luxolus
/
open-vault
2
0
Fork 0
Code Issues 1 Pull Requests Releases Activity

vault: adding another ACL test

This commit is contained in:
Armon Dadgar 2015-07-05 17:34:34 -06:00
parent dc8cc308af
commit 3d2fa8818e
1 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
vault/acl_test.go
View File

@ -112,6 +112,9 @@ func testLayeredACL(t *testing.T, acl *ACL) {
{logical.ReadOperation, "prod/foo", true},
{logical.ListOperation, "prod/foo", true},
{logical.ReadOperation, "prod/aws/foo", false},
{logical.ReadOperation, "sys/status", false},
{logical.WriteOperation, "sys/seal", true},
}
for _, tc := range tcases {
@ -142,6 +145,9 @@ path "prod/*" {
path "prod/aws/*" {
policy = "deny"
}
path "sys/*" {
policy = "deny"
}
`
var aclPolicy2 = `
@ -155,4 +161,7 @@ path "stage/aws/policy/*" {
path "prod/*" {
policy = "write"
}
path "sys/seal" {
policy = "write"
}
`