Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[RHMU1hOu] Add tests for RBAC deny on load #607

Merged
merged 4 commits into from
Mar 8, 2024
Merged

Conversation

gem-neo4j
Copy link
Contributor

@gem-neo4j gem-neo4j commented Mar 4, 2024

Add tests for all loading procedures in APAC to check the deny works well with RBAC rules.

docs: https://github.com/neo4j/docs-apoc/pull/260

Copy link
Contributor

@Lojjs Lojjs left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think it looks good apart from two minor improvements that can be done. And kudos to @mnd999 for doing the feature work for us 🥇

List<String> queries = List.of(
"CREATE ROLE test",
"CREATE USER " + user + " SET PASSWORD '" + userP + "' SET PASSWORD CHANGE NOT REQUIRED",
"GRANT ROLE test, reader, editor TO testUser");
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Reader is a subset of editor, so not sure it provides much value to explicitly grant the reader role

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ah yes, I added these at separate parts in my testing and didn't realise! thanks :D

Copy link
Contributor

@Lojjs Lojjs left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good now

@gem-neo4j gem-neo4j merged commit c1d9442 into dev Mar 8, 2024
20 checks passed
@gem-neo4j gem-neo4j deleted the dev_rbac_load_tests branch March 8, 2024 07:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants