firebird-qa/tests/bugs/core_5827_test.py

#coding:utf-8
#
# id:           bugs.core_5827
# title:        ALTER CURRENT USER fails with "no permission for <...> TABLE PLG$SRP" if current user: 1) has NO admin role and 2) wants to modify his own TAGS list
# decription:   
#                   ::: NB :::
#                   Code of this test must to be changed after ticket will be fixed!
#                   See line with 'grant admin role' -- it must me COMMENTED.
#                   Also, min_version should be set to 3.0.x rather than 4.0.0
#               
#                   Currently we check only ability to change TAGS list using 'ALTER CURRENT USER' statement.
#                   See also test for CORE-3365, but it checks only 'old' attributes which existed before FB 3.0.
#               
#                   25.05.2021. Checked on:
#                       5.0.0.47 SS: 1.764s.
#                       5.0.0.40 CS: 2.257s.
#                       4.0.0.2491 SS: 1.476s.
#                       4.1.0.2468 CS: 2.386s.
#                       3.0.8.33468 SS: 1.091s.
#                       3.0.8.33452 CS: 2.456s.
#                   Test can be enabled for execution (was excluded 23-jan-2019).
#               
#                 
# tracker_id:   CORE-5827
# min_versions: ['3.0.4']
# versions:     3.0.4
# qmid:         None

import pytest
from firebird.qa import db_factory, isql_act, Action

# version: 3.0.4
# resources: None

substitutions_1 = []

init_script_1 = """"""

db_1 = db_factory(sql_dialect=3, init=init_script_1)

test_script_1 = """
    set bail on;
    set list on;

    set term ^;
    execute block as
    begin
        begin
        execute statement 'drop user tmp$c5827 using plugin Srp' with autonomous transaction;
            when any do begin end
        end
    end^
    set term ;^
    commit;

    --set echo on;

    create user tmp$c5827
        password 'UseSrp'
        firstname 'Mary'
    -- NB: no error will be raised if we UNCOMMENT this line; IMO this is bug, see ticket issue; 
    -- TODO: comment must be here, put it later when this ticket issue will be fixed.
    -- >>> commented 25.05.2021 >>> grant admin role <<< all OK.
    using plugin Srp
        tags (
             key1 = 'val111'
            ,key2 = 'val222'
            ,key3 = 'val333'
        )
    ;
    commit;

    connect '$(DSN)' user tmp$c5827 password 'UseSrp';

    --- passed w/o error:
    alter current user
        set password 'FooSrp' firstname 'Scott' lastname 'Tiger'
        using plugin Srp
    ;
    commit;

    -- DOES raise error if current user has no admin role:
    alter current user
        using plugin Srp
        tags (
             Foo = 'Bar'
            ,key1 = 'val11'
            ,Rio = '1565'
            ,drop key3
            ,drop key2
        )
    ; 
    commit;

    -- cleanup:
    connect '$(DSN)' user 'SYSDBA' password 'masterkey';
    drop user tmp$c5827 using plugin Srp;
    commit;

"""

act_1 = isql_act('db_1', test_script_1, substitutions=substitutions_1)


@pytest.mark.version('>=3.0.4')
def test_1(act_1: Action):
    act_1.execute()