Package org.openbravo.test.security

Class BypassAccessLevelCheck

java.lang.Object

org.openbravo.test.base.MockableBaseTest

org.openbravo.test.base.OBBaseTest

org.openbravo.test.security.BypassAccessLevelCheck

public class BypassAccessLevelCheck
extends OBBaseTest

By default access level in entity and role is checked preventing reading data if role's user level is Organization and the entity trying to be accessed is Client or System. These checks can be bypassed.

Author:

alostale

Field Summary

Fields inherited from class org.openbravo.test.base.OBBaseTest

DOLLAR, DOLLAR_ID, EURO, EURO_ID, QA_TEST_ADMIN_USER_ID, QA_TEST_CLIENT_ID, QA_TEST_ORG_ID, TEST_BP_CATEGORY_ID, TEST_CLIENT_ID, TEST_INVOICE_ID, TEST_LOCATION_ID, TEST_ORDER_ID, TEST_ORG_ID, TEST_ORG_TREE, TEST_PRODUCT_ID, TEST_ROLE_ID, TEST_US_ORG_ID, TEST_USER_ID, TEST_WAREHOUSE_ID, TEST2_USER_ID, userIds, watchFailures

Constructor Summary

Constructors

Constructor	Description
BypassAccessLevelCheck()

Method Summary

Modifier and Type	Method	Description
static void	cleanUpCreatedObjects()
static void	createOrgLevelRole()
void	orgLevelCanAccessEntityAccessIfEnabled()	Default behavior of for access level check can be bypassed
void	orgLevelShouldntGrantAccessToSystemEntity()	By default Org level roles cannot see data in System level entities

Methods inherited from class org.openbravo.test.base.OBBaseTest

addReadWriteAccess, classSetUp, commitTransaction, count, getConnectionProvider, getOneInstance, getRandomUser, getTestLogAppender, initializeDalLayer, initializeDisabledTestCases, initializeTestLogAppender, isErrorOccured, reportException, rollback, setLogStackTraces, setQAAdminContext, setSystemAdministratorContext, setTestAdminContext, setTestLogAppenderLevel, setTestUserContext, setUp, setUserContext, shouldMockServletContext, staticInitializeDalLayer, testDone

Methods inherited from class org.openbravo.test.base.MockableBaseTest

mockStatic

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

BypassAccessLevelCheck

public BypassAccessLevelCheck()

Method Detail

createOrgLevelRole

public static void createOrgLevelRole()

orgLevelShouldntGrantAccessToSystemEntity

public void orgLevelShouldntGrantAccessToSystemEntity()

By default Org level roles cannot see data in System level entities

orgLevelCanAccessEntityAccessIfEnabled

public void orgLevelCanAccessEntityAccessIfEnabled()

Default behavior of for access level check can be bypassed

cleanUpCreatedObjects

public static void cleanUpCreatedObjects()