| 提交 | 用户 | 时间 | ||
| e7c126 | 1 | package com.iailab.framework.datapermission.core.rule.dept; |
| H | 2 | |
| 3 | import cn.hutool.core.collection.CollUtil; | |
| 4 | import cn.hutool.core.util.ReflectUtil; | |
| 5 | import com.iailab.framework.common.enums.UserTypeEnum; | |
| 6 | import com.iailab.framework.common.util.collection.SetUtils; | |
| 7 | import com.iailab.framework.security.core.LoginUser; | |
| 8 | import com.iailab.framework.security.core.util.SecurityFrameworkUtils; | |
| 9 | import com.iailab.framework.test.core.ut.BaseMockitoUnitTest; | |
| 10 | import com.iailab.module.system.api.permission.PermissionApi; | |
| 11 | import com.iailab.module.system.api.permission.dto.DeptDataPermissionRespDTO; | |
| 12 | import net.sf.jsqlparser.expression.Alias; | |
| 13 | import net.sf.jsqlparser.expression.Expression; | |
| 14 | import org.junit.jupiter.api.BeforeEach; | |
| 15 | import org.junit.jupiter.api.Test; | |
| 16 | import org.mockito.InjectMocks; | |
| 17 | import org.mockito.Mock; | |
| 18 | import org.mockito.MockedStatic; | |
| 19 | ||
| 20 | import java.util.Map; | |
| 21 | ||
| 22 | import static com.iailab.framework.common.pojo.CommonResult.success; | |
| 23 | import static com.iailab.framework.datapermission.core.rule.dept.DeptDataPermissionRule.EXPRESSION_NULL; | |
| 24 | import static com.iailab.framework.test.core.util.RandomUtils.randomPojo; | |
| 25 | import static com.iailab.framework.test.core.util.RandomUtils.randomString; | |
| 26 | import static org.junit.jupiter.api.Assertions.*; | |
| 27 | import static org.mockito.ArgumentMatchers.eq; | |
| 28 | import static org.mockito.ArgumentMatchers.same; | |
| 29 | import static org.mockito.Mockito.mockStatic; | |
| 30 | import static org.mockito.Mockito.when; | |
| 31 | ||
| 32 | /** | |
| 33 | * {@link DeptDataPermissionRule} 的单元测试 | |
| 34 | * | |
| 35 | * @author iailab | |
| 36 | */ | |
| 37 | class DeptDataPermissionRuleTest extends BaseMockitoUnitTest { | |
| 38 | ||
| 39 | @InjectMocks | |
| 40 | private DeptDataPermissionRule rule; | |
| 41 | ||
| 42 | @Mock | |
| 43 | private PermissionApi permissionApi; | |
| 44 | ||
| 45 | @BeforeEach | |
| 46 | @SuppressWarnings("unchecked") | |
| 47 | public void setUp() { | |
| 48 | // 清空 rule | |
| 49 | rule.getTableNames().clear(); | |
| 50 | ((Map<String, String>) ReflectUtil.getFieldValue(rule, "deptColumns")).clear(); | |
| 51 | ((Map<String, String>) ReflectUtil.getFieldValue(rule, "deptColumns")).clear(); | |
| 52 | } | |
| 53 | ||
| 54 | @Test // 无 LoginUser | |
| 55 | public void testGetExpression_noLoginUser() { | |
| 56 | // 准备参数 | |
| 57 | String tableName = randomString(); | |
| 58 | Alias tableAlias = new Alias(randomString()); | |
| 59 | // mock 方法 | |
| 60 | ||
| 61 | // 调用 | |
| 62 | Expression expression = rule.getExpression(tableName, tableAlias); | |
| 63 | // 断言 | |
| 64 | assertNull(expression); | |
| 65 | } | |
| 66 | ||
| 67 | @Test // 无数据权限时 | |
| 68 | public void testGetExpression_noDeptDataPermission() { | |
| 69 | try (MockedStatic<SecurityFrameworkUtils> securityFrameworkUtilsMock | |
| 70 | = mockStatic(SecurityFrameworkUtils.class)) { | |
| 71 | // 准备参数 | |
| 72 | String tableName = "t_user"; | |
| 73 | Alias tableAlias = new Alias("u"); | |
| 74 | // mock 方法 | |
| 75 | LoginUser loginUser = randomPojo(LoginUser.class, o -> o.setId(1L) | |
| 76 | .setUserType(UserTypeEnum.ADMIN.getValue())); | |
| 77 | securityFrameworkUtilsMock.when(SecurityFrameworkUtils::getLoginUser).thenReturn(loginUser); | |
| 78 | // mock 方法（permissionApi 返回 null） | |
| 79 | when(permissionApi.getDeptDataPermission(eq(loginUser.getId()))).thenReturn(success(null)); | |
| 80 | ||
| 81 | // 调用 | |
| 82 | NullPointerException exception = assertThrows(NullPointerException.class, | |
| 83 | () -> rule.getExpression(tableName, tableAlias)); | |
| 84 | // 断言 | |
| 85 | assertEquals("LoginUser(1) Table(t_user/u) 未返回数据权限", exception.getMessage()); | |
| 86 | } | |
| 87 | } | |
| 88 | ||
| 89 | @Test // 全部数据权限 | |
| 90 | public void testGetExpression_allDeptDataPermission() { | |
| 91 | try (MockedStatic<SecurityFrameworkUtils> securityFrameworkUtilsMock | |
| 92 | = mockStatic(SecurityFrameworkUtils.class)) { | |
| 93 | // 准备参数 | |
| 94 | String tableName = "t_user"; | |
| 95 | Alias tableAlias = new Alias("u"); | |
| 96 | // mock 方法（LoginUser） | |
| 97 | LoginUser loginUser = randomPojo(LoginUser.class, o -> o.setId(1L) | |
| 98 | .setUserType(UserTypeEnum.ADMIN.getValue())); | |
| 99 | securityFrameworkUtilsMock.when(SecurityFrameworkUtils::getLoginUser).thenReturn(loginUser); | |
| 100 | // mock 方法（DeptDataPermissionRespDTO） | |
| 101 | DeptDataPermissionRespDTO deptDataPermission = new DeptDataPermissionRespDTO().setAll(true); | |
| 102 | when(permissionApi.getDeptDataPermission(same(1L))).thenReturn(success(deptDataPermission)); | |
| 103 | ||
| 104 | // 调用 | |
| 105 | Expression expression = rule.getExpression(tableName, tableAlias); | |
| 106 | // 断言 | |
| 107 | assertNull(expression); | |
| 108 | assertSame(deptDataPermission, loginUser.getContext(DeptDataPermissionRule.CONTEXT_KEY, DeptDataPermissionRespDTO.class)); | |
| 109 | } | |
| 110 | } | |
| 111 | ||
| 112 | @Test // 即不能查看部门，又不能查看自己，则说明 100% 无权限 | |
| 113 | public void testGetExpression_noDept_noSelf() { | |
| 114 | try (MockedStatic<SecurityFrameworkUtils> securityFrameworkUtilsMock | |
| 115 | = mockStatic(SecurityFrameworkUtils.class)) { | |
| 116 | // 准备参数 | |
| 117 | String tableName = "t_user"; | |
| 118 | Alias tableAlias = new Alias("u"); | |
| 119 | // mock 方法（LoginUser） | |
| 120 | LoginUser loginUser = randomPojo(LoginUser.class, o -> o.setId(1L) | |
| 121 | .setUserType(UserTypeEnum.ADMIN.getValue())); | |
| 122 | securityFrameworkUtilsMock.when(SecurityFrameworkUtils::getLoginUser).thenReturn(loginUser); | |
| 123 | // mock 方法（DeptDataPermissionRespDTO） | |
| 124 | DeptDataPermissionRespDTO deptDataPermission = new DeptDataPermissionRespDTO(); | |
| 125 | when(permissionApi.getDeptDataPermission(same(1L))).thenReturn(success(deptDataPermission)); | |
| 126 | ||
| 127 | // 调用 | |
| 128 | Expression expression = rule.getExpression(tableName, tableAlias); | |
| 129 | // 断言 | |
| 130 | assertEquals("null = null", expression.toString()); | |
| 131 | assertSame(deptDataPermission, loginUser.getContext(DeptDataPermissionRule.CONTEXT_KEY, DeptDataPermissionRespDTO.class)); | |
| 132 | } | |
| 133 | } | |
| 134 | ||
| 135 | @Test // 拼接 Dept 和 User 的条件（字段都不符合） | |
| 136 | public void testGetExpression_noDeptColumn_noSelfColumn() { | |
| 137 | try (MockedStatic<SecurityFrameworkUtils> securityFrameworkUtilsMock | |
| 138 | = mockStatic(SecurityFrameworkUtils.class)) { | |
| 139 | // 准备参数 | |
| 140 | String tableName = "t_user"; | |
| 141 | Alias tableAlias = new Alias("u"); | |
| 142 | // mock 方法（LoginUser） | |
| 143 | LoginUser loginUser = randomPojo(LoginUser.class, o -> o.setId(1L) | |
| 144 | .setUserType(UserTypeEnum.ADMIN.getValue())); | |
| 145 | securityFrameworkUtilsMock.when(SecurityFrameworkUtils::getLoginUser).thenReturn(loginUser); | |
| 146 | // mock 方法（DeptDataPermissionRespDTO） | |
| 147 | DeptDataPermissionRespDTO deptDataPermission = new DeptDataPermissionRespDTO() | |
| 148 | .setDeptIds(SetUtils.asSet(10L, 20L)).setSelf(true); | |
| 149 | when(permissionApi.getDeptDataPermission(same(1L))).thenReturn(success(deptDataPermission)); | |
| 150 | ||
| 151 | // 调用 | |
| 152 | Expression expression = rule.getExpression(tableName, tableAlias); | |
| 153 | // 断言 | |
| 154 | assertSame(EXPRESSION_NULL, expression); | |
| 155 | assertSame(deptDataPermission, loginUser.getContext(DeptDataPermissionRule.CONTEXT_KEY, DeptDataPermissionRespDTO.class)); | |
| 156 | } | |
| 157 | } | |
| 158 | ||
| 159 | @Test // 拼接 Dept 和 User 的条件（self 符合） | |
| 160 | public void testGetExpression_noDeptColumn_yesSelfColumn() { | |
| 161 | try (MockedStatic<SecurityFrameworkUtils> securityFrameworkUtilsMock | |
| 162 | = mockStatic(SecurityFrameworkUtils.class)) { | |
| 163 | // 准备参数 | |
| 164 | String tableName = "t_user"; | |
| 165 | Alias tableAlias = new Alias("u"); | |
| 166 | // mock 方法（LoginUser） | |
| 167 | LoginUser loginUser = randomPojo(LoginUser.class, o -> o.setId(1L) | |
| 168 | .setUserType(UserTypeEnum.ADMIN.getValue())); | |
| 169 | securityFrameworkUtilsMock.when(SecurityFrameworkUtils::getLoginUser).thenReturn(loginUser); | |
| 170 | // mock 方法（DeptDataPermissionRespDTO） | |
| 171 | DeptDataPermissionRespDTO deptDataPermission = new DeptDataPermissionRespDTO() | |
| 172 | .setSelf(true); | |
| 173 | when(permissionApi.getDeptDataPermission(same(1L))).thenReturn(success(deptDataPermission)); | |
| 174 | // 添加 user 字段配置 | |
| 175 | rule.addUserColumn("t_user", "id"); | |
| 176 | ||
| 177 | // 调用 | |
| 178 | Expression expression = rule.getExpression(tableName, tableAlias); | |
| 179 | // 断言 | |
| 180 | assertEquals("u.id = 1", expression.toString()); | |
| 181 | assertSame(deptDataPermission, loginUser.getContext(DeptDataPermissionRule.CONTEXT_KEY, DeptDataPermissionRespDTO.class)); | |
| 182 | } | |
| 183 | } | |
| 184 | ||
| 185 | @Test // 拼接 Dept 和 User 的条件（dept 符合） | |
| 186 | public void testGetExpression_yesDeptColumn_noSelfColumn() { | |
| 187 | try (MockedStatic<SecurityFrameworkUtils> securityFrameworkUtilsMock | |
| 188 | = mockStatic(SecurityFrameworkUtils.class)) { | |
| 189 | // 准备参数 | |
| 190 | String tableName = "t_user"; | |
| 191 | Alias tableAlias = new Alias("u"); | |
| 192 | // mock 方法（LoginUser） | |
| 193 | LoginUser loginUser = randomPojo(LoginUser.class, o -> o.setId(1L) | |
| 194 | .setUserType(UserTypeEnum.ADMIN.getValue())); | |
| 195 | securityFrameworkUtilsMock.when(SecurityFrameworkUtils::getLoginUser).thenReturn(loginUser); | |
| 196 | // mock 方法（DeptDataPermissionRespDTO） | |
| 197 | DeptDataPermissionRespDTO deptDataPermission = new DeptDataPermissionRespDTO() | |
| 198 | .setDeptIds(CollUtil.newLinkedHashSet(10L, 20L)); | |
| 199 | when(permissionApi.getDeptDataPermission(same(1L))).thenReturn(success(deptDataPermission)); | |
| 200 | // 添加 dept 字段配置 | |
| 201 | rule.addDeptColumn("t_user", "dept_id"); | |
| 202 | ||
| 203 | // 调用 | |
| 204 | Expression expression = rule.getExpression(tableName, tableAlias); | |
| 205 | // 断言 | |
| 206 | assertEquals("u.dept_id IN (10, 20)", expression.toString()); | |
| 207 | assertSame(deptDataPermission, loginUser.getContext(DeptDataPermissionRule.CONTEXT_KEY, DeptDataPermissionRespDTO.class)); | |
| 208 | } | |
| 209 | } | |
| 210 | ||
| 211 | @Test // 拼接 Dept 和 User 的条件（dept + self 符合） | |
| 212 | public void testGetExpression_yesDeptColumn_yesSelfColumn() { | |
| 213 | try (MockedStatic<SecurityFrameworkUtils> securityFrameworkUtilsMock | |
| 214 | = mockStatic(SecurityFrameworkUtils.class)) { | |
| 215 | // 准备参数 | |
| 216 | String tableName = "t_user"; | |
| 217 | Alias tableAlias = new Alias("u"); | |
| 218 | // mock 方法（LoginUser） | |
| 219 | LoginUser loginUser = randomPojo(LoginUser.class, o -> o.setId(1L) | |
| 220 | .setUserType(UserTypeEnum.ADMIN.getValue())); | |
| 221 | securityFrameworkUtilsMock.when(SecurityFrameworkUtils::getLoginUser).thenReturn(loginUser); | |
| 222 | // mock 方法（DeptDataPermissionRespDTO） | |
| 223 | DeptDataPermissionRespDTO deptDataPermission = new DeptDataPermissionRespDTO() | |
| 224 | .setDeptIds(CollUtil.newLinkedHashSet(10L, 20L)).setSelf(true); | |
| 225 | when(permissionApi.getDeptDataPermission(same(1L))).thenReturn(success(deptDataPermission)); | |
| 226 | // 添加 user 字段配置 | |
| 227 | rule.addUserColumn("t_user", "id"); | |
| 228 | // 添加 dept 字段配置 | |
| 229 | rule.addDeptColumn("t_user", "dept_id"); | |
| 230 | ||
| 231 | // 调用 | |
| 232 | Expression expression = rule.getExpression(tableName, tableAlias); | |
| 233 | // 断言 | |
| 234 | assertEquals("(u.dept_id IN (10, 20) OR u.id = 1)", expression.toString()); | |
| 235 | assertSame(deptDataPermission, loginUser.getContext(DeptDataPermissionRule.CONTEXT_KEY, DeptDataPermissionRespDTO.class)); | |
| 236 | } | |
| 237 | } | |
| 238 | ||
| 239 | } | |
