mirror of
https://github.com/FirebirdSQL/firebird-qa.git
synced 2025-01-22 21:43:06 +01:00
116 lines
4.8 KiB
Python
116 lines
4.8 KiB
Python
#coding:utf-8
|
|
|
|
"""
|
|
ID: issue-5569
|
|
ISSUE: 5569
|
|
TITLE: Error messages differ when regular user tries to RESTORE database, depending on his default role and (perhaps) system privilege USE_GBAK_UTILITY
|
|
DESCRIPTION:
|
|
JIRA: CORE-5291
|
|
FBTEST: bugs.core_5291
|
|
NOTES:
|
|
[20.09.2022] pzotov
|
|
One need to take in account that gbak produces error message with specifying PORT number after localhost,
|
|
i.e.: "failed to create database localhost/NNNNN:<dbname>" (perhaps, only for non-default ports?).
|
|
Checked on 5.0.0.591, 4.0.1.2692.
|
|
"""
|
|
|
|
import pytest
|
|
from pathlib import Path
|
|
from firebird.qa import *
|
|
|
|
substitutions = [ ('gbak: ERROR:([ \t])*no permission for CREATE access to DATABASE.*', 'gbak: ERROR:no permission for CREATE access to DATABASE'),
|
|
('gbak: ERROR:([ \t])*failed to create database .*', 'gbak: ERROR:failed to create database')
|
|
]
|
|
|
|
db = db_factory()
|
|
|
|
tmp_user_1 = user_factory('db', name='tmp$c5291_1', password='123')
|
|
tmp_user_2 = user_factory('db', name='tmp$c5291_2', password='456')
|
|
tmp_role = role_factory('db', name='role_for_use_gbak_utility')
|
|
|
|
act = python_act('db', substitutions=substitutions)
|
|
|
|
fbk_file = temp_file('tmp_core_5291.fbk')
|
|
fdb_file_1 = temp_file('tmp_core_5291_1.fdb')
|
|
fdb_file_2 = temp_file('tmp_core_5291_2.fdb')
|
|
|
|
expected_stdout = """
|
|
Restore using SERVICES, user has NO default role:
|
|
gbak: ERROR:no permission for CREATE access to DATABASE
|
|
gbak: ERROR:failed to create database
|
|
gbak: ERROR: Exiting before completion due to errors
|
|
gbak:Exiting before completion due to errors
|
|
Restore using GBAK, user has NO default role:
|
|
gbak: ERROR:no permission for CREATE access to DATABASE
|
|
gbak: ERROR:failed to create database
|
|
gbak:Exiting before completion due to errors
|
|
Restore using SERVICES, user HAS default role with system privileges:
|
|
gbak: ERROR:no permission for CREATE access to DATABASE
|
|
gbak: ERROR:failed to create database
|
|
gbak: ERROR: Exiting before completion due to errors
|
|
gbak:Exiting before completion due to errors
|
|
Restore using GBAK, user HAS default role with system privileges:
|
|
gbak: ERROR:no permission for CREATE access to DATABASE
|
|
gbak: ERROR:failed to create database
|
|
gbak:Exiting before completion due to errors
|
|
"""
|
|
|
|
@pytest.mark.version('>=4.0')
|
|
def test_1(act: Action, tmp_user_1: User, tmp_user_2: User, fbk_file: Path, fdb_file_1: Path, fdb_file_2: Path, tmp_role: Role, capsys):
|
|
with act.db.connect() as con:
|
|
con.execute_immediate( f'alter role {tmp_role.name} set system privileges to USE_GBAK_UTILITY, SELECT_ANY_OBJECT_IN_DATABASE' )
|
|
con.execute_immediate( f'grant default {tmp_role.name} to user {tmp_user_2.name}' )
|
|
#
|
|
act.gbak(switches=['-b', act.db.dsn, str(fbk_file)])
|
|
|
|
#--------------------------------------------------------------------------
|
|
# User 1
|
|
act.reset()
|
|
print('Restore using SERVICES, user has NO default role:')
|
|
act.gbak(switches=[ '-se', 'localhost:service_mgr'
|
|
,'-rep', str(fbk_file), str(fdb_file_1)
|
|
,'-user', tmp_user_1.name
|
|
,'-pas', tmp_user_1.password
|
|
]
|
|
,credentials=False, combine_output = True)
|
|
print(act.stdout)
|
|
#--------------------------------------------------------------------------
|
|
|
|
# User 1
|
|
act.reset()
|
|
print('Restore using GBAK, user has NO default role:')
|
|
act.gbak(switches=[ '-rep', str(fbk_file), act.get_dsn(fdb_file_2)
|
|
,'-user', tmp_user_1.name, '-pas', tmp_user_1.password
|
|
]
|
|
,credentials=False, combine_output = True)
|
|
print(act.stdout)
|
|
#--------------------------------------------------------------------------
|
|
|
|
# User 2
|
|
act.reset()
|
|
print('Restore using SERVICES, user HAS default role with system privileges:')
|
|
act.gbak(switches=[ '-se', f'{act.host}:service_mgr'
|
|
,'-rep', str(fbk_file), str(fdb_file_1)
|
|
,'-user', tmp_user_2.name
|
|
,'-pas', tmp_user_2.password
|
|
]
|
|
,credentials=False, combine_output = True)
|
|
print(act.stdout)
|
|
#--------------------------------------------------------------------------
|
|
|
|
# User 2
|
|
act.reset()
|
|
print('Restore using GBAK, user HAS default role with system privileges:')
|
|
act.gbak(switches=[ '-rep', str(fbk_file), act.get_dsn(fdb_file_2),
|
|
'-user', tmp_user_2.name
|
|
,'-pas', tmp_user_2.password
|
|
]
|
|
,credentials=False, combine_output = True)
|
|
print(act.stdout)
|
|
#
|
|
act.reset()
|
|
|
|
act.expected_stdout = expected_stdout
|
|
act.stdout = capsys.readouterr().out
|
|
assert act.clean_stdout == act.clean_expected_stdout
|