227
227
acl = '%s:%s' % (identity['tenant'][0], identity['user'])
228
228
self._check_authenticate(identity=identity, acl=acl)
230
def test_authorize_succeeds_for_wildcard_tenant_user_in_roles(self):
231
identity = self._get_identity()
232
acl = '*:%s' % (identity['user'])
233
self._check_authenticate(identity=identity, acl=acl)
235
def test_cross_tenant_authorization_success(self):
236
self.assertTrue(self.test_auth._authorize_cross_tenant('userA',
237
'tenantID', 'tenantNAME', ['tenantID:userA']))
238
self.assertTrue(self.test_auth._authorize_cross_tenant('userA',
239
'tenantID', 'tenantNAME', ['tenantNAME:userA']))
240
self.assertTrue(self.test_auth._authorize_cross_tenant('userA',
241
'tenantID', 'tenantNAME', ['*:userA']))
243
def test_cross_tenant_authorization_failure(self):
244
self.assertFalse(self.test_auth._authorize_cross_tenant('userA',
245
'tenantID', 'tenantNAME', ['tenantXYZ:userA']))
230
248
if __name__ == '__main__':