-
Notifications
You must be signed in to change notification settings - Fork 30
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[RHMU1hOu] Add tests for RBAC deny on load #607
Conversation
e925ca1
to
c2ab875
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I think it looks good apart from two minor improvements that can be done. And kudos to @mnd999 for doing the feature work for us 🥇
List<String> queries = List.of( | ||
"CREATE ROLE test", | ||
"CREATE USER " + user + " SET PASSWORD '" + userP + "' SET PASSWORD CHANGE NOT REQUIRED", | ||
"GRANT ROLE test, reader, editor TO testUser"); |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Reader is a subset of editor, so not sure it provides much value to explicitly grant the reader role
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Ah yes, I added these at separate parts in my testing and didn't realise! thanks :D
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Looks good now
Add tests for all loading procedures in APAC to check the deny works well with RBAC rules.
docs: https://github.com/neo4j/docs-apoc/pull/260