package org.geoserver.security.decorators;
import static org.easymock.EasyMock.*;
import org.springframework.security.SpringSecurityException;
import org.geoserver.security.WrapperPolicy;
import org.geoserver.security.impl.SecureObjectsTest;
import org.geotools.data.DataAccess;
import org.geotools.data.DataStore;
import org.geotools.data.Query;
import org.geotools.data.FeatureSource;
import org.geotools.data.FeatureStore;
import org.geotools.feature.FeatureCollection;
import org.geotools.feature.NameImpl;
import org.opengis.feature.simple.SimpleFeatureType;
import org.opengis.filter.Filter;
public class SecuredFeatureSourceTest extends SecureObjectsTest {
public void testReadOnlyFeatureSourceDataStore() throws Exception {
// build up the mock
DataStore ds = createNiceMock(DataStore.class);
replay(ds);
FeatureSource fs = createNiceMock(FeatureSource.class);
FeatureCollection fc = createNiceMock(FeatureCollection.class);
expect(fs.getDataStore()).andReturn(ds);
expect(fs.getFeatures()).andReturn(fc).anyTimes();
expect(fs.getFeatures((Filter) anyObject())).andReturn(fc).anyTimes();
expect(fs.getFeatures((Query) anyObject())).andReturn(fc).anyTimes();
replay(fs);
SecuredFeatureSource ro = new SecuredFeatureSource(fs, WrapperPolicy.hide(null));
assertTrue(ro.getDataStore() instanceof ReadOnlyDataStore);
SecuredFeatureCollection collection = (SecuredFeatureCollection) ro.getFeatures();
assertTrue(ro.policy.isHide());
assertTrue(ro.getFeatures(Filter.INCLUDE) instanceof SecuredFeatureCollection);
assertTrue(ro.getFeatures(new Query()) instanceof SecuredFeatureCollection);
}
public void testReadOnlyFeatureStore() throws Exception {
// build up the mock
SimpleFeatureType schema = createNiceMock(SimpleFeatureType.class);
expect(schema.getName()).andReturn(new NameImpl("testFT"));
replay(schema);
FeatureStore fs = createNiceMock(FeatureStore.class);
expect(fs.getSchema()).andReturn(schema);
replay(fs);
SecuredFeatureStore ro = new SecuredFeatureStore(fs, WrapperPolicy.readOnlyChallenge(null));
try {
ro.addFeatures(createNiceMock(FeatureCollection.class));
fail("This should have thrown a security exception");
} catch(SpringSecurityException e) {
// ok
}
}
public void testReadOnlyFeatureSourceDataAccess() throws Exception {
// build the mock up
DataAccess da = createNiceMock(DataAccess.class);
replay(da);
FeatureSource fs = createNiceMock(FeatureSource.class);
expect(fs.getDataStore()).andReturn(da);
replay(fs);
SecuredFeatureSource ro = new SecuredFeatureSource(fs, WrapperPolicy.readOnlyChallenge(null));
assertTrue(ro.getDataStore() instanceof ReadOnlyDataAccess);
}
}