mirror of
https://github.com/opencloud-eu/opencloud.git
synced 2026-01-01 09:52:23 -06:00
[tests-only][full-ci]Added GDPR export for quota update, export another users GDPR (#6249)
* Added GDPR export for quota update, another user tries to export * PR address
This commit is contained in:
@@ -454,3 +454,113 @@ Feature: user GDPR (General Data Protection Regulation) report
|
||||
}
|
||||
}
|
||||
"""
|
||||
|
||||
|
||||
Scenario: generate a GDPR report after the admin updates the quota of personal space
|
||||
Given user "Admin" has changed the quota of the personal space of "Alice Hansen" space to "10000"
|
||||
When user "Alice" exports her GDPR report to "/.personal_data_export.json" using the Graph API
|
||||
And user "Alice" downloads the content of GDPR report ".personal_data_export.json"
|
||||
Then the HTTP status code of responses on each endpoint should be "201, 200" respectively
|
||||
And the downloaded JSON content should contain event type "events.SpaceUpdated" in item 'events' and should match
|
||||
"""
|
||||
{
|
||||
"type": "object",
|
||||
"required": [
|
||||
"event"
|
||||
],
|
||||
"properties": {
|
||||
"event" : {
|
||||
"type": "object",
|
||||
"required": [
|
||||
"Executant",
|
||||
"Space"
|
||||
],
|
||||
"properties": {
|
||||
"Executant": {
|
||||
"type": "object",
|
||||
"required": [
|
||||
"idp",
|
||||
"opaque_id",
|
||||
"type"
|
||||
],
|
||||
"properties": {
|
||||
"idp": {
|
||||
"type": "string",
|
||||
"pattern": "^%base_url%$"
|
||||
},
|
||||
"opaque_id": {
|
||||
"type": "string",
|
||||
"pattern": "^%user_id_pattern%$"
|
||||
},
|
||||
"type": {
|
||||
"type": "number",
|
||||
"enum": [1]
|
||||
}
|
||||
}
|
||||
},
|
||||
"Space": {
|
||||
"type": "object",
|
||||
"required": [
|
||||
"name",
|
||||
"quota",
|
||||
"space_type"
|
||||
],
|
||||
"properties": {
|
||||
"name": {
|
||||
"type": "string",
|
||||
"enum": ["Alice Hansen"]
|
||||
},
|
||||
"quota": {
|
||||
"type": "object",
|
||||
"required": [
|
||||
"quota_max_bytes",
|
||||
"quota_max_files"
|
||||
],
|
||||
"properties": {
|
||||
"quota_max_bytes": {
|
||||
"type": "number",
|
||||
"enum": [10000]
|
||||
},
|
||||
"quota_max_files": {
|
||||
"type": "number",
|
||||
"enum": [18446744073709552000]
|
||||
}
|
||||
}
|
||||
},
|
||||
"space_type": {
|
||||
"type": "string",
|
||||
"enum": ["personal"]
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
"""
|
||||
|
||||
|
||||
Scenario Outline: user tries to generate GDPR report of other users
|
||||
Given user "Brian" has been created with default attributes and without skeleton files
|
||||
And the administrator has given "Alice" the role "<userRole>" using the settings api
|
||||
And the administrator has given "Brian" the role "<role>" using the settings api
|
||||
When user "Alice" tries to export GDPR report of user "Brian" to "/.personal_data_export.json" using Graph API
|
||||
Then the HTTP status code should be "400"
|
||||
Examples:
|
||||
| userRole | role |
|
||||
| Space Admin | Space Admin |
|
||||
| Space Admin | User |
|
||||
| Space Admin | Guest |
|
||||
| Space Admin | Admin |
|
||||
| User | Space Admin |
|
||||
| User | User |
|
||||
| User | Guest |
|
||||
| User | Admin |
|
||||
| Guest | Space Admin |
|
||||
| Guest | User |
|
||||
| Guest | Guest |
|
||||
| Guest | Admin |
|
||||
| Admin | Space Admin |
|
||||
| Admin | User |
|
||||
| Admin | Guest |
|
||||
| Admin | Admin |
|
||||
|
||||
@@ -2389,4 +2389,28 @@ class GraphContext implements Context {
|
||||
$this->featureContext->getJSONSchema($schemaString)
|
||||
);
|
||||
}
|
||||
|
||||
/**
|
||||
* @When user :user tries to export GDPR report of user :ofUser to :path using Graph API
|
||||
*
|
||||
* @param string $user
|
||||
* @param string $ofUser
|
||||
* @param string $path
|
||||
*
|
||||
* @return void
|
||||
*
|
||||
*/
|
||||
public function userTriesToExportGdprReportOfAnotherUserUsingGraphApi(string $user, string $ofUser, string $path): void {
|
||||
$credentials = $this->getAdminOrUserCredentials($user);
|
||||
$this->featureContext->setResponse(
|
||||
GraphHelper::generateGDPRReport(
|
||||
$this->featureContext->getBaseUrl(),
|
||||
$this->featureContext->getStepLineRef(),
|
||||
$credentials['username'],
|
||||
$credentials['password'],
|
||||
$this->featureContext->getAttributeOfCreatedUser($ofUser, 'id'),
|
||||
$path
|
||||
)
|
||||
);
|
||||
}
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user