mirror of
https://github.com/FirebirdSQL/firebird-qa.git
synced 2025-01-22 21:43:06 +01:00
112 lines
4.0 KiB
Python
112 lines
4.0 KiB
Python
#coding:utf-8
|
|
"""
|
|
ID: services.role-in-service-attachment
|
|
TITLE: Check that trace plugin shows ROLE used in service attachment. Format: USER[:ROLE]
|
|
DESCRIPTION:
|
|
See: https://github.com/FirebirdSQL/firebird/commit/dd241208f203e54a9c5e9b8b24c0ef24a4298713
|
|
FBTEST: functional.services.role_in_service_attachment
|
|
|
|
NOTES:
|
|
[30.07.2022] pzotov
|
|
Current version of QA plugin *does* allow to specify user/password/role when we connect to Services API and launch trace.
|
|
But actually this data is not used in by plugin when it launched trace, see 'def trace_thread'.
|
|
It seems that 'with act.connect_server(...)' invocation must use these parameters also, otherwise trace log shows that
|
|
it was started by SYSDBA.
|
|
Sent report to pcisar, 30.07.2022 18:33. Waiting for confirmation or other solution.
|
|
|
|
[20.09.2022] pzotov
|
|
Replaced code which invokes trace with EXPLICIT call of fbsvcmgr utility via subprocess.Popen. Otherwise always got:
|
|
fail with: "ERROR: trace output contains only USER, without ROLE."
|
|
See also: bugs/core_3658_test.py
|
|
|
|
Checked on 4.0.1.2692 (SS/CS), 5.0.0.730 (SS/CS)
|
|
"""
|
|
|
|
import subprocess
|
|
import time
|
|
import re
|
|
import pytest
|
|
from pathlib import Path
|
|
|
|
from firebird.qa import *
|
|
import firebird.driver
|
|
from firebird.driver import SrvStatFlag
|
|
|
|
tmp_user = user_factory('db', name='tmp_tracing_user', password='123')
|
|
db = db_factory()
|
|
tmp_role = role_factory('db', name='tmp_tracing_role')
|
|
|
|
tmp_trace_cfg = temp_file('tmp_trace_role_in_svc_attachment.cfg')
|
|
tmp_trace_log = temp_file('tmp_trace_role_in_svc_attachment.log')
|
|
|
|
act = python_act('db')
|
|
|
|
#expected_stdout = 'SUCCESS: found expected line format in the trace log: <USER>:<ROLE>'
|
|
|
|
@pytest.mark.trace
|
|
@pytest.mark.version('>=4.0')
|
|
def test_1(act: Action, tmp_user: User, tmp_role:Role, tmp_trace_cfg: Path, tmp_trace_log: Path, capsys):
|
|
|
|
init_script = \
|
|
f'''
|
|
set wng off;
|
|
set bail on;
|
|
revoke all on all from {tmp_user.name};
|
|
commit;
|
|
-- Trace other users' attachments
|
|
alter role {tmp_role.name} set system privileges to TRACE_ANY_ATTACHMENT;
|
|
commit;
|
|
grant default {tmp_role.name} to user {tmp_user.name};
|
|
commit;
|
|
'''
|
|
act.isql(switches=['-q'], input=init_script)
|
|
|
|
|
|
trace_txt = """
|
|
services
|
|
{
|
|
enabled = true
|
|
log_initfini = false
|
|
log_services = true
|
|
log_errors = true
|
|
}
|
|
"""
|
|
|
|
tmp_trace_cfg.write_text(trace_txt)
|
|
|
|
with tmp_trace_log.open('w') as f_log:
|
|
# EXPLICIT call of FB utility 'fbsvcmgr':
|
|
p = subprocess.Popen( [ act.vars['fbsvcmgr'],
|
|
'localhost:service_mgr',
|
|
'user', tmp_user.name,
|
|
'password', tmp_user.password,
|
|
'role', tmp_role.name,
|
|
'action_trace_start', 'trc_cfg', tmp_trace_cfg
|
|
],
|
|
stdout = f_log, stderr = subprocess.STDOUT
|
|
)
|
|
time.sleep(2)
|
|
|
|
# ::: DO NOT USE HERE :::
|
|
# with act.trace(svc_events = svc_items, ...):
|
|
# pass
|
|
|
|
p.terminate()
|
|
|
|
|
|
# Windows: service_mgr, (Service 00000000105E93C0, TMP_TRACING_USER:TMP_TRACING_ROLE, TCPv6:::1/53682, D:\FB\fb401rls\fbsvcmgr.exe:18032)
|
|
# Linux: service_mgr, (Service 0x7fc58f6073c0, TMP_TRACING_USER:TMP_TRACING_ROLE, TCPv6:::1/35666, /opt/fb40/bin/fbsvcmgr:218534)
|
|
p = re.compile('service_mgr,\\s+\\(\\s*Service\\s+\\w+[,]?\\s+' + tmp_user.name + ':' + tmp_role.name + '[,]?', re.IGNORECASE)
|
|
expected_stdout = 'Found expected line: 1'
|
|
|
|
with open(tmp_trace_log,'r') as f:
|
|
for line in f:
|
|
if line.strip():
|
|
if p.search(line):
|
|
print(expected_stdout)
|
|
break
|
|
|
|
act.expected_stdout = expected_stdout
|
|
act.stdout = capsys.readouterr().out
|
|
assert act.clean_stdout == act.clean_expected_stdout
|