mirror of
https://github.com/FirebirdSQL/firebird-qa.git
synced 2025-01-22 13:33:07 +01:00
117 lines
3.4 KiB
Python
117 lines
3.4 KiB
Python
#coding:utf-8
|
|
|
|
"""
|
|
ID: issue-7217
|
|
ISSUE: https://github.com/FirebirdSQL/firebird/issues/7217
|
|
TITLE: user with DROP ANY PACKAGE privilege can not execute DROP PACKAGE BODY
|
|
NOTES:
|
|
[25.02.2023] pzotov
|
|
Confirmed bug on 5.0.0.520.
|
|
Checked on 5.0.0.959, 4.0.3.2903 - all OK.
|
|
"""
|
|
|
|
import pytest
|
|
from firebird.qa import *
|
|
|
|
init_script = """
|
|
set term ^;
|
|
create package pg_test_1 as
|
|
begin
|
|
procedure pg_sp_1 returns(id int);
|
|
end
|
|
^
|
|
create package pg_test_2 as
|
|
begin
|
|
procedure pg_sp_2 returns(id int);
|
|
end
|
|
^
|
|
create package body pg_test_1 as
|
|
begin
|
|
procedure pg_sp_1 returns(id int) as
|
|
begin
|
|
id = 1;
|
|
suspend;
|
|
end
|
|
end
|
|
^
|
|
create package body pg_test_2 as
|
|
begin
|
|
procedure pg_sp_2 returns(id int) as
|
|
begin
|
|
id = 1;
|
|
suspend;
|
|
end
|
|
end
|
|
^
|
|
set term ;^
|
|
commit;
|
|
"""
|
|
db = db_factory(init = init_script)
|
|
|
|
tmp_usr1 = user_factory('db', name = 'tmp_user_7217_foo', password = '123')
|
|
tmp_usr2 = user_factory('db', name = 'tmp_user_7217_bar', password = '456')
|
|
tmp_role = role_factory('db', name = 'tmp_role_7217')
|
|
|
|
act = python_act('db')
|
|
|
|
expected_stdout = """
|
|
RDB$PACKAGE_BODY_SOURCE <null>
|
|
RDB$PACKAGE_BODY_SOURCE <null>
|
|
Records affected: 2
|
|
"""
|
|
|
|
@pytest.mark.version('>=4.0.2')
|
|
def test_1(act: Action, tmp_usr1: User, tmp_usr2: User, tmp_role: Role):
|
|
|
|
test_script = f"""
|
|
set bail on;
|
|
|
|
connect '{act.db.dsn}' user {act.db.user} password '{act.db.password}';
|
|
grant DROP ANY PACKAGE to {tmp_usr1.name};
|
|
grant DROP ANY PACKAGE to {tmp_role.name};
|
|
grant {tmp_role.name} to {tmp_usr2.name};
|
|
commit;
|
|
set autoddl off;
|
|
set bail off;
|
|
-----------------------------------------------------
|
|
-- 1. Check that user can drop package when this permission was granted to HIMSELF:
|
|
connect '{act.db.dsn}' user {tmp_usr1.name} password '{tmp_usr1.password}';
|
|
drop package body pg_test_1;
|
|
rollback;
|
|
|
|
set term ^;
|
|
execute block as
|
|
begin
|
|
execute statement 'drop package body pg_test_1';
|
|
end
|
|
^
|
|
set term ;^
|
|
commit;
|
|
-----------------------------------------------------
|
|
-- 2. Check that user can drop package when this permission was granted to ROLE which, in turn, was granted to that user:
|
|
connect '{act.db.dsn}' user {tmp_usr2.name} password '{tmp_usr2.password}' role {tmp_role.name};
|
|
drop package body pg_test_2;
|
|
rollback;
|
|
|
|
set term ^;
|
|
execute block as
|
|
begin
|
|
execute statement 'drop package body pg_test_2';
|
|
end
|
|
^
|
|
set term ;^
|
|
commit;
|
|
-----------------------------------------------------
|
|
-- 3. Check that both packages now have no bodies:
|
|
connect '{act.db.dsn}' user {act.db.user} password '{act.db.password}';
|
|
set count on;
|
|
set list on;
|
|
set blob all;
|
|
-- must issue two rows, both with <null> literals:
|
|
select p.rdb$package_body_source from rdb$packages p where p.rdb$package_name in ( upper('pg_test_1'),upper('pg_test_2') );
|
|
"""
|
|
|
|
act.expected_stdout = expected_stdout
|
|
act.isql(switches=['-q'], input = test_script, connect_db = False, credentials = False, combine_output = True)
|
|
assert act.clean_stdout == act.clean_expected_stdout
|