{&storage_dba};
|
|
AstStorage storage;
|
|
SymbolTable symbol_table;
|
|
|
|
void SetUp() override { memgraph::utils::license::global_license_checker.EnableTesting(); }
|
|
|
|
void InitGraph() {
|
|
std::vector<memgraph::query::VertexAccessor> vertices;
|
|
for (int i = 0; i < 4; ++i) {
|
|
memgraph::query::VertexAccessor v{dba.InsertVertex()};
|
|
auto label = "l" + std::to_string(i);
|
|
ASSERT_TRUE(v.AddLabel(dba.NameToLabel(label)).HasValue());
|
|
vertices.push_back(v);
|
|
}
|
|
for (int j = 0; j < 4; ++j) {
|
|
auto edge_type = "type" + std::to_string(j);
|
|
auto type = dba.NameToEdgeType(edge_type);
|
|
for (int k = j + 1; k < 4; ++k) ASSERT_TRUE(dba.InsertEdge(&vertices[j], &vertices[k], type).HasValue());
|
|
}
|
|
|
|
dba.AdvanceCommand();
|
|
|
|
assertInitGraphValid();
|
|
}
|
|
|
|
void TestDeleteNodesHypothesis(int expected_result_size) {
|
|
EXPECT_EQ(expected_result_size, CountIterable(dba.Vertices(memgraph::storage::View::NEW)));
|
|
};
|
|
|
|
void DeleteAllNodes(memgraph::auth::User &user) {
|
|
auto n = MakeScanAll(storage, symbol_table, "n");
|
|
auto n_get = storage.Create<Identifier>("n")->MapTo(n.sym_);
|
|
Frame frame(symbol_table.max_position());
|
|
memgraph::glue::FineGrainedAuthChecker auth_checker{user, &dba};
|
|
auto context = MakeContextWithFineGrainedChecker(storage, symbol_table, &dba, &auth_checker);
|
|
auto delete_op = std::make_shared<plan::Delete>(n.op_, std::vector<Expression *>{n_get}, true);
|
|
PullAll(*delete_op, &context);
|
|
dba.AdvanceCommand();
|
|
};
|
|
|
|
void ExecuteDeleteNodesTestSuite(memgraph::auth::User &user, int expected_nodes) {
|
|
// make a fully-connected (one-direction, no cycles) with 4 nodes
|
|
InitGraph();
|
|
DeleteAllNodes(user);
|
|
TestDeleteNodesHypothesis(expected_nodes);
|
|
};
|
|
|
|
void TestDeleteEdgesHypothesis(int expected_result_size) {
|
|
EXPECT_EQ(expected_result_size, CountEdges(&dba, memgraph::storage::View::NEW));
|
|
};
|
|
|
|
void DeleteAllEdges(memgraph::auth::User &user) {
|
|
auto n = MakeScanAll(storage, symbol_table, "n");
|
|
auto r_m = MakeExpand(storage, symbol_table, n.op_, n.sym_, "r", EdgeAtom::Direction::OUT, {}, "m", false,
|
|
memgraph::storage::View::NEW);
|
|
auto r_get = storage.Create<Identifier>("r")->MapTo(r_m.edge_sym_);
|
|
auto delete_op = std::make_shared<plan::Delete>(r_m.op_, std::vector<Expression *>{r_get}, false);
|
|
memgraph::glue::FineGrainedAuthChecker auth_checker{user, &dba};
|
|
auto context = MakeContextWithFineGrainedChecker(storage, symbol_table, &dba, &auth_checker);
|
|
PullAll(*delete_op, &context);
|
|
dba.AdvanceCommand();
|
|
};
|
|
|
|
void ExecuteDeleteEdgesTestSuite(memgraph::auth::User &user, int expected_edges) {
|
|
// make a fully-connected (one-direction, no cycles) with 4 nodes
|
|
InitGraph();
|
|
DeleteAllEdges(user);
|
|
TestDeleteEdgesHypothesis(expected_edges);
|
|
};
|
|
|
|
private:
|
|
void assertInitGraphValid() {
|
|
EXPECT_EQ(4, CountIterable(dba.Vertices(memgraph::storage::View::OLD)));
|
|
EXPECT_EQ(6, CountEdges(&dba, memgraph::storage::View::OLD));
|
|
}
|
|
};
|
|
|
|
TEST_F(DeleteOperatorWithAuthFixture, DeleteNodeThrowsExceptionWhenAllLabelsDenied) {
|
|
// All labels denied
|
|
memgraph::auth::User user{"test"};
|
|
user.fine_grained_access_handler().label_permissions().Deny("*",
|
|
memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
|
|
ASSERT_THROW(ExecuteDeleteNodesTestSuite(user, 0), QueryRuntimeException);
|
|
}
|
|
|
|
TEST_F(DeleteOperatorWithAuthFixture, DeleteNodeThrowsExceptionWhenPartialLabelsGranted) {
|
|
// One Label granted
|
|
memgraph::auth::User user{"test"};
|
|
user.fine_grained_access_handler().label_permissions().Grant("l1",
|
|
memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
user.fine_grained_access_handler().label_permissions().Grant("*", memgraph::auth::FineGrainedPermission::READ);
|
|
ASSERT_THROW(ExecuteDeleteNodesTestSuite(user, 0), QueryRuntimeException);
|
|
}
|
|
|
|
TEST_F(DeleteOperatorWithAuthFixture, DeleteNodeExecutesWhenGrantedAllLabels) {
|
|
// All labels granted
|
|
memgraph::auth::User user{"test"};
|
|
user.fine_grained_access_handler().label_permissions().Grant("*",
|
|
memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
ExecuteDeleteNodesTestSuite(user, 0);
|
|
}
|
|
TEST_F(DeleteOperatorWithAuthFixture, DeleteNodeThrowsExceptionWhenEdgeTypesNotGranted) {
|
|
// All labels granted,All edge types denied
|
|
memgraph::auth::User user{"test"};
|
|
user.fine_grained_access_handler().label_permissions().Grant("*", memgraph::auth::FineGrainedPermission::UPDATE);
|
|
user.fine_grained_access_handler().edge_type_permissions().Deny("*",
|
|
memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
|
|
ASSERT_THROW(ExecuteDeleteNodesTestSuite(user, 0), QueryRuntimeException);
|
|
}
|
|
TEST_F(DeleteOperatorWithAuthFixture, DeleteEdgesThrowsErrorWhenPartialGrant) {
|
|
// Specific label granted, Specific edge types granted
|
|
|
|
memgraph::auth::User user{"test"};
|
|
user.fine_grained_access_handler().label_permissions().Grant("l1", memgraph::auth::FineGrainedPermission::UPDATE);
|
|
user.fine_grained_access_handler().label_permissions().Grant("l2", memgraph::auth::FineGrainedPermission::UPDATE);
|
|
user.fine_grained_access_handler().label_permissions().Deny("l3", memgraph::auth::FineGrainedPermission::UPDATE);
|
|
user.fine_grained_access_handler().label_permissions().Deny("l4", memgraph::auth::FineGrainedPermission::UPDATE);
|
|
user.fine_grained_access_handler().edge_type_permissions().Grant(
|
|
"type0", memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
user.fine_grained_access_handler().edge_type_permissions().Grant(
|
|
"type1", memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
user.fine_grained_access_handler().edge_type_permissions().Deny("type2",
|
|
memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
user.fine_grained_access_handler().edge_type_permissions().Deny("type3",
|
|
memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
|
|
ASSERT_THROW(ExecuteDeleteEdgesTestSuite(user, 0), QueryRuntimeException);
|
|
}
|
|
|
|
TEST_F(DeleteOperatorWithAuthFixture, DeleteNodeAndDeleteEdgePerformWhenGranted) {
|
|
// All labels granted, All edge_types granted
|
|
|
|
memgraph::auth::User user{"test"};
|
|
user.fine_grained_access_handler().label_permissions().Grant("*",
|
|
memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
user.fine_grained_access_handler().edge_type_permissions().Grant(
|
|
"*", memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
|
|
InitGraph();
|
|
DeleteAllNodes(user);
|
|
TestDeleteNodesHypothesis(0);
|
|
TestDeleteEdgesHypothesis(0);
|
|
}
|
|
#endif
|
|
|
|
TEST(QueryPlan, DeleteTwiceDeleteBlockingEdge) {
|
|
// test deleting the same vertex and edge multiple times
|
|
//
|
|
// also test vertex deletion succeeds if the prohibiting
|
|
// edge is deleted in the same logical op
|
|
//
|
|
// we test both with the following queries (note the
|
|
// undirected edge in MATCH):
|
|
//
|
|
// CREATE ()-[:T]->()
|
|
// MATCH (n)-[r]-(m) [DETACH] DELETE n, r, m
|
|
|
|
auto test_delete = [](bool detach) {
|
|
memgraph::storage::Storage db;
|
|
auto storage_dba = db.Access();
|
|
memgraph::query::DbAccessor dba(&storage_dba);
|
|
|
|
auto v1 = dba.InsertVertex();
|
|
auto v2 = dba.InsertVertex();
|
|
ASSERT_TRUE(dba.InsertEdge(&v1, &v2, dba.NameToEdgeType("T")).HasValue());
|
|
dba.AdvanceCommand();
|
|
EXPECT_EQ(2, CountIterable(dba.Vertices(memgraph::storage::View::OLD)));
|
|
EXPECT_EQ(1, CountEdges(&dba, memgraph::storage::View::OLD));
|
|
|
|
AstStorage storage;
|
|
SymbolTable symbol_table;
|
|
|
|
auto n = MakeScanAll(storage, symbol_table, "n");
|
|
auto r_m = MakeExpand(storage, symbol_table, n.op_, n.sym_, "r", EdgeAtom::Direction::BOTH, {}, "m", false,
|
|
memgraph::storage::View::OLD);
|
|
|
|
// getter expressions for deletion
|
|
auto n_get = storage.Create<Identifier>("n")->MapTo(n.sym_);
|
|
auto r_get = storage.Create<Identifier>("r")->MapTo(r_m.edge_sym_);
|
|
auto m_get = storage.Create<Identifier>("m")->MapTo(r_m.node_sym_);
|
|
|
|
auto delete_op = std::make_shared<plan::Delete>(r_m.op_, std::vector<Expression *>{n_get, r_get, m_get}, detach);
|
|
auto context = MakeContext(storage, symbol_table, &dba);
|
|
EXPECT_EQ(2, PullAll(*delete_op, &context));
|
|
dba.AdvanceCommand();
|
|
EXPECT_EQ(0, CountIterable(dba.Vertices(memgraph::storage::View::OLD)));
|
|
EXPECT_EQ(0, CountEdges(&dba, memgraph::storage::View::OLD));
|
|
};
|
|
|
|
test_delete(true);
|
|
test_delete(false);
|
|
}
|
|
|
|
TEST(QueryPlan, DeleteReturn) {
|
|
memgraph::storage::Storage db;
|
|
auto storage_dba = db.Access();
|
|
memgraph::query::DbAccessor dba(&storage_dba);
|
|
|
|
// make a fully-connected (one-direction, no cycles) with 4 nodes
|
|
auto prop = PROPERTY_PAIR("property");
|
|
for (int i = 0; i < 4; ++i) {
|
|
auto va = dba.InsertVertex();
|
|
ASSERT_TRUE(va.SetProperty(prop.second, memgraph::storage::PropertyValue(42)).HasValue());
|
|
}
|
|
|
|
dba.AdvanceCommand();
|
|
EXPECT_EQ(4, CountIterable(dba.Vertices(memgraph::storage::View::OLD)));
|
|
EXPECT_EQ(0, CountEdges(&dba, memgraph::storage::View::OLD));
|
|
|
|
AstStorage storage;
|
|
SymbolTable symbol_table;
|
|
|
|
auto n = MakeScanAll(storage, symbol_table, "n");
|
|
|
|
auto n_get = storage.Create<Identifier>("n")->MapTo(n.sym_);
|
|
auto delete_op = std::make_shared<plan::Delete>(n.op_, std::vector<Expression *>{n_get}, true);
|
|
|
|
auto prop_lookup = PROPERTY_LOOKUP(IDENT("n")->MapTo(n.sym_), prop);
|
|
auto n_p = storage.Create<NamedExpression>("n", prop_lookup)->MapTo(symbol_table.CreateSymbol("bla", true));
|
|
auto produce = MakeProduce(delete_op, n_p);
|
|
|
|
auto context = MakeContext(storage, symbol_table, &dba);
|
|
ASSERT_THROW(CollectProduce(*produce, &context), QueryRuntimeException);
|
|
}
|
|
|
|
TEST(QueryPlan, DeleteNull) {
|
|
// test (simplified) WITH Null as x delete x
|
|
memgraph::storage::Storage db;
|
|
auto storage_dba = db.Access();
|
|
memgraph::query::DbAccessor dba(&storage_dba);
|
|
AstStorage storage;
|
|
SymbolTable symbol_table;
|
|
|
|
auto once = std::make_shared<Once>();
|
|
auto delete_op = std::make_shared<plan::Delete>(once, std::vector<Expression *>{LITERAL(TypedValue())}, false);
|
|
auto context = MakeContext(storage, symbol_table, &dba);
|
|
EXPECT_EQ(1, PullAll(*delete_op, &context));
|
|
}
|
|
|
|
TEST(QueryPlan, DeleteAdvance) {
|
|
// test queries on empty DB:
|
|
// CREATE (n)
|
|
// MATCH (n) DELETE n WITH n ...
|
|
// this fails only if the deleted record `n` is actually used in subsequent
|
|
// clauses, which is compatible with Neo's behavior.
|
|
memgraph::storage::Storage db;
|
|
|
|
AstStorage storage;
|
|
SymbolTable symbol_table;
|
|
|
|
auto n = MakeScanAll(storage, symbol_table, "n");
|
|
auto n_get = storage.Create<Identifier>("n")->MapTo(n.sym_);
|
|
auto delete_op = std::make_shared<plan::Delete>(n.op_, std::vector<Expression *>{n_get}, false);
|
|
auto advance = std::make_shared<Accumulate>(delete_op, std::vector<Symbol>{n.sym_}, true);
|
|
auto res_sym = symbol_table.CreateSymbol("res", true);
|
|
{
|
|
auto storage_dba = db.Access();
|
|
memgraph::query::DbAccessor dba(&storage_dba);
|
|
dba.InsertVertex();
|
|
dba.AdvanceCommand();
|
|
auto produce = MakeProduce(advance, NEXPR("res", LITERAL(42))->MapTo(res_sym));
|
|
auto context = MakeContext(storage, symbol_table, &dba);
|
|
EXPECT_EQ(1, PullAll(*produce, &context));
|
|
}
|
|
{
|
|
auto storage_dba = db.Access();
|
|
memgraph::query::DbAccessor dba(&storage_dba);
|
|
dba.InsertVertex();
|
|
dba.AdvanceCommand();
|
|
auto n_prop = PROPERTY_LOOKUP(n_get, dba.NameToProperty("prop"));
|
|
auto produce = MakeProduce(advance, NEXPR("res", n_prop)->MapTo(res_sym));
|
|
auto context = MakeContext(storage, symbol_table, &dba);
|
|
EXPECT_THROW(PullAll(*produce, &context), QueryRuntimeException);
|
|
}
|
|
}
|
|
|
|
TEST(QueryPlan, SetProperty) {
|
|
memgraph::storage::Storage db;
|
|
auto storage_dba = db.Access();
|
|
memgraph::query::DbAccessor dba(&storage_dba);
|
|
|
|
// graph with 4 vertices in connected pairs
|
|
// the origin vertex in each par and both edges
|
|
// have a property set
|
|
auto v1 = dba.InsertVertex();
|
|
auto v2 = dba.InsertVertex();
|
|
auto v3 = dba.InsertVertex();
|
|
auto v4 = dba.InsertVertex();
|
|
auto edge_type = dba.NameToEdgeType("edge_type");
|
|
ASSERT_TRUE(dba.InsertEdge(&v1, &v3, edge_type).HasValue());
|
|
ASSERT_TRUE(dba.InsertEdge(&v2, &v4, edge_type).HasValue());
|
|
dba.AdvanceCommand();
|
|
|
|
AstStorage storage;
|
|
SymbolTable symbol_table;
|
|
|
|
// scan (n)-[r]->(m)
|
|
auto n = MakeScanAll(storage, symbol_table, "n");
|
|
auto r_m = MakeExpand(storage, symbol_table, n.op_, n.sym_, "r", EdgeAtom::Direction::OUT, {}, "m", false,
|
|
memgraph::storage::View::OLD);
|
|
|
|
// set prop1 to 42 on n and r
|
|
auto prop1 = dba.NameToProperty("prop1");
|
|
auto literal = LITERAL(42);
|
|
|
|
auto n_p = PROPERTY_LOOKUP(IDENT("n")->MapTo(n.sym_), prop1);
|
|
auto set_n_p = std::make_shared<plan::SetProperty>(r_m.op_, prop1, n_p, literal);
|
|
|
|
auto r_p = PROPERTY_LOOKUP(IDENT("r")->MapTo(r_m.edge_sym_), prop1);
|
|
auto set_r_p = std::make_shared<plan::SetProperty>(set_n_p, prop1, r_p, literal);
|
|
auto context = MakeContext(storage, symbol_table, &dba);
|
|
EXPECT_EQ(2, PullAll(*set_r_p, &context));
|
|
dba.AdvanceCommand();
|
|
|
|
EXPECT_EQ(CountEdges(&dba, memgraph::storage::View::OLD), 2);
|
|
for (auto vertex : dba.Vertices(memgraph::storage::View::OLD)) {
|
|
auto maybe_edges = vertex.OutEdges(memgraph::storage::View::OLD);
|
|
ASSERT_TRUE(maybe_edges.HasValue());
|
|
for (auto edge : *maybe_edges) {
|
|
ASSERT_EQ(edge.GetProperty(memgraph::storage::View::OLD, prop1)->type(),
|
|
memgraph::storage::PropertyValue::Type::Int);
|
|
EXPECT_EQ(edge.GetProperty(memgraph::storage::View::OLD, prop1)->ValueInt(), 42);
|
|
auto from = edge.From();
|
|
auto to = edge.To();
|
|
ASSERT_EQ(from.GetProperty(memgraph::storage::View::OLD, prop1)->type(),
|
|
memgraph::storage::PropertyValue::Type::Int);
|
|
EXPECT_EQ(from.GetProperty(memgraph::storage::View::OLD, prop1)->ValueInt(), 42);
|
|
ASSERT_EQ(to.GetProperty(memgraph::storage::View::OLD, prop1)->type(),
|
|
memgraph::storage::PropertyValue::Type::Null);
|
|
}
|
|
}
|
|
}
|
|
|
|
TEST(QueryPlan, SetProperties) {
|
|
auto test_set_properties = [](bool update) {
|
|
memgraph::storage::Storage db;
|
|
auto storage_dba = db.Access();
|
|
memgraph::query::DbAccessor dba(&storage_dba);
|
|
|
|
// graph: ({a: 0})-[:R {b:1}]->({c:2})
|
|
auto prop_a = dba.NameToProperty("a");
|
|
auto prop_b = dba.NameToProperty("b");
|
|
auto prop_c = dba.NameToProperty("c");
|
|
auto v1 = dba.InsertVertex();
|
|
auto v2 = dba.InsertVertex();
|
|
auto e = dba.InsertEdge(&v1, &v2, dba.NameToEdgeType("R"));
|
|
ASSERT_TRUE(v1.SetProperty(prop_a, memgraph::storage::PropertyValue(0)).HasValue());
|
|
ASSERT_TRUE(e->SetProperty(prop_b, memgraph::storage::PropertyValue(1)).HasValue());
|
|
ASSERT_TRUE(v2.SetProperty(prop_c, memgraph::storage::PropertyValue(2)).HasValue());
|
|
dba.AdvanceCommand();
|
|
|
|
AstStorage storage;
|
|
SymbolTable symbol_table;
|
|
|
|
// scan (n)-[r]->(m)
|
|
auto n = MakeScanAll(storage, symbol_table, "n");
|
|
auto r_m = MakeExpand(storage, symbol_table, n.op_, n.sym_, "r", EdgeAtom::Direction::OUT, {}, "m", false,
|
|
memgraph::storage::View::OLD);
|
|
|
|
auto op = update ? plan::SetProperties::Op::UPDATE : plan::SetProperties::Op::REPLACE;
|
|
|
|
// set properties on r to n, and on r to m
|
|
auto r_ident = IDENT("r")->MapTo(r_m.edge_sym_);
|
|
auto m_ident = IDENT("m")->MapTo(r_m.node_sym_);
|
|
auto set_r_to_n = std::make_shared<plan::SetProperties>(r_m.op_, n.sym_, r_ident, op);
|
|
auto set_m_to_r = std::make_shared<plan::SetProperties>(set_r_to_n, r_m.edge_sym_, m_ident, op);
|
|
auto context = MakeContext(storage, symbol_table, &dba);
|
|
EXPECT_EQ(1, PullAll(*set_m_to_r, &context));
|
|
dba.AdvanceCommand();
|
|
|
|
EXPECT_EQ(CountEdges(&dba, memgraph::storage::View::OLD), 1);
|
|
for (auto vertex : dba.Vertices(memgraph::storage::View::OLD)) {
|
|
auto maybe_edges = vertex.OutEdges(memgraph::storage::View::OLD);
|
|
ASSERT_TRUE(maybe_edges.HasValue());
|
|
for (auto edge : *maybe_edges) {
|
|
auto from = edge.From();
|
|
EXPECT_EQ(from.Properties(memgraph::storage::View::OLD)->size(), update ? 2 : 1);
|
|
if (update) {
|
|
ASSERT_EQ(from.GetProperty(memgraph::storage::View::OLD, prop_a)->type(),
|
|
memgraph::storage::PropertyValue::Type::Int);
|
|
EXPECT_EQ(from.GetProperty(memgraph::storage::View::OLD, prop_a)->ValueInt(), 0);
|
|
}
|
|
ASSERT_EQ(from.GetProperty(memgraph::storage::View::OLD, prop_b)->type(),
|
|
memgraph::storage::PropertyValue::Type::Int);
|
|
EXPECT_EQ(from.GetProperty(memgraph::storage::View::OLD, prop_b)->ValueInt(), 1);
|
|
|
|
EXPECT_EQ(edge.Properties(memgraph::storage::View::OLD)->size(), update ? 2 : 1);
|
|
if (update) {
|
|
ASSERT_EQ(edge.GetProperty(memgraph::storage::View::OLD, prop_b)->type(),
|
|
memgraph::storage::PropertyValue::Type::Int);
|
|
EXPECT_EQ(edge.GetProperty(memgraph::storage::View::OLD, prop_b)->ValueInt(), 1);
|
|
}
|
|
ASSERT_EQ(edge.GetProperty(memgraph::storage::View::OLD, prop_c)->type(),
|
|
memgraph::storage::PropertyValue::Type::Int);
|
|
EXPECT_EQ(edge.GetProperty(memgraph::storage::View::OLD, prop_c)->ValueInt(), 2);
|
|
|
|
auto to = edge.To();
|
|
EXPECT_EQ(to.Properties(memgraph::storage::View::OLD)->size(), 1);
|
|
ASSERT_EQ(to.GetProperty(memgraph::storage::View::OLD, prop_c)->type(),
|
|
memgraph::storage::PropertyValue::Type::Int);
|
|
EXPECT_EQ(to.GetProperty(memgraph::storage::View::OLD, prop_c)->ValueInt(), 2);
|
|
}
|
|
}
|
|
};
|
|
|
|
test_set_properties(true);
|
|
test_set_properties(false);
|
|
}
|
|
|
|
TEST(QueryPlan, SetLabels) {
|
|
memgraph::storage::Storage db;
|
|
auto storage_dba = db.Access();
|
|
memgraph::query::DbAccessor dba(&storage_dba);
|
|
|
|
auto label1 = dba.NameToLabel("label1");
|
|
auto label2 = dba.NameToLabel("label2");
|
|
auto label3 = dba.NameToLabel("label3");
|
|
ASSERT_TRUE(dba.InsertVertex().AddLabel(label1).HasValue());
|
|
ASSERT_TRUE(dba.InsertVertex().AddLabel(label1).HasValue());
|
|
dba.AdvanceCommand();
|
|
|
|
AstStorage storage;
|
|
SymbolTable symbol_table;
|
|
|
|
auto n = MakeScanAll(storage, symbol_table, "n");
|
|
auto label_set =
|
|
std::make_shared<plan::SetLabels>(n.op_, n.sym_, std::vector<memgraph::storage::LabelId>{label2, label3});
|
|
auto context = MakeContext(storage, symbol_table, &dba);
|
|
EXPECT_EQ(2, PullAll(*label_set, &context));
|
|
|
|
for (auto vertex : dba.Vertices(memgraph::storage::View::OLD)) {
|
|
EXPECT_EQ(3, vertex.Labels(memgraph::storage::View::NEW)->size());
|
|
EXPECT_TRUE(*vertex.HasLabel(memgraph::storage::View::NEW, label2));
|
|
EXPECT_TRUE(*vertex.HasLabel(memgraph::storage::View::NEW, label3));
|
|
}
|
|
}
|
|
|
|
#ifdef MG_ENTERPRISE
|
|
TEST(QueryPlan, SetLabelsWithFineGrained) {
|
|
memgraph::utils::license::global_license_checker.EnableTesting();
|
|
auto set_labels = [&](memgraph::auth::User user, memgraph::query::DbAccessor dba,
|
|
std::vector<memgraph::storage::LabelId> labels) {
|
|
ASSERT_TRUE(dba.InsertVertex().AddLabel(labels[0]).HasValue());
|
|
ASSERT_TRUE(dba.InsertVertex().AddLabel(labels[0]).HasValue());
|
|
dba.AdvanceCommand();
|
|
|
|
AstStorage storage;
|
|
SymbolTable symbol_table;
|
|
|
|
auto n = MakeScanAll(storage, symbol_table, "n");
|
|
auto label_set =
|
|
std::make_shared<plan::SetLabels>(n.op_, n.sym_, std::vector<memgraph::storage::LabelId>{labels[1], labels[2]});
|
|
memgraph::glue::FineGrainedAuthChecker auth_checker{user, &dba};
|
|
auto context = MakeContextWithFineGrainedChecker(storage, symbol_table, &dba, &auth_checker);
|
|
|
|
PullAll(*label_set, &context);
|
|
};
|
|
|
|
// All labels granted
|
|
{
|
|
memgraph::auth::User user{"test"};
|
|
user.fine_grained_access_handler().label_permissions().Grant("*",
|
|
memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
memgraph::storage::Storage db;
|
|
auto storage_dba = db.Access();
|
|
memgraph::query::DbAccessor dba(&storage_dba);
|
|
auto label1 = dba.NameToLabel("label1");
|
|
auto label2 = dba.NameToLabel("label2");
|
|
auto label3 = dba.NameToLabel("label3");
|
|
set_labels(user, dba, std::vector<memgraph::storage::LabelId>{label1, label2, label3});
|
|
for (auto vertex : dba.Vertices(memgraph::storage::View::OLD)) {
|
|
EXPECT_EQ(3, vertex.Labels(memgraph::storage::View::NEW)->size());
|
|
EXPECT_TRUE(*vertex.HasLabel(memgraph::storage::View::NEW, label2));
|
|
EXPECT_TRUE(*vertex.HasLabel(memgraph::storage::View::NEW, label3));
|
|
}
|
|
}
|
|
|
|
// All labels denied
|
|
{
|
|
memgraph::auth::User user{"test"};
|
|
user.fine_grained_access_handler().label_permissions().Deny("*",
|
|
memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
memgraph::storage::Storage db;
|
|
auto storage_dba = db.Access();
|
|
memgraph::query::DbAccessor dba(&storage_dba);
|
|
auto label1 = dba.NameToLabel("label1");
|
|
auto label2 = dba.NameToLabel("label2");
|
|
auto label3 = dba.NameToLabel("label3");
|
|
ASSERT_THROW(set_labels(user, dba, std::vector<memgraph::storage::LabelId>{label1, label2, label3}),
|
|
QueryRuntimeException);
|
|
}
|
|
|
|
// label2 denied
|
|
{
|
|
memgraph::auth::User user{"test"};
|
|
user.fine_grained_access_handler().label_permissions().Grant("label1",
|
|
memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
user.fine_grained_access_handler().label_permissions().Deny("label2",
|
|
memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
user.fine_grained_access_handler().label_permissions().Grant("label3",
|
|
memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
|
|
memgraph::storage::Storage db;
|
|
auto storage_dba = db.Access();
|
|
memgraph::query::DbAccessor dba(&storage_dba);
|
|
auto label1 = dba.NameToLabel("label1");
|
|
auto label2 = dba.NameToLabel("label2");
|
|
auto label3 = dba.NameToLabel("label3");
|
|
ASSERT_THROW(set_labels(user, dba, std::vector<memgraph::storage::LabelId>{label1, label2, label3}),
|
|
QueryRuntimeException);
|
|
}
|
|
}
|
|
#endif
|
|
|
|
TEST(QueryPlan, RemoveProperty) {
|
|
memgraph::storage::Storage db;
|
|
auto storage_dba = db.Access();
|
|
memgraph::query::DbAccessor dba(&storage_dba);
|
|
|
|
// graph with 4 vertices in connected pairs
|
|
// the origin vertex in each par and both edges
|
|
// have a property set
|
|
auto prop1 = dba.NameToProperty("prop1");
|
|
auto v1 = dba.InsertVertex();
|
|
auto v2 = dba.InsertVertex();
|
|
auto v3 = dba.InsertVertex();
|
|
auto v4 = dba.InsertVertex();
|
|
auto edge_type = dba.NameToEdgeType("edge_type");
|
|
{
|
|
auto e = dba.InsertEdge(&v1, &v3, edge_type);
|
|
ASSERT_TRUE(e.HasValue());
|
|
ASSERT_TRUE(e->SetProperty(prop1, memgraph::storage::PropertyValue(42)).HasValue());
|
|
}
|
|
ASSERT_TRUE(dba.InsertEdge(&v2, &v4, edge_type).HasValue());
|
|
ASSERT_TRUE(v2.SetProperty(prop1, memgraph::storage::PropertyValue(42)).HasValue());
|
|
ASSERT_TRUE(v3.SetProperty(prop1, memgraph::storage::PropertyValue(42)).HasValue());
|
|
ASSERT_TRUE(v4.SetProperty(prop1, memgraph::storage::PropertyValue(42)).HasValue());
|
|
auto prop2 = dba.NameToProperty("prop2");
|
|
ASSERT_TRUE(v1.SetProperty(prop2, memgraph::storage::PropertyValue(0)).HasValue());
|
|
ASSERT_TRUE(v2.SetProperty(prop2, memgraph::storage::PropertyValue(0)).HasValue());
|
|
dba.AdvanceCommand();
|
|
|
|
AstStorage storage;
|
|
SymbolTable symbol_table;
|
|
|
|
// scan (n)-[r]->(m)
|
|
auto n = MakeScanAll(storage, symbol_table, "n");
|
|
auto r_m = MakeExpand(storage, symbol_table, n.op_, n.sym_, "r", EdgeAtom::Direction::OUT, {}, "m", false,
|
|
memgraph::storage::View::OLD);
|
|
|
|
auto n_p = PROPERTY_LOOKUP(IDENT("n")->MapTo(n.sym_), prop1);
|
|
auto set_n_p = std::make_shared<plan::RemoveProperty>(r_m.op_, prop1, n_p);
|
|
|
|
auto r_p = PROPERTY_LOOKUP(IDENT("r")->MapTo(r_m.edge_sym_), prop1);
|
|
auto set_r_p = std::make_shared<plan::RemoveProperty>(set_n_p, prop1, r_p);
|
|
auto context = MakeContext(storage, symbol_table, &dba);
|
|
EXPECT_EQ(2, PullAll(*set_r_p, &context));
|
|
dba.AdvanceCommand();
|
|
|
|
EXPECT_EQ(CountEdges(&dba, memgraph::storage::View::OLD), 2);
|
|
for (auto vertex : dba.Vertices(memgraph::storage::View::OLD)) {
|
|
auto maybe_edges = vertex.OutEdges(memgraph::storage::View::OLD);
|
|
ASSERT_TRUE(maybe_edges.HasValue());
|
|
for (auto edge : *maybe_edges) {
|
|
EXPECT_EQ(edge.GetProperty(memgraph::storage::View::OLD, prop1)->type(),
|
|
memgraph::storage::PropertyValue::Type::Null);
|
|
auto from = edge.From();
|
|
auto to = edge.To();
|
|
EXPECT_EQ(from.GetProperty(memgraph::storage::View::OLD, prop1)->type(),
|
|
memgraph::storage::PropertyValue::Type::Null);
|
|
EXPECT_EQ(from.GetProperty(memgraph::storage::View::OLD, prop2)->type(),
|
|
memgraph::storage::PropertyValue::Type::Int);
|
|
EXPECT_EQ(to.GetProperty(memgraph::storage::View::OLD, prop1)->type(),
|
|
memgraph::storage::PropertyValue::Type::Int);
|
|
}
|
|
}
|
|
}
|
|
|
|
TEST(QueryPlan, RemoveLabels) {
|
|
memgraph::storage::Storage db;
|
|
auto storage_dba = db.Access();
|
|
memgraph::query::DbAccessor dba(&storage_dba);
|
|
|
|
auto label1 = dba.NameToLabel("label1");
|
|
auto label2 = dba.NameToLabel("label2");
|
|
auto label3 = dba.NameToLabel("label3");
|
|
auto v1 = dba.InsertVertex();
|
|
ASSERT_TRUE(v1.AddLabel(label1).HasValue());
|
|
ASSERT_TRUE(v1.AddLabel(label2).HasValue());
|
|
ASSERT_TRUE(v1.AddLabel(label3).HasValue());
|
|
auto v2 = dba.InsertVertex();
|
|
ASSERT_TRUE(v2.AddLabel(label1).HasValue());
|
|
ASSERT_TRUE(v2.AddLabel(label3).HasValue());
|
|
dba.AdvanceCommand();
|
|
|
|
AstStorage storage;
|
|
SymbolTable symbol_table;
|
|
|
|
auto n = MakeScanAll(storage, symbol_table, "n");
|
|
auto label_remove =
|
|
std::make_shared<plan::RemoveLabels>(n.op_, n.sym_, std::vector<memgraph::storage::LabelId>{label1, label2});
|
|
auto context = MakeContext(storage, symbol_table, &dba);
|
|
EXPECT_EQ(2, PullAll(*label_remove, &context));
|
|
|
|
for (auto vertex : dba.Vertices(memgraph::storage::View::OLD)) {
|
|
EXPECT_EQ(1, vertex.Labels(memgraph::storage::View::NEW)->size());
|
|
EXPECT_FALSE(*vertex.HasLabel(memgraph::storage::View::NEW, label1));
|
|
EXPECT_FALSE(*vertex.HasLabel(memgraph::storage::View::NEW, label2));
|
|
}
|
|
}
|
|
|
|
#ifdef MG_ENTERPRISE
|
|
TEST(QueryPlan, RemoveLabelsFineGrainedFiltering) {
|
|
memgraph::utils::license::global_license_checker.EnableTesting();
|
|
auto remove_labels = [&](memgraph::auth::User user, memgraph::query::DbAccessor dba,
|
|
std::vector<memgraph::storage::LabelId> labels) {
|
|
auto v1 = dba.InsertVertex();
|
|
ASSERT_TRUE(v1.AddLabel(labels[0]).HasValue());
|
|
ASSERT_TRUE(v1.AddLabel(labels[1]).HasValue());
|
|
ASSERT_TRUE(v1.AddLabel(labels[2]).HasValue());
|
|
auto v2 = dba.InsertVertex();
|
|
ASSERT_TRUE(v2.AddLabel(labels[0]).HasValue());
|
|
ASSERT_TRUE(v2.AddLabel(labels[2]).HasValue());
|
|
dba.AdvanceCommand();
|
|
|
|
AstStorage storage;
|
|
SymbolTable symbol_table;
|
|
|
|
auto n = MakeScanAll(storage, symbol_table, "n");
|
|
auto label_remove = std::make_shared<plan::RemoveLabels>(
|
|
n.op_, n.sym_, std::vector<memgraph::storage::LabelId>{labels[0], labels[1]});
|
|
memgraph::glue::FineGrainedAuthChecker auth_checker{user, &dba};
|
|
|
|
auto context = MakeContextWithFineGrainedChecker(storage, symbol_table, &dba, &auth_checker);
|
|
|
|
PullAll(*label_remove, &context);
|
|
};
|
|
|
|
// All labels granted
|
|
{
|
|
memgraph::auth::User user{"test"};
|
|
user.fine_grained_access_handler().label_permissions().Grant("*",
|
|
memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
memgraph::storage::Storage db;
|
|
auto storage_dba = db.Access();
|
|
memgraph::query::DbAccessor dba(&storage_dba);
|
|
auto label1 = dba.NameToLabel("label1");
|
|
auto label2 = dba.NameToLabel("label2");
|
|
auto label3 = dba.NameToLabel("label3");
|
|
remove_labels(user, dba, std::vector<memgraph::storage::LabelId>{label1, label2, label3});
|
|
for (auto vertex : dba.Vertices(memgraph::storage::View::OLD)) {
|
|
EXPECT_EQ(1, vertex.Labels(memgraph::storage::View::NEW)->size());
|
|
EXPECT_FALSE(*vertex.HasLabel(memgraph::storage::View::NEW, label2));
|
|
EXPECT_TRUE(*vertex.HasLabel(memgraph::storage::View::NEW, label3));
|
|
}
|
|
}
|
|
|
|
// All labels denied
|
|
{
|
|
memgraph::auth::User user{"test"};
|
|
user.fine_grained_access_handler().label_permissions().Deny("*",
|
|
memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
memgraph::storage::Storage db;
|
|
auto storage_dba = db.Access();
|
|
memgraph::query::DbAccessor dba(&storage_dba);
|
|
auto label1 = dba.NameToLabel("label1");
|
|
auto label2 = dba.NameToLabel("label2");
|
|
auto label3 = dba.NameToLabel("label3");
|
|
ASSERT_THROW(remove_labels(user, dba, std::vector<memgraph::storage::LabelId>{label1, label2, label3}),
|
|
QueryRuntimeException);
|
|
}
|
|
|
|
// label2 denied
|
|
{
|
|
memgraph::auth::User user{"test"};
|
|
user.fine_grained_access_handler().label_permissions().Grant("label1",
|
|
memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
user.fine_grained_access_handler().label_permissions().Deny("label2",
|
|
memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
user.fine_grained_access_handler().label_permissions().Grant("label3",
|
|
memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
|
|
memgraph::storage::Storage db;
|
|
auto storage_dba = db.Access();
|
|
memgraph::query::DbAccessor dba(&storage_dba);
|
|
auto label1 = dba.NameToLabel("label1");
|
|
auto label2 = dba.NameToLabel("label2");
|
|
auto label3 = dba.NameToLabel("label3");
|
|
ASSERT_THROW(remove_labels(user, dba, std::vector<memgraph::storage::LabelId>{label1, label2, label3}),
|
|
QueryRuntimeException);
|
|
}
|
|
}
|
|
#endif
|
|
|
|
TEST(QueryPlan, NodeFilterSet) {
|
|
memgraph::storage::Storage db;
|
|
auto storage_dba = db.Access();
|
|
memgraph::query::DbAccessor dba(&storage_dba);
|
|
// Create a graph such that (v1 {prop: 42}) is connected to v2 and v3.
|
|
auto v1 = dba.InsertVertex();
|
|
auto prop = PROPERTY_PAIR("property");
|
|
ASSERT_TRUE(v1.SetProperty(prop.second, memgraph::storage::PropertyValue(42)).HasValue());
|
|
auto v2 = dba.InsertVertex();
|
|
auto v3 = dba.InsertVertex();
|
|
auto edge_type = dba.NameToEdgeType("Edge");
|
|
ASSERT_TRUE(dba.InsertEdge(&v1, &v2, edge_type).HasValue());
|
|
ASSERT_TRUE(dba.InsertEdge(&v1, &v3, edge_type).HasValue());
|
|
dba.AdvanceCommand();
|
|
// Create operations which match (v1 {prop: 42}) -- (v) and increment the
|
|
// v1.prop. The expected result is two incremenentations, since v1 is matched
|
|
// twice for 2 edges it has.
|
|
AstStorage storage;
|
|
SymbolTable symbol_table;
|
|
// MATCH (n {prop: 42}) -[r]- (m)
|
|
auto scan_all = MakeScanAll(storage, symbol_table, "n");
|
|
std::get<0>(scan_all.node_->properties_)[storage.GetPropertyIx(prop.first)] = LITERAL(42);
|
|
auto expand = MakeExpand(storage, symbol_table, scan_all.op_, scan_all.sym_, "r", EdgeAtom::Direction::BOTH, {}, "m",
|
|
false, memgraph::storage::View::OLD);
|
|
auto *filter_expr =
|
|
EQ(storage.Create<PropertyLookup>(scan_all.node_->identifier_, storage.GetPropertyIx(prop.first)), LITERAL(42));
|
|
auto node_filter = std::make_shared<Filter>(expand.op_, filter_expr);
|
|
// SET n.prop = n.prop + 1
|
|
auto set_prop = PROPERTY_LOOKUP(IDENT("n")->MapTo(scan_all.sym_), prop);
|
|
auto add = ADD(set_prop, LITERAL(1));
|
|
auto set = std::make_shared<plan::SetProperty>(node_filter, prop.second, set_prop, add);
|
|
auto context = MakeContext(storage, symbol_table, &dba);
|
|
EXPECT_EQ(2, PullAll(*set, &context));
|
|
dba.AdvanceCommand();
|
|
auto prop_eq = TypedValue(*v1.GetProperty(memgraph::storage::View::OLD, prop.second)) == TypedValue(42 + 2);
|
|
ASSERT_EQ(prop_eq.type(), TypedValue::Type::Bool);
|
|
EXPECT_TRUE(prop_eq.ValueBool());
|
|
}
|
|
|
|
TEST(QueryPlan, FilterRemove) {
|
|
memgraph::storage::Storage db;
|
|
auto storage_dba = db.Access();
|
|
memgraph::query::DbAccessor dba(&storage_dba);
|
|
// Create a graph such that (v1 {prop: 42}) is connected to v2 and v3.
|
|
auto v1 = dba.InsertVertex();
|
|
auto prop = PROPERTY_PAIR("property");
|
|
ASSERT_TRUE(v1.SetProperty(prop.second, memgraph::storage::PropertyValue(42)).HasValue());
|
|
auto v2 = dba.InsertVertex();
|
|
auto v3 = dba.InsertVertex();
|
|
auto edge_type = dba.NameToEdgeType("Edge");
|
|
ASSERT_TRUE(dba.InsertEdge(&v1, &v2, edge_type).HasValue());
|
|
ASSERT_TRUE(dba.InsertEdge(&v1, &v3, edge_type).HasValue());
|
|
dba.AdvanceCommand();
|
|
// Create operations which match (v1 {prop: 42}) -- (v) and remove v1.prop.
|
|
// The expected result is two matches, for each edge of v1.
|
|
AstStorage storage;
|
|
SymbolTable symbol_table;
|
|
// MATCH (n) -[r]- (m) WHERE n.prop < 43
|
|
auto scan_all = MakeScanAll(storage, symbol_table, "n");
|
|
std::get<0>(scan_all.node_->properties_)[storage.GetPropertyIx(prop.first)] = LITERAL(42);
|
|
auto expand = MakeExpand(storage, symbol_table, scan_all.op_, scan_all.sym_, "r", EdgeAtom::Direction::BOTH, {}, "m",
|
|
false, memgraph::storage::View::OLD);
|
|
auto filter_prop = PROPERTY_LOOKUP(IDENT("n")->MapTo(scan_all.sym_), prop);
|
|
auto filter = std::make_shared<Filter>(expand.op_, LESS(filter_prop, LITERAL(43)));
|
|
// REMOVE n.prop
|
|
auto rem_prop = PROPERTY_LOOKUP(IDENT("n")->MapTo(scan_all.sym_), prop);
|
|
auto rem = std::make_shared<plan::RemoveProperty>(filter, prop.second, rem_prop);
|
|
auto context = MakeContext(storage, symbol_table, &dba);
|
|
EXPECT_EQ(2, PullAll(*rem, &context));
|
|
dba.AdvanceCommand();
|
|
EXPECT_EQ(v1.GetProperty(memgraph::storage::View::OLD, prop.second)->type(),
|
|
memgraph::storage::PropertyValue::Type::Null);
|
|
}
|
|
|
|
TEST(QueryPlan, SetRemove) {
|
|
memgraph::storage::Storage db;
|
|
auto storage_dba = db.Access();
|
|
memgraph::query::DbAccessor dba(&storage_dba);
|
|
auto v = dba.InsertVertex();
|
|
auto label1 = dba.NameToLabel("label1");
|
|
auto label2 = dba.NameToLabel("label2");
|
|
dba.AdvanceCommand();
|
|
// Create operations which match (v) and set and remove v :label.
|
|
// The expected result is single (v) as it was at the start.
|
|
AstStorage storage;
|
|
SymbolTable symbol_table;
|
|
// MATCH (n) SET n :label1 :label2 REMOVE n :label1 :label2
|
|
auto scan_all = MakeScanAll(storage, symbol_table, "n");
|
|
auto set = std::make_shared<plan::SetLabels>(scan_all.op_, scan_all.sym_,
|
|
std::vector<memgraph::storage::LabelId>{label1, label2});
|
|
auto rem =
|
|
std::make_shared<plan::RemoveLabels>(set, scan_all.sym_, std::vector<memgraph::storage::LabelId>{label1, label2});
|
|
auto context = MakeContext(storage, symbol_table, &dba);
|
|
EXPECT_EQ(1, PullAll(*rem, &context));
|
|
dba.AdvanceCommand();
|
|
EXPECT_FALSE(*v.HasLabel(memgraph::storage::View::OLD, label1));
|
|
EXPECT_FALSE(*v.HasLabel(memgraph::storage::View::OLD, label2));
|
|
}
|
|
|
|
TEST(QueryPlan, Merge) {
|
|
// test setup:
|
|
// - three nodes, two of them connected with T
|
|
// - merge input branch matches all nodes
|
|
// - merge_match branch looks for an expansion (any direction)
|
|
// and sets some property (for result validation)
|
|
// - merge_create branch just sets some other property
|
|
memgraph::storage::Storage db;
|
|
auto storage_dba = db.Access();
|
|
memgraph::query::DbAccessor dba(&storage_dba);
|
|
auto v1 = dba.InsertVertex();
|
|
auto v2 = dba.InsertVertex();
|
|
ASSERT_TRUE(dba.InsertEdge(&v1, &v2, dba.NameToEdgeType("Type")).HasValue());
|
|
auto v3 = dba.InsertVertex();
|
|
dba.AdvanceCommand();
|
|
|
|
AstStorage storage;
|
|
SymbolTable symbol_table;
|
|
|
|
auto prop = PROPERTY_PAIR("property");
|
|
auto n = MakeScanAll(storage, symbol_table, "n");
|
|
|
|
// merge_match branch
|
|
auto r_m = MakeExpand(storage, symbol_table, std::make_shared<Once>(), n.sym_, "r", EdgeAtom::Direction::BOTH, {},
|
|
"m", false, memgraph::storage::View::OLD);
|
|
auto m_p = PROPERTY_LOOKUP(IDENT("m")->MapTo(r_m.node_sym_), prop);
|
|
auto m_set = std::make_shared<plan::SetProperty>(r_m.op_, prop.second, m_p, LITERAL(1));
|
|
|
|
// merge_create branch
|
|
auto n_p = PROPERTY_LOOKUP(IDENT("n")->MapTo(n.sym_), prop);
|
|
auto n_set = std::make_shared<plan::SetProperty>(std::make_shared<Once>(), prop.second, n_p, LITERAL(2));
|
|
|
|
auto merge = std::make_shared<plan::Merge>(n.op_, m_set, n_set);
|
|
auto context = MakeContext(storage, symbol_table, &dba);
|
|
ASSERT_EQ(3, PullAll(*merge, &context));
|
|
dba.AdvanceCommand();
|
|
|
|
ASSERT_EQ(v1.GetProperty(memgraph::storage::View::OLD, prop.second)->type(),
|
|
memgraph::storage::PropertyValue::Type::Int);
|
|
ASSERT_EQ(v1.GetProperty(memgraph::storage::View::OLD, prop.second)->ValueInt(), 1);
|
|
ASSERT_EQ(v2.GetProperty(memgraph::storage::View::OLD, prop.second)->type(),
|
|
memgraph::storage::PropertyValue::Type::Int);
|
|
ASSERT_EQ(v2.GetProperty(memgraph::storage::View::OLD, prop.second)->ValueInt(), 1);
|
|
ASSERT_EQ(v3.GetProperty(memgraph::storage::View::OLD, prop.second)->type(),
|
|
memgraph::storage::PropertyValue::Type::Int);
|
|
ASSERT_EQ(v3.GetProperty(memgraph::storage::View::OLD, prop.second)->ValueInt(), 2);
|
|
}
|
|
|
|
TEST(QueryPlan, MergeNoInput) {
|
|
// merge with no input, creates a single node
|
|
|
|
memgraph::storage::Storage db;
|
|
auto storage_dba = db.Access();
|
|
memgraph::query::DbAccessor dba(&storage_dba);
|
|
AstStorage storage;
|
|
SymbolTable symbol_table;
|
|
|
|
NodeCreationInfo node;
|
|
node.symbol = symbol_table.CreateSymbol("n", true);
|
|
auto create = std::make_shared<CreateNode>(nullptr, node);
|
|
auto merge = std::make_shared<plan::Merge>(nullptr, create, create);
|
|
|
|
EXPECT_EQ(0, CountIterable(dba.Vertices(memgraph::storage::View::OLD)));
|
|
auto context = MakeContext(storage, symbol_table, &dba);
|
|
EXPECT_EQ(1, PullAll(*merge, &context));
|
|
dba.AdvanceCommand();
|
|
EXPECT_EQ(1, CountIterable(dba.Vertices(memgraph::storage::View::OLD)));
|
|
}
|
|
|
|
TEST(QueryPlan, SetPropertyOnNull) {
|
|
// SET (Null).prop = 42
|
|
memgraph::storage::Storage db;
|
|
auto storage_dba = db.Access();
|
|
memgraph::query::DbAccessor dba(&storage_dba);
|
|
AstStorage storage;
|
|
SymbolTable symbol_table;
|
|
auto prop = PROPERTY_PAIR("property");
|
|
auto null = LITERAL(TypedValue());
|
|
auto literal = LITERAL(42);
|
|
auto n_prop = PROPERTY_LOOKUP(null, prop);
|
|
auto once = std::make_shared<Once>();
|
|
auto set_op = std::make_shared<plan::SetProperty>(once, prop.second, n_prop, literal);
|
|
auto context = MakeContext(storage, symbol_table, &dba);
|
|
EXPECT_EQ(1, PullAll(*set_op, &context));
|
|
}
|
|
|
|
TEST(QueryPlan, SetPropertiesOnNull) {
|
|
// OPTIONAL MATCH (n) SET n = n
|
|
memgraph::storage::Storage db;
|
|
auto storage_dba = db.Access();
|
|
memgraph::query::DbAccessor dba(&storage_dba);
|
|
AstStorage storage;
|
|
SymbolTable symbol_table;
|
|
auto n = MakeScanAll(storage, symbol_table, "n");
|
|
auto n_ident = IDENT("n")->MapTo(n.sym_);
|
|
auto optional = std::make_shared<plan::Optional>(nullptr, n.op_, std::vector<Symbol>{n.sym_});
|
|
auto set_op = std::make_shared<plan::SetProperties>(optional, n.sym_, n_ident, plan::SetProperties::Op::REPLACE);
|
|
EXPECT_EQ(0, CountIterable(dba.Vertices(memgraph::storage::View::OLD)));
|
|
auto context = MakeContext(storage, symbol_table, &dba);
|
|
EXPECT_EQ(1, PullAll(*set_op, &context));
|
|
}
|
|
|
|
TEST(QueryPlan, SetLabelsOnNull) {
|
|
// OPTIONAL MATCH (n) SET n :label
|
|
memgraph::storage::Storage db;
|
|
auto storage_dba = db.Access();
|
|
memgraph::query::DbAccessor dba(&storage_dba);
|
|
auto label = dba.NameToLabel("label");
|
|
AstStorage storage;
|
|
SymbolTable symbol_table;
|
|
auto n = MakeScanAll(storage, symbol_table, "n");
|
|
auto optional = std::make_shared<plan::Optional>(nullptr, n.op_, std::vector<Symbol>{n.sym_});
|
|
auto set_op = std::make_shared<plan::SetLabels>(optional, n.sym_, std::vector<memgraph::storage::LabelId>{label});
|
|
EXPECT_EQ(0, CountIterable(dba.Vertices(memgraph::storage::View::OLD)));
|
|
auto context = MakeContext(storage, symbol_table, &dba);
|
|
EXPECT_EQ(1, PullAll(*set_op, &context));
|
|
}
|
|
|
|
TEST(QueryPlan, RemovePropertyOnNull) {
|
|
// REMOVE (Null).prop
|
|
memgraph::storage::Storage db;
|
|
auto storage_dba = db.Access();
|
|
memgraph::query::DbAccessor dba(&storage_dba);
|
|
AstStorage storage;
|
|
SymbolTable symbol_table;
|
|
auto prop = PROPERTY_PAIR("property");
|
|
auto null = LITERAL(TypedValue());
|
|
auto n_prop = PROPERTY_LOOKUP(null, prop);
|
|
auto once = std::make_shared<Once>();
|
|
auto remove_op = std::make_shared<plan::RemoveProperty>(once, prop.second, n_prop);
|
|
auto context = MakeContext(storage, symbol_table, &dba);
|
|
EXPECT_EQ(1, PullAll(*remove_op, &context));
|
|
}
|
|
|
|
TEST(QueryPlan, RemoveLabelsOnNull) {
|
|
// OPTIONAL MATCH (n) REMOVE n :label
|
|
memgraph::storage::Storage db;
|
|
auto storage_dba = db.Access();
|
|
memgraph::query::DbAccessor dba(&storage_dba);
|
|
auto label = dba.NameToLabel("label");
|
|
AstStorage storage;
|
|
SymbolTable symbol_table;
|
|
auto n = MakeScanAll(storage, symbol_table, "n");
|
|
auto optional = std::make_shared<plan::Optional>(nullptr, n.op_, std::vector<Symbol>{n.sym_});
|
|
auto remove_op =
|
|
std::make_shared<plan::RemoveLabels>(optional, n.sym_, std::vector<memgraph::storage::LabelId>{label});
|
|
EXPECT_EQ(0, CountIterable(dba.Vertices(memgraph::storage::View::OLD)));
|
|
auto context = MakeContext(storage, symbol_table, &dba);
|
|
EXPECT_EQ(1, PullAll(*remove_op, &context));
|
|
}
|
|
|
|
TEST(QueryPlan, DeleteSetProperty) {
|
|
memgraph::storage::Storage db;
|
|
auto storage_dba = db.Access();
|
|
memgraph::query::DbAccessor dba(&storage_dba);
|
|
// Add a single vertex.
|
|
dba.InsertVertex();
|
|
dba.AdvanceCommand();
|
|
EXPECT_EQ(1, CountIterable(dba.Vertices(memgraph::storage::View::OLD)));
|
|
AstStorage storage;
|
|
SymbolTable symbol_table;
|
|
// MATCH (n) DELETE n SET n.property = 42
|
|
auto n = MakeScanAll(storage, symbol_table, "n");
|
|
auto n_get = storage.Create<Identifier>("n")->MapTo(n.sym_);
|
|
auto delete_op = std::make_shared<plan::Delete>(n.op_, std::vector<Expression *>{n_get}, false);
|
|
auto prop = PROPERTY_PAIR("property");
|
|
auto n_prop = PROPERTY_LOOKUP(IDENT("n")->MapTo(n.sym_), prop);
|
|
auto set_op = std::make_shared<plan::SetProperty>(delete_op, prop.second, n_prop, LITERAL(42));
|
|
auto context = MakeContext(storage, symbol_table, &dba);
|
|
EXPECT_THROW(PullAll(*set_op, &context), QueryRuntimeException);
|
|
}
|
|
|
|
TEST(QueryPlan, DeleteSetPropertiesFromMap) {
|
|
memgraph::storage::Storage db;
|
|
auto storage_dba = db.Access();
|
|
memgraph::query::DbAccessor dba(&storage_dba);
|
|
// Add a single vertex.
|
|
dba.InsertVertex();
|
|
dba.AdvanceCommand();
|
|
EXPECT_EQ(1, CountIterable(dba.Vertices(memgraph::storage::View::OLD)));
|
|
AstStorage storage;
|
|
SymbolTable symbol_table;
|
|
// MATCH (n) DELETE n SET n = {property: 42}
|
|
auto n = MakeScanAll(storage, symbol_table, "n");
|
|
auto n_get = storage.Create<Identifier>("n")->MapTo(n.sym_);
|
|
auto delete_op = std::make_shared<plan::Delete>(n.op_, std::vector<Expression *>{n_get}, false);
|
|
auto prop = PROPERTY_PAIR("property");
|
|
std::unordered_map<PropertyIx, Expression *> prop_map;
|
|
prop_map.emplace(storage.GetPropertyIx(prop.first), LITERAL(42));
|
|
auto *rhs = storage.Create<MapLiteral>(prop_map);
|
|
for (auto op_type : {plan::SetProperties::Op::REPLACE, plan::SetProperties::Op::UPDATE}) {
|
|
auto set_op = std::make_shared<plan::SetProperties>(delete_op, n.sym_, rhs, op_type);
|
|
auto context = MakeContext(storage, symbol_table, &dba);
|
|
EXPECT_THROW(PullAll(*set_op, &context), QueryRuntimeException);
|
|
}
|
|
}
|
|
|
|
TEST(QueryPlan, DeleteSetPropertiesFrom) {
|
|
memgraph::storage::Storage db;
|
|
auto storage_dba = db.Access();
|
|
memgraph::query::DbAccessor dba(&storage_dba);
|
|
// Add a single vertex.
|
|
{
|
|
auto v = dba.InsertVertex();
|
|
ASSERT_TRUE(v.SetProperty(dba.NameToProperty("property"), memgraph::storage::PropertyValue(1)).HasValue());
|
|
}
|
|
dba.AdvanceCommand();
|
|
EXPECT_EQ(1, CountIterable(dba.Vertices(memgraph::storage::View::OLD)));
|
|
AstStorage storage;
|
|
SymbolTable symbol_table;
|
|
// MATCH (n) DELETE n SET n = n
|
|
auto n = MakeScanAll(storage, symbol_table, "n");
|
|
auto n_get = storage.Create<Identifier>("n")->MapTo(n.sym_);
|
|
auto delete_op = std::make_shared<plan::Delete>(n.op_, std::vector<Expression *>{n_get}, false);
|
|
auto *rhs = IDENT("n")->MapTo(n.sym_);
|
|
for (auto op_type : {plan::SetProperties::Op::REPLACE, plan::SetProperties::Op::UPDATE}) {
|
|
auto set_op = std::make_shared<plan::SetProperties>(delete_op, n.sym_, rhs, op_type);
|
|
auto context = MakeContext(storage, symbol_table, &dba);
|
|
EXPECT_THROW(PullAll(*set_op, &context), QueryRuntimeException);
|
|
}
|
|
}
|
|
|
|
TEST(QueryPlan, DeleteRemoveLabels) {
|
|
memgraph::storage::Storage db;
|
|
auto storage_dba = db.Access();
|
|
memgraph::query::DbAccessor dba(&storage_dba);
|
|
// Add a single vertex.
|
|
dba.InsertVertex();
|
|
dba.AdvanceCommand();
|
|
EXPECT_EQ(1, CountIterable(dba.Vertices(memgraph::storage::View::OLD)));
|
|
AstStorage storage;
|
|
SymbolTable symbol_table;
|
|
// MATCH (n) DELETE n REMOVE n :label
|
|
auto n = MakeScanAll(storage, symbol_table, "n");
|
|
auto n_get = storage.Create<Identifier>("n")->MapTo(n.sym_);
|
|
auto delete_op = std::make_shared<plan::Delete>(n.op_, std::vector<Expression *>{n_get}, false);
|
|
std::vector<memgraph::storage::LabelId> labels{dba.NameToLabel("label")};
|
|
auto rem_op = std::make_shared<plan::RemoveLabels>(delete_op, n.sym_, labels);
|
|
auto context = MakeContext(storage, symbol_table, &dba);
|
|
EXPECT_THROW(PullAll(*rem_op, &context), QueryRuntimeException);
|
|
}
|
|
|
|
TEST(QueryPlan, DeleteRemoveProperty) {
|
|
memgraph::storage::Storage db;
|
|
auto storage_dba = db.Access();
|
|
memgraph::query::DbAccessor dba(&storage_dba);
|
|
// Add a single vertex.
|
|
dba.InsertVertex();
|
|
dba.AdvanceCommand();
|
|
EXPECT_EQ(1, CountIterable(dba.Vertices(memgraph::storage::View::OLD)));
|
|
AstStorage storage;
|
|
SymbolTable symbol_table;
|
|
// MATCH (n) DELETE n REMOVE n.property
|
|
auto n = MakeScanAll(storage, symbol_table, "n");
|
|
auto n_get = storage.Create<Identifier>("n")->MapTo(n.sym_);
|
|
auto delete_op = std::make_shared<plan::Delete>(n.op_, std::vector<Expression *>{n_get}, false);
|
|
auto prop = PROPERTY_PAIR("property");
|
|
auto n_prop = PROPERTY_LOOKUP(IDENT("n")->MapTo(n.sym_), prop);
|
|
auto rem_op = std::make_shared<plan::RemoveProperty>(delete_op, prop.second, n_prop);
|
|
auto context = MakeContext(storage, symbol_table, &dba);
|
|
EXPECT_THROW(PullAll(*rem_op, &context), QueryRuntimeException);
|
|
}
|
|
|
|
//////////////////////////////////////////////
|
|
//// FINE GRAINED AUTHORIZATION /////
|
|
//////////////////////////////////////////////
|
|
#ifdef MG_ENTERPRISE
|
|
class UpdatePropertiesWithAuthFixture : public testing::Test {
|
|
protected:
|
|
memgraph::storage::Storage db;
|
|
memgraph::storage::Storage::Accessor storage_dba{db.Access()};
|
|
memgraph::query::DbAccessor dba{&storage_dba};
|
|
AstStorage storage;
|
|
SymbolTable symbol_table;
|
|
|
|
const std::string vertex_label_name = "l1";
|
|
const memgraph::storage::LabelId vertex_label = dba.NameToLabel(vertex_label_name);
|
|
|
|
const std::string entity_prop_name = "prop";
|
|
const memgraph::storage::PropertyId entity_prop{dba.NameToProperty(entity_prop_name)};
|
|
const memgraph::storage::PropertyValue entity_prop_value{1};
|
|
|
|
const std::string label_name_1 = "l1";
|
|
const memgraph::storage::LabelId label_1{dba.NameToLabel(label_name_1)};
|
|
const std::string label_name_2 = "l1";
|
|
const memgraph::storage::LabelId label_2{dba.NameToLabel(label_name_2)};
|
|
|
|
const std::string edge_prop_name = "prop";
|
|
const memgraph::storage::PropertyId edge_prop{dba.NameToProperty(edge_prop_name)};
|
|
const memgraph::storage::PropertyValue edge_prop_value{1};
|
|
|
|
void SetUp() override { memgraph::utils::license::global_license_checker.EnableTesting(); }
|
|
|
|
void SetVertexProperty(memgraph::query::VertexAccessor vertex) {
|
|
static_cast<void>(vertex.SetProperty(entity_prop, entity_prop_value));
|
|
}
|
|
|
|
void SetEdgeProperty(memgraph::query::EdgeAccessor edge) {
|
|
static_cast<void>(edge.SetProperty(entity_prop, entity_prop_value));
|
|
}
|
|
|
|
void ExecuteSetPropertyOnVertex(memgraph::auth::User user, int new_property_value) {
|
|
// MATCH (n) SET n.prop = 2
|
|
auto scan_all = MakeScanAll(storage, symbol_table, "n");
|
|
|
|
auto literal = LITERAL(new_property_value);
|
|
auto n_p = PROPERTY_LOOKUP(IDENT("n")->MapTo(scan_all.sym_), entity_prop);
|
|
auto set_property = std::make_shared<plan::SetProperty>(scan_all.op_, entity_prop, n_p, literal);
|
|
|
|
// produce the node
|
|
auto output =
|
|
NEXPR("n", IDENT("n")->MapTo(scan_all.sym_))->MapTo(symbol_table.CreateSymbol("named_expression_1", true));
|
|
auto produce = MakeProduce(set_property, output);
|
|
|
|
memgraph::glue::FineGrainedAuthChecker auth_checker{user, &dba};
|
|
auto context = MakeContextWithFineGrainedChecker(storage, symbol_table, &dba, &auth_checker);
|
|
|
|
PullAll(*produce, &context);
|
|
dba.AdvanceCommand();
|
|
};
|
|
|
|
void ExecuteSetPropertyOnEdge(memgraph::auth::User user, int new_property_value) {
|
|
// MATCH (n)-[r]->(m) SET r.prop = 2
|
|
auto scan_all = MakeScanAll(storage, symbol_table, "n");
|
|
auto expand = MakeExpand(storage, symbol_table, scan_all.op_, scan_all.sym_, "r", EdgeAtom::Direction::OUT, {}, "m",
|
|
false, memgraph::storage::View::OLD);
|
|
// set property to 2 on n
|
|
auto literal = LITERAL(new_property_value);
|
|
auto n_p = PROPERTY_LOOKUP(IDENT("r")->MapTo(expand.edge_sym_), entity_prop);
|
|
auto set_property = std::make_shared<plan::SetProperty>(expand.op_, entity_prop, n_p, literal);
|
|
|
|
memgraph::glue::FineGrainedAuthChecker auth_checker{user, &dba};
|
|
auto context = MakeContextWithFineGrainedChecker(storage, symbol_table, &dba, &auth_checker);
|
|
|
|
PullAll(*set_property, &context);
|
|
dba.AdvanceCommand();
|
|
};
|
|
|
|
void ExecuteSetPropertiesOnVertex(memgraph::auth::User user, int new_property_value) {
|
|
// MATCH (n) SET n = {prop: 2};
|
|
auto scan_all = MakeScanAll(storage, symbol_table, "n");
|
|
|
|
auto prop = PROPERTY_PAIR(entity_prop_name);
|
|
std::unordered_map<PropertyIx, Expression *> prop_map;
|
|
prop_map.emplace(storage.GetPropertyIx(prop.first), LITERAL(new_property_value));
|
|
auto *rhs = storage.Create<MapLiteral>(prop_map);
|
|
auto set_properties =
|
|
std::make_shared<plan::SetProperties>(scan_all.op_, scan_all.sym_, rhs, plan::SetProperties::Op::UPDATE);
|
|
|
|
auto output =
|
|
NEXPR("n", IDENT("n")->MapTo(scan_all.sym_))->MapTo(symbol_table.CreateSymbol("named_expression_1", true));
|
|
auto produce = MakeProduce(set_properties, output);
|
|
|
|
memgraph::glue::FineGrainedAuthChecker auth_checker{user, &dba};
|
|
auto context = MakeContextWithFineGrainedChecker(storage, symbol_table, &dba, &auth_checker);
|
|
|
|
PullAll(*produce, &context);
|
|
dba.AdvanceCommand();
|
|
};
|
|
|
|
void ExecuteSetPropertiesOnEdge(memgraph::auth::User user, int new_property_value) {
|
|
// MATCH (n)-[r]->(m) SET r = {prop: 2};
|
|
auto scan_all = MakeScanAll(storage, symbol_table, "n");
|
|
auto expand = MakeExpand(storage, symbol_table, scan_all.op_, scan_all.sym_, "r", EdgeAtom::Direction::OUT, {}, "m",
|
|
false, memgraph::storage::View::OLD);
|
|
|
|
auto prop = PROPERTY_PAIR(entity_prop_name);
|
|
std::unordered_map<PropertyIx, Expression *> prop_map;
|
|
prop_map.emplace(storage.GetPropertyIx(prop.first), LITERAL(new_property_value));
|
|
auto *rhs = storage.Create<MapLiteral>(prop_map);
|
|
auto set_properties =
|
|
std::make_shared<plan::SetProperties>(expand.op_, expand.edge_sym_, rhs, plan::SetProperties::Op::UPDATE);
|
|
|
|
auto output =
|
|
NEXPR("n", IDENT("n")->MapTo(scan_all.sym_))->MapTo(symbol_table.CreateSymbol("named_expression_1", true));
|
|
auto produce = MakeProduce(set_properties, output);
|
|
|
|
memgraph::glue::FineGrainedAuthChecker auth_checker{user, &dba};
|
|
auto context = MakeContextWithFineGrainedChecker(storage, symbol_table, &dba, &auth_checker);
|
|
|
|
PullAll(*produce, &context);
|
|
dba.AdvanceCommand();
|
|
};
|
|
|
|
void ExecuteRemovePropertyOnVertex(memgraph::auth::User user) {
|
|
// MATCH (n) REMOVE n.prop
|
|
auto scan_all = MakeScanAll(storage, symbol_table, "n");
|
|
|
|
auto n_p = PROPERTY_LOOKUP(IDENT("n")->MapTo(scan_all.sym_), entity_prop);
|
|
auto remove_property = std::make_shared<plan::RemoveProperty>(scan_all.op_, entity_prop, n_p);
|
|
|
|
// produce the node
|
|
auto output =
|
|
NEXPR("n", IDENT("n")->MapTo(scan_all.sym_))->MapTo(symbol_table.CreateSymbol("named_expression_1", true));
|
|
auto produce = MakeProduce(remove_property, output);
|
|
|
|
memgraph::glue::FineGrainedAuthChecker auth_checker{user, &dba};
|
|
auto context = MakeContextWithFineGrainedChecker(storage, symbol_table, &dba, &auth_checker);
|
|
|
|
PullAll(*produce, &context);
|
|
dba.AdvanceCommand();
|
|
};
|
|
|
|
void ExecuteRemovePropertyOnEdge(memgraph::auth::User user) {
|
|
// MATCH (n)-[r]->(m) REMOVE r.prop
|
|
auto scan_all = MakeScanAll(storage, symbol_table, "n");
|
|
auto expand = MakeExpand(storage, symbol_table, scan_all.op_, scan_all.sym_, "r", EdgeAtom::Direction::OUT, {}, "m",
|
|
false, memgraph::storage::View::OLD);
|
|
// set property to 2 on n
|
|
auto n_p = PROPERTY_LOOKUP(IDENT("n")->MapTo(expand.edge_sym_), entity_prop);
|
|
auto remove_property = std::make_shared<plan::RemoveProperty>(expand.op_, entity_prop, n_p);
|
|
|
|
memgraph::glue::FineGrainedAuthChecker auth_checker{user, &dba};
|
|
auto context = MakeContextWithFineGrainedChecker(storage, symbol_table, &dba, &auth_checker);
|
|
|
|
PullAll(*remove_property, &context);
|
|
dba.AdvanceCommand();
|
|
};
|
|
};
|
|
|
|
TEST_F(UpdatePropertiesWithAuthFixture, SetPropertyWithAuthChecker) {
|
|
// Add a single vertex
|
|
auto v = dba.InsertVertex();
|
|
ASSERT_TRUE(v.AddLabel(vertex_label).HasValue());
|
|
ASSERT_TRUE(v.SetProperty(entity_prop, entity_prop_value).HasValue());
|
|
dba.AdvanceCommand();
|
|
|
|
EXPECT_EQ(1, CountIterable(dba.Vertices(memgraph::storage::View::OLD)));
|
|
|
|
auto test_hypothesis = [&](int expected_property_value) {
|
|
auto vertex = *dba.Vertices(memgraph::storage::View::NEW).begin();
|
|
auto maybe_properties = vertex.Properties(memgraph::storage::View::NEW);
|
|
ASSERT_TRUE(maybe_properties.HasValue());
|
|
const auto &properties = *maybe_properties;
|
|
EXPECT_EQ(properties.size(), 1);
|
|
auto maybe_prop = vertex.GetProperty(memgraph::storage::View::NEW, entity_prop);
|
|
ASSERT_TRUE(maybe_prop.HasValue());
|
|
ASSERT_EQ(maybe_prop->ValueInt(), expected_property_value);
|
|
};
|
|
|
|
auto test_remove_hypothesis = [&](int properties_size) {
|
|
auto vertex = *dba.Vertices(memgraph::storage::View::NEW).begin();
|
|
auto maybe_properties = vertex.Properties(memgraph::storage::View::NEW);
|
|
ASSERT_TRUE(maybe_properties.HasValue());
|
|
const auto &properties = *maybe_properties;
|
|
EXPECT_EQ(properties.size(), properties_size);
|
|
};
|
|
|
|
{
|
|
auto user = memgraph::auth::User{"denied_global"};
|
|
|
|
user.fine_grained_access_handler().label_permissions().Deny("*", memgraph::auth::FineGrainedPermission::READ);
|
|
|
|
SetVertexProperty(v);
|
|
ExecuteSetPropertyOnVertex(user, 2);
|
|
test_hypothesis(1);
|
|
|
|
SetVertexProperty(v);
|
|
ExecuteSetPropertiesOnVertex(user, 2);
|
|
test_hypothesis(1);
|
|
|
|
SetVertexProperty(v);
|
|
ExecuteRemovePropertyOnVertex(user);
|
|
test_remove_hypothesis(1);
|
|
}
|
|
|
|
{
|
|
auto user = memgraph::auth::User{"denied_label"};
|
|
|
|
user.fine_grained_access_handler().label_permissions().Deny(vertex_label_name,
|
|
memgraph::auth::FineGrainedPermission::READ);
|
|
|
|
SetVertexProperty(v);
|
|
ExecuteSetPropertyOnVertex(user, 2);
|
|
test_hypothesis(1);
|
|
|
|
SetVertexProperty(v);
|
|
ExecuteSetPropertiesOnVertex(user, 2);
|
|
test_hypothesis(1);
|
|
|
|
SetVertexProperty(v);
|
|
ExecuteRemovePropertyOnVertex(user);
|
|
test_remove_hypothesis(1);
|
|
}
|
|
|
|
{
|
|
auto user = memgraph::auth::User{"granted_global"};
|
|
|
|
user.fine_grained_access_handler().label_permissions().Grant("*", memgraph::auth::FineGrainedPermission::UPDATE);
|
|
|
|
SetVertexProperty(v);
|
|
ExecuteSetPropertyOnVertex(user, 2);
|
|
test_hypothesis(2);
|
|
|
|
SetVertexProperty(v);
|
|
ExecuteSetPropertiesOnVertex(user, 2);
|
|
test_hypothesis(2);
|
|
|
|
SetVertexProperty(v);
|
|
ExecuteRemovePropertyOnVertex(user);
|
|
test_remove_hypothesis(0);
|
|
}
|
|
|
|
{
|
|
auto user = memgraph::auth::User{"granted_label"};
|
|
|
|
user.fine_grained_access_handler().label_permissions().Grant(vertex_label_name,
|
|
memgraph::auth::FineGrainedPermission::UPDATE);
|
|
|
|
SetVertexProperty(v);
|
|
ExecuteSetPropertyOnVertex(user, 2);
|
|
test_hypothesis(2);
|
|
|
|
SetVertexProperty(v);
|
|
ExecuteSetPropertiesOnVertex(user, 2);
|
|
test_hypothesis(2);
|
|
|
|
SetVertexProperty(v);
|
|
ExecuteRemovePropertyOnVertex(user);
|
|
test_remove_hypothesis(0);
|
|
}
|
|
|
|
{
|
|
auto user = memgraph::auth::User{"granted_read_label"};
|
|
|
|
user.fine_grained_access_handler().label_permissions().Grant(vertex_label_name,
|
|
memgraph::auth::FineGrainedPermission::READ);
|
|
|
|
SetVertexProperty(v);
|
|
ASSERT_THROW(ExecuteSetPropertyOnVertex(user, 2), QueryRuntimeException);
|
|
test_hypothesis(1);
|
|
|
|
SetVertexProperty(v);
|
|
ASSERT_THROW(ExecuteSetPropertiesOnVertex(user, 2), QueryRuntimeException);
|
|
test_hypothesis(1);
|
|
|
|
SetVertexProperty(v);
|
|
ASSERT_THROW(ExecuteRemovePropertyOnVertex(user), QueryRuntimeException);
|
|
test_remove_hypothesis(1);
|
|
}
|
|
|
|
{
|
|
auto user = memgraph::auth::User{"granted_read_global"};
|
|
|
|
user.fine_grained_access_handler().label_permissions().Grant("*", memgraph::auth::FineGrainedPermission::READ);
|
|
|
|
SetVertexProperty(v);
|
|
ASSERT_THROW(ExecuteSetPropertyOnVertex(user, 2), QueryRuntimeException);
|
|
test_hypothesis(1);
|
|
|
|
SetVertexProperty(v);
|
|
ASSERT_THROW(ExecuteSetPropertiesOnVertex(user, 2), QueryRuntimeException);
|
|
test_hypothesis(1);
|
|
|
|
SetVertexProperty(v);
|
|
ASSERT_THROW(ExecuteRemovePropertyOnVertex(user), QueryRuntimeException);
|
|
test_remove_hypothesis(1);
|
|
}
|
|
|
|
{
|
|
auto user = memgraph::auth::User{"granted_update_label_denied_read_global"};
|
|
|
|
user.fine_grained_access_handler().label_permissions().Grant(vertex_label_name,
|
|
memgraph::auth::FineGrainedPermission::UPDATE);
|
|
user.fine_grained_access_handler().label_permissions().Deny("*", memgraph::auth::FineGrainedPermission::READ);
|
|
|
|
SetVertexProperty(v);
|
|
ExecuteSetPropertyOnVertex(user, 2);
|
|
test_hypothesis(2);
|
|
|
|
SetVertexProperty(v);
|
|
ExecuteSetPropertiesOnVertex(user, 2);
|
|
test_hypothesis(2);
|
|
|
|
SetVertexProperty(v);
|
|
ExecuteRemovePropertyOnVertex(user);
|
|
test_remove_hypothesis(0);
|
|
}
|
|
|
|
{
|
|
auto user = memgraph::auth::User{"granted_update_global_denied_read_label"};
|
|
|
|
user.fine_grained_access_handler().label_permissions().Deny(vertex_label_name,
|
|
memgraph::auth::FineGrainedPermission::READ);
|
|
user.fine_grained_access_handler().label_permissions().Grant("*", memgraph::auth::FineGrainedPermission::UPDATE);
|
|
|
|
SetVertexProperty(v);
|
|
ExecuteSetPropertyOnVertex(user, 2);
|
|
test_hypothesis(1);
|
|
|
|
SetVertexProperty(v);
|
|
ExecuteSetPropertiesOnVertex(user, 2);
|
|
test_hypothesis(1);
|
|
|
|
SetVertexProperty(v);
|
|
ExecuteRemovePropertyOnVertex(user);
|
|
test_remove_hypothesis(1);
|
|
}
|
|
|
|
{
|
|
auto user = memgraph::auth::User{"granted_create_delete_label_denied_read_global"};
|
|
|
|
user.fine_grained_access_handler().label_permissions().Grant(vertex_label_name,
|
|
memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
user.fine_grained_access_handler().label_permissions().Deny("*", memgraph::auth::FineGrainedPermission::READ);
|
|
|
|
SetVertexProperty(v);
|
|
ExecuteSetPropertyOnVertex(user, 2);
|
|
test_hypothesis(2);
|
|
|
|
SetVertexProperty(v);
|
|
ExecuteSetPropertiesOnVertex(user, 2);
|
|
test_hypothesis(2);
|
|
|
|
SetVertexProperty(v);
|
|
ExecuteRemovePropertyOnVertex(user);
|
|
test_remove_hypothesis(0);
|
|
}
|
|
|
|
{
|
|
auto user = memgraph::auth::User{"granted_create_delete_global_denied_read_label"};
|
|
|
|
user.fine_grained_access_handler().label_permissions().Deny(vertex_label_name,
|
|
memgraph::auth::FineGrainedPermission::READ);
|
|
user.fine_grained_access_handler().label_permissions().Grant("*",
|
|
memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
|
|
SetVertexProperty(v);
|
|
ExecuteSetPropertyOnVertex(user, 2);
|
|
test_hypothesis(1);
|
|
|
|
SetVertexProperty(v);
|
|
ExecuteSetPropertiesOnVertex(user, 2);
|
|
test_hypothesis(1);
|
|
|
|
SetVertexProperty(v);
|
|
ExecuteRemovePropertyOnVertex(user);
|
|
test_remove_hypothesis(1);
|
|
}
|
|
}
|
|
|
|
TEST_F(UpdatePropertiesWithAuthFixture, SetPropertyExpandWithAuthChecker) {
|
|
// Add a single vertex
|
|
auto v1 = dba.InsertVertex();
|
|
ASSERT_TRUE(v1.AddLabel(label_1).HasValue());
|
|
|
|
auto v2 = dba.InsertVertex();
|
|
ASSERT_TRUE(v2.AddLabel(label_2).HasValue());
|
|
|
|
auto edge_type_name = "edge_type";
|
|
auto edge_type_id = dba.NameToEdgeType(edge_type_name);
|
|
auto edge = dba.InsertEdge(&v1, &v2, edge_type_id);
|
|
ASSERT_TRUE(edge.HasValue());
|
|
ASSERT_TRUE(edge->SetProperty(entity_prop, entity_prop_value).HasValue());
|
|
dba.AdvanceCommand();
|
|
|
|
EXPECT_EQ(2, CountIterable(dba.Vertices(memgraph::storage::View::OLD)));
|
|
|
|
auto test_hypothesis = [&](int expected_property_value) {
|
|
for (auto vertex : dba.Vertices(memgraph::storage::View::NEW)) {
|
|
if (vertex.OutEdges(memgraph::storage::View::NEW).HasValue()) {
|
|
auto maybe_edges = vertex.OutEdges(memgraph::storage::View::NEW);
|
|
for (auto edge : *maybe_edges) {
|
|
EXPECT_EQ(edge.EdgeType(), edge_type_id);
|
|
auto maybe_properties = edge.Properties(memgraph::storage::View::NEW);
|
|
ASSERT_TRUE(maybe_properties.HasValue());
|
|
const auto &properties = *maybe_properties;
|
|
EXPECT_EQ(properties.size(), 1);
|
|
auto maybe_prop = edge.GetProperty(memgraph::storage::View::NEW, entity_prop);
|
|
ASSERT_TRUE(maybe_prop.HasValue());
|
|
ASSERT_EQ(maybe_prop->ValueInt(), expected_property_value);
|
|
}
|
|
}
|
|
}
|
|
};
|
|
|
|
auto test_remove_hypothesis = [&](int properties_size) {
|
|
for (auto vertex : dba.Vertices(memgraph::storage::View::NEW)) {
|
|
if (vertex.OutEdges(memgraph::storage::View::NEW).HasValue()) {
|
|
auto maybe_edges = vertex.OutEdges(memgraph::storage::View::NEW);
|
|
for (auto edge : *maybe_edges) {
|
|
EXPECT_EQ(edge.EdgeType(), edge_type_id);
|
|
auto maybe_properties = edge.Properties(memgraph::storage::View::NEW);
|
|
ASSERT_TRUE(maybe_properties.HasValue());
|
|
const auto &properties = *maybe_properties;
|
|
EXPECT_EQ(properties.size(), properties_size);
|
|
}
|
|
}
|
|
}
|
|
};
|
|
|
|
{
|
|
auto user = memgraph::auth::User{"denied_global"};
|
|
|
|
user.fine_grained_access_handler().label_permissions().Grant("*", memgraph::auth::FineGrainedPermission::READ);
|
|
user.fine_grained_access_handler().edge_type_permissions().Deny("*", memgraph::auth::FineGrainedPermission::READ);
|
|
|
|
SetEdgeProperty(edge.GetValue());
|
|
ExecuteSetPropertyOnEdge(user, 2);
|
|
test_hypothesis(1);
|
|
|
|
SetEdgeProperty(edge.GetValue());
|
|
ExecuteSetPropertiesOnEdge(user, 2);
|
|
test_hypothesis(1);
|
|
|
|
SetEdgeProperty(edge.GetValue());
|
|
ExecuteRemovePropertyOnEdge(user);
|
|
test_remove_hypothesis(1);
|
|
}
|
|
|
|
{
|
|
auto user = memgraph::auth::User{"denied_edge_type"};
|
|
|
|
user.fine_grained_access_handler().label_permissions().Grant("*", memgraph::auth::FineGrainedPermission::READ);
|
|
user.fine_grained_access_handler().edge_type_permissions().Deny(edge_type_name,
|
|
memgraph::auth::FineGrainedPermission::READ);
|
|
|
|
SetEdgeProperty(edge.GetValue());
|
|
ExecuteSetPropertyOnEdge(user, 2);
|
|
test_hypothesis(1);
|
|
|
|
SetEdgeProperty(edge.GetValue());
|
|
ExecuteSetPropertiesOnEdge(user, 2);
|
|
test_hypothesis(1);
|
|
|
|
SetEdgeProperty(edge.GetValue());
|
|
ExecuteRemovePropertyOnEdge(user);
|
|
test_remove_hypothesis(1);
|
|
}
|
|
|
|
{
|
|
auto user = memgraph::auth::User{"granted_global"};
|
|
|
|
user.fine_grained_access_handler().label_permissions().Grant("*", memgraph::auth::FineGrainedPermission::READ);
|
|
user.fine_grained_access_handler().edge_type_permissions().Grant("*",
|
|
memgraph::auth::FineGrainedPermission::UPDATE);
|
|
|
|
SetEdgeProperty(edge.GetValue());
|
|
ExecuteSetPropertyOnEdge(user, 2);
|
|
test_hypothesis(2);
|
|
|
|
SetEdgeProperty(edge.GetValue());
|
|
ExecuteSetPropertiesOnEdge(user, 2);
|
|
test_hypothesis(2);
|
|
|
|
SetEdgeProperty(edge.GetValue());
|
|
ExecuteRemovePropertyOnEdge(user);
|
|
test_remove_hypothesis(0);
|
|
}
|
|
|
|
{
|
|
auto user = memgraph::auth::User{"granted_edge_type"};
|
|
|
|
user.fine_grained_access_handler().label_permissions().Grant("*", memgraph::auth::FineGrainedPermission::READ);
|
|
user.fine_grained_access_handler().edge_type_permissions().Grant(edge_type_name,
|
|
memgraph::auth::FineGrainedPermission::UPDATE);
|
|
|
|
SetEdgeProperty(edge.GetValue());
|
|
ExecuteSetPropertyOnEdge(user, 2);
|
|
test_hypothesis(2);
|
|
|
|
SetEdgeProperty(edge.GetValue());
|
|
ExecuteSetPropertiesOnEdge(user, 2);
|
|
test_hypothesis(2);
|
|
|
|
SetEdgeProperty(edge.GetValue());
|
|
ExecuteRemovePropertyOnEdge(user);
|
|
test_remove_hypothesis(0);
|
|
}
|
|
|
|
{
|
|
auto user = memgraph::auth::User{"granted_update_edge_type_denied_read_global"};
|
|
|
|
user.fine_grained_access_handler().label_permissions().Grant("*", memgraph::auth::FineGrainedPermission::READ);
|
|
user.fine_grained_access_handler().edge_type_permissions().Grant(edge_type_name,
|
|
memgraph::auth::FineGrainedPermission::UPDATE);
|
|
user.fine_grained_access_handler().edge_type_permissions().Deny("*", memgraph::auth::FineGrainedPermission::READ);
|
|
|
|
SetEdgeProperty(edge.GetValue());
|
|
ExecuteSetPropertyOnEdge(user, 2);
|
|
test_hypothesis(2);
|
|
|
|
SetEdgeProperty(edge.GetValue());
|
|
ExecuteSetPropertiesOnEdge(user, 2);
|
|
test_hypothesis(2);
|
|
|
|
SetEdgeProperty(edge.GetValue());
|
|
ExecuteRemovePropertyOnEdge(user);
|
|
test_remove_hypothesis(0);
|
|
}
|
|
|
|
{
|
|
auto user = memgraph::auth::User{"granted_read_edge_type"};
|
|
|
|
user.fine_grained_access_handler().label_permissions().Grant("*", memgraph::auth::FineGrainedPermission::READ);
|
|
user.fine_grained_access_handler().edge_type_permissions().Grant(edge_type_name,
|
|
memgraph::auth::FineGrainedPermission::READ);
|
|
|
|
SetEdgeProperty(edge.GetValue());
|
|
ASSERT_THROW(ExecuteSetPropertyOnEdge(user, 2), QueryRuntimeException);
|
|
test_hypothesis(1);
|
|
|
|
SetEdgeProperty(edge.GetValue());
|
|
ASSERT_THROW(ExecuteSetPropertiesOnEdge(user, 2), QueryRuntimeException);
|
|
test_hypothesis(1);
|
|
|
|
SetEdgeProperty(edge.GetValue());
|
|
ASSERT_THROW(ExecuteRemovePropertyOnEdge(user), QueryRuntimeException);
|
|
test_remove_hypothesis(1);
|
|
}
|
|
|
|
{
|
|
auto user = memgraph::auth::User{"granted_read_global"};
|
|
|
|
user.fine_grained_access_handler().label_permissions().Grant("*", memgraph::auth::FineGrainedPermission::READ);
|
|
user.fine_grained_access_handler().edge_type_permissions().Grant("*", memgraph::auth::FineGrainedPermission::READ);
|
|
|
|
SetEdgeProperty(edge.GetValue());
|
|
ASSERT_THROW(ExecuteSetPropertyOnEdge(user, 2), QueryRuntimeException);
|
|
test_hypothesis(1);
|
|
|
|
SetEdgeProperty(edge.GetValue());
|
|
ASSERT_THROW(ExecuteSetPropertiesOnEdge(user, 2), QueryRuntimeException);
|
|
test_hypothesis(1);
|
|
|
|
SetEdgeProperty(edge.GetValue());
|
|
ASSERT_THROW(ExecuteRemovePropertyOnEdge(user), QueryRuntimeException);
|
|
test_remove_hypothesis(1);
|
|
}
|
|
|
|
{
|
|
auto user = memgraph::auth::User{"granted_update_global_denied_read_edge_type"};
|
|
|
|
user.fine_grained_access_handler().label_permissions().Grant("*", memgraph::auth::FineGrainedPermission::READ);
|
|
user.fine_grained_access_handler().edge_type_permissions().Deny(edge_type_name,
|
|
memgraph::auth::FineGrainedPermission::READ);
|
|
user.fine_grained_access_handler().edge_type_permissions().Grant("*",
|
|
memgraph::auth::FineGrainedPermission::UPDATE);
|
|
|
|
SetEdgeProperty(edge.GetValue());
|
|
ExecuteSetPropertyOnEdge(user, 2);
|
|
test_hypothesis(1);
|
|
|
|
SetEdgeProperty(edge.GetValue());
|
|
ExecuteSetPropertiesOnEdge(user, 2);
|
|
test_hypothesis(1);
|
|
|
|
SetEdgeProperty(edge.GetValue());
|
|
ExecuteRemovePropertyOnEdge(user);
|
|
test_remove_hypothesis(1);
|
|
}
|
|
|
|
{
|
|
auto user = memgraph::auth::User{"granted_create_delete_edge_type_denied_read_global"};
|
|
|
|
user.fine_grained_access_handler().label_permissions().Grant("*", memgraph::auth::FineGrainedPermission::READ);
|
|
user.fine_grained_access_handler().edge_type_permissions().Grant(
|
|
edge_type_name, memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
user.fine_grained_access_handler().edge_type_permissions().Deny("*", memgraph::auth::FineGrainedPermission::READ);
|
|
|
|
SetEdgeProperty(edge.GetValue());
|
|
ExecuteSetPropertyOnEdge(user, 2);
|
|
test_hypothesis(2);
|
|
|
|
SetEdgeProperty(edge.GetValue());
|
|
ExecuteSetPropertiesOnEdge(user, 2);
|
|
test_hypothesis(2);
|
|
|
|
SetEdgeProperty(edge.GetValue());
|
|
ExecuteRemovePropertyOnEdge(user);
|
|
test_remove_hypothesis(0);
|
|
}
|
|
|
|
{
|
|
auto user = memgraph::auth::User{"granted_create_delete_global_denied_read_edge_type"};
|
|
|
|
user.fine_grained_access_handler().label_permissions().Grant("*", memgraph::auth::FineGrainedPermission::READ);
|
|
user.fine_grained_access_handler().edge_type_permissions().Deny(edge_type_name,
|
|
memgraph::auth::FineGrainedPermission::READ);
|
|
user.fine_grained_access_handler().edge_type_permissions().Grant(
|
|
"*", memgraph::auth::FineGrainedPermission::CREATE_DELETE);
|
|
|
|
SetEdgeProperty(edge.GetValue());
|
|
ExecuteSetPropertyOnEdge(user, 2);
|
|
test_hypothesis(1);
|
|
|
|
SetEdgeProperty(edge.GetValue());
|
|
ExecuteSetPropertiesOnEdge(user, 2);
|
|
test_hypothesis(1);
|
|
|
|
SetEdgeProperty(edge.GetValue());
|
|
ExecuteRemovePropertyOnEdge(user);
|
|
test_remove_hypothesis(1);
|
|
}
|
|
}
|
|
#endif
|