entitlement/opensso/RealmRemovedTest.java

	RealmRemovedTest.java revision 4505caaaadb03cc04b4ecb08d728ddcbf690b9e4
/**
 * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
 *
 * Copyright (c) 2010 Sun Microsystems Inc. All Rights Reserved
 *
 * The contents of this file are subject to the terms
 * of the Common Development and Distribution License
 * (the License). You may not use this file except in
 * compliance with the License.
 *
 * You can obtain a copy of the License at
 * https://opensso.dev.java.net/public/CDDLv1.0.html or
 * opensso/legal/CDDLv1.0.txt
 * See the License for the specific language governing
 * permission and limitations under the License.
 *
 * When distributing Covered Code, include this CDDL
 * Header Notice in each file and include the License file
 * at opensso/legal/CDDLv1.0.txt.
 * If applicable, add the following below the CDDL Header,
 * with the fields enclosed by brackets [] replaced by
 * your own identifying information:
 * "Portions Copyrighted [year] [name of copyright owner]"
 *
 * $Id: RealmRemovedTest.java,v 1.1 2010/01/11 20:15:45 veiming Exp $
 *
 * Portions Copyrighted 2014-2015 ForgeRock AS.
 */

package com.sun.identity.entitlement.opensso;

import com.sun.identity.entitlement.*;
import com.iplanet.sso.SSOToken;
import com.sun.identity.security.AdminTokenAction;
import com.sun.identity.sm.OrganizationConfigManager;
import java.security.AccessController;
import java.util.Collections;
import java.util.HashMap;
import java.util.HashSet;
import java.util.Map;
import java.util.Set;
import javax.security.auth.Subject;
import org.testng.annotations.AfterClass;
import org.testng.annotations.BeforeClass;
import org.testng.annotations.Test;

/**
 *
 * @author dennis
 */
public class RealmRemovedTest {
    private static final String REFERRAL_NAME1 = "RealmRemovedTestReferralP1";
    private static final String REFERRAL_NAME2 = "RealmRemovedTestReferralP2";
    private static final String APP_PRIVILEGE_NAME =
        "RealmRemovedTestApplicationP";
    private static final String SUB_REALM1 = "/RealmRemovedTestSubRealm1";
    private static final String SUB_REALM2 = "/RealmRemovedTestSubRealm2";
    private SSOToken adminToken = (SSOToken)
        AccessController.doPrivileged(
            AdminTokenAction.getInstance());
    private Subject adminSubject = SubjectUtils.createSubject(adminToken);
    private boolean migrated = EntitlementConfiguration.getInstance(
        adminSubject, "/").migratedToEntitlementService();

    @BeforeClass
    public void setup() throws Exception {
        if (!migrated) {
            return;
        }

        OrganizationConfigManager ocm = new OrganizationConfigManager(
            adminToken, "/");
        String subRealm = SUB_REALM1.substring(1);
        ocm.createSubOrganization(subRealm, Collections.EMPTY_MAP);
        subRealm = SUB_REALM2.substring(1);
        ocm.createSubOrganization(subRealm, Collections.EMPTY_MAP);

        Set<String> realms = new HashSet<String>();
        realms.add(SUB_REALM1);
        realms.add(SUB_REALM2);
        createReferral(REFERRAL_NAME2, realms);
        realms.remove(SUB_REALM2);
        createReferral(REFERRAL_NAME1, realms);
        createApplicationPrivilege();
    }

    @AfterClass
    public void cleanup() throws Exception {
        if (!migrated) {
            return;
        }
        ReferralPrivilegeManager mgr = new ReferralPrivilegeManager("/",
            adminSubject);
        mgr.remove(REFERRAL_NAME2);
        OrganizationConfigManager ocm = new OrganizationConfigManager(
            adminToken, "/");
        String subRealm = SUB_REALM2.substring(1);
        ocm.deleteSubOrganization(subRealm, true);
    }

    private void createReferral(String name, Set<String> realms)
        throws EntitlementException {
        Map<String, Set<String>> map = new HashMap<String, Set<String>>();
        Set<String> set = new HashSet<String>();
        set.add("http://www.RealmRemovedTest.com/*");
        map.put(ApplicationTypeManager.URL_APPLICATION_TYPE_NAME, set);
        ReferralPrivilege r1 = new ReferralPrivilege(name,
            map, realms);
        ReferralPrivilegeManager mgr = new ReferralPrivilegeManager("/",
            adminSubject);
        mgr.add(r1);
    }

    private void createApplicationPrivilege() throws EntitlementException {
        ApplicationPrivilegeManager mgr =
            ApplicationPrivilegeManager.getInstance(SUB_REALM1,
            SubjectUtils.createSubject(adminToken));
        ApplicationPrivilege ap = new ApplicationPrivilege(
            APP_PRIVILEGE_NAME);
        OpenSSOUserSubject sbj = new OpenSSOUserSubject();
        sbj.setID("ou=dummy,ou=user,dc=openam,dc=forgerock,dc=org");
        Set<SubjectImplementation> subjects = new
            HashSet<SubjectImplementation>();
        subjects.add(sbj);
        ap.setSubject(subjects);

        Map<String, Set<String>> appRes = new HashMap<String, Set<String>>();
        Set<String> res = new HashSet<String>();
        appRes.put(ApplicationTypeManager.URL_APPLICATION_TYPE_NAME, res);
        res.add("http://www.RealmRemovedTest.com/*");
        ap.setApplicationResources(appRes);
        ap.setActionValues(
            ApplicationPrivilege.PossibleAction.READ_MODIFY_DELEGATE);
        mgr.addPrivilege(ap);
    }


    @Test
    public void test() throws Exception {
        if (!migrated) {
            return;
        }

        OrganizationConfigManager ocm = new OrganizationConfigManager(
            adminToken, "/");
        String subRealm = SUB_REALM1.substring(1);
        ocm.deleteSubOrganization(subRealm, true);

        ReferralPrivilegeManager rpm = new ReferralPrivilegeManager("/",
            adminSubject);
        // referral privilege that only referral subrealm 1 should be removed.
        try {
            ReferralPrivilege r = rpm.findByName(REFERRAL_NAME1);
        } catch (EntitlementException e) {
            if (e.getErrorCode() != 263) {
                throw e;
            }
        }
        // referral privilege that only referral subrealm 1 should NOT be
        // removed.
        ReferralPrivilege r = rpm.findByName(REFERRAL_NAME2);
        Set<String> realms = r.getRealms();
        if ((realms.size() != 1) || !realms.contains(SUB_REALM2)) {
            throw new Exception("RealmRemovedTest: referred realm is incorrect");
        }

        // application privilege should be removed.
        ApplicationPrivilegeManager apm =
            ApplicationPrivilegeManager.getInstance("/", adminSubject);
        try {
            apm.getPrivilege(APP_PRIVILEGE_NAME);
        } catch (EntitlementException e) {
            if (e.getErrorCode() != 325) {
                throw e;
            }
        }
    }
}