mirror of
https://github.com/ClickHouse/ClickHouse.git
synced 2024-11-26 09:32:01 +00:00
83 lines
2.3 KiB
Python
83 lines
2.3 KiB
Python
import pytest
|
|
import uuid
|
|
from helpers.cluster import ClickHouseCluster
|
|
|
|
cluster = ClickHouseCluster(__file__)
|
|
instance = cluster.add_instance("instance", stay_alive=True)
|
|
|
|
|
|
@pytest.fixture(scope="module", autouse=True)
|
|
def started_cluster():
|
|
try:
|
|
cluster.start()
|
|
yield cluster
|
|
|
|
finally:
|
|
cluster.shutdown()
|
|
|
|
|
|
def test_access_rights_for_function():
|
|
create_function_query = "CREATE FUNCTION MySum AS (a, b) -> a + b"
|
|
|
|
instance.query("CREATE USER A")
|
|
instance.query("CREATE USER B")
|
|
assert (
|
|
"it's necessary to have the grant CREATE FUNCTION ON *.*"
|
|
in instance.query_and_get_error(create_function_query, user="A")
|
|
)
|
|
|
|
instance.query("GRANT CREATE FUNCTION on *.* TO A")
|
|
|
|
instance.query(create_function_query, user="A")
|
|
assert instance.query("SELECT MySum(1, 2)") == "3\n"
|
|
|
|
assert (
|
|
"it's necessary to have the grant DROP FUNCTION ON *.*"
|
|
in instance.query_and_get_error("DROP FUNCTION MySum", user="B")
|
|
)
|
|
|
|
instance.query("GRANT DROP FUNCTION ON *.* TO B")
|
|
instance.query("DROP FUNCTION MySum", user="B")
|
|
|
|
function_resolution_error = instance.query_and_get_error("SELECT MySum(1, 2)")
|
|
assert (
|
|
"Unknown function MySum" in function_resolution_error
|
|
or "Function with name `MySum` does not exist." in function_resolution_error
|
|
)
|
|
|
|
instance.query("REVOKE CREATE FUNCTION ON *.* FROM A")
|
|
assert (
|
|
"it's necessary to have the grant CREATE FUNCTION ON *.*"
|
|
in instance.query_and_get_error(create_function_query, user="A")
|
|
)
|
|
|
|
instance.query("DROP USER IF EXISTS A")
|
|
instance.query("DROP USER IF EXISTS B")
|
|
|
|
|
|
def test_ignore_obsolete_grant_on_database():
|
|
instance.stop_clickhouse()
|
|
|
|
user_id = uuid.uuid4()
|
|
instance.exec_in_container(
|
|
[
|
|
"bash",
|
|
"-c",
|
|
f"""
|
|
cat > /var/lib/clickhouse/access/{user_id}.sql << EOF
|
|
ATTACH USER \`{user_id}\`;
|
|
ATTACH GRANT CREATE FUNCTION, SELECT ON mydb.* TO \`{user_id}\`;
|
|
EOF""",
|
|
]
|
|
)
|
|
|
|
instance.exec_in_container(
|
|
["bash", "-c", "touch /var/lib/clickhouse/access/need_rebuild_lists.mark"]
|
|
)
|
|
instance.start_clickhouse()
|
|
|
|
assert (
|
|
instance.query(f"SHOW GRANTS FOR `{user_id}`")
|
|
== f"GRANT SELECT ON mydb.* TO `{user_id}`\n"
|
|
)
|