| load('@stdlib//internal/luci/lib/acl.star', 'acl', 'aclimpl') |
| |
| |
| def test_works(): |
| # Empty list is fine. |
| assert.eq(aclimpl.normalize_acls([]), []) |
| |
| # Sorts and dedups. |
| ents = [ |
| acl.entry(acl.BUILDBUCKET_WRITER, groups=['group a', 'group b'], users='a@example.com'), |
| acl.entry(acl.BUILDBUCKET_READER, users='b@example.com'), |
| acl.entry(acl.BUILDBUCKET_READER, users='a@example.com'), |
| acl.entry(acl.BUILDBUCKET_READER, users=['a@example.com', 'c@example.com']), |
| acl.entry(acl.BUILDBUCKET_READER), # should be ignored |
| acl.entry(acl.BUILDBUCKET_READER, groups='group b'), |
| acl.entry(acl.BUILDBUCKET_READER, groups='group a'), |
| ] |
| assert.eq([(e.role, e.user, e.group) for e in aclimpl.normalize_acls(ents)], [ |
| (acl.BUILDBUCKET_READER, None, 'group a'), |
| (acl.BUILDBUCKET_READER, None, 'group b'), |
| (acl.BUILDBUCKET_READER, 'a@example.com', None), |
| (acl.BUILDBUCKET_READER, 'b@example.com', None), |
| (acl.BUILDBUCKET_READER, 'c@example.com', None), |
| (acl.BUILDBUCKET_WRITER, None, 'group a'), |
| (acl.BUILDBUCKET_WRITER, None, 'group b'), |
| (acl.BUILDBUCKET_WRITER, 'a@example.com', None), |
| ]) |
| |
| |
| test_works() |
