@@ -274,15 +274,21 @@ public void testRBACApi () {
274274
275275 assertEquals (Client .run (new String []{"getImplicitPermissionsForUser" , "-m" , "examples/rbac_model.conf" , "-p" , "examples/rbac_with_hierarchy_policy.csv" , "alice" }), "{\" allow\" :null,\" explain\" :[[\" alice\" ,\" data1\" ,\" read\" ],[\" data1_admin\" ,\" data1\" ,\" read\" ],[\" data1_admin\" ,\" data1\" ,\" write\" ],[\" data2_admin\" ,\" data2\" ,\" read\" ],[\" data2_admin\" ,\" data2\" ,\" write\" ]]}" );
276276
277-
278277 assertEquals (Client .run (new String []{"getNamedImplicitPermissionsForUser" , "-m" , "examples/rbac_with_multiple_policy_model.conf" , "-p" , "examples/rbac_with_multiple_policy_policy.csv" , "p2" , "alice" }), "{\" allow\" :null,\" explain\" :[[\" admin\" ,\" create\" ],[\" user\" ,\" view\" ]]}" );
279278
279+ }
280280
281+ @ Test
282+ public void testRBACWithDomainsApi () {
283+ assertEquals (Client .run (new String []{"getUsersForRoleInDomain" , "-m" , "examples/rbac_with_domains_model.conf" , "-p" , "examples/rbac_with_domains_policy.csv" , "admin" , "domain1" }), "{\" allow\" :null,\" explain\" :[\" alice\" ]}" );
281284
285+ assertEquals (Client .run (new String []{"getRolesForUserInDomain" , "-m" , "examples/rbac_with_domains_model.conf" , "-p" , "examples/rbac_with_domains_policy.csv" , "alice" , "domain1" }), "{\" allow\" :null,\" explain\" :[\" admin\" ]}" );
282286
287+ assertEquals (Client .run (new String []{"getPermissionsForUserInDomain" , "-m" , "examples/rbac_with_domains_model.conf" , "-p" , "examples/rbac_with_domains_policy.csv" , "admin" , "domain1" }), "{\" allow\" :null,\" explain\" :[[\" admin\" ,\" domain1\" ,\" data1\" ,\" read\" ],[\" admin\" ,\" domain1\" ,\" data1\" ,\" write\" ]]}" );
283288
289+ assertEquals (Client .run (new String []{"addRoleForUserInDomain" , "-m" , "examples/rbac_with_domains_model.conf" , "-p" , "examples/rbac_with_domains_policy.csv" , "alice" , "admin" , "domain3" }), "{\" allow\" :true,\" explain\" :null}" );
284290
285-
291+ assertEquals ( Client . run ( new String []{ "deleteRoleForUserInDomain" , "-m" , "examples/rbac_with_domains_model.conf" , "-p" , "examples/rbac_with_domains_policy.csv" , "alice" , "admin" , "domain3" }), "{ \" allow \" :true, \" explain \" :null}" );
286292 }
287293
288294
0 commit comments