-
Notifications
You must be signed in to change notification settings - Fork 961
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
[backend] Fix missing System and Individual in shared report (#8333)
- Loading branch information
1 parent
dae148d
commit f65806d
Showing
7 changed files
with
333 additions
and
20 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
138 changes: 138 additions & 0 deletions
138
...i-platform/opencti-graphql/tests/02-integration/02-resolvers/organization-sharing-test.ts
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,138 @@ | ||
| import { describe, expect, it } from 'vitest'; | ||
| import gql from 'graphql-tag'; | ||
| import { | ||
| ADMIN_API_TOKEN, | ||
| ADMIN_USER, | ||
| API_URI, | ||
| FIVE_MINUTES, | ||
| getOrganizationIdByName, | ||
| PLATFORM_ORGANIZATION, | ||
| PYTHON_PATH, | ||
| TEST_ORGANIZATION, | ||
| testContext, | ||
| USER_EDITOR | ||
| } from '../../utils/testQuery'; | ||
| import { adminQueryWithSuccess, enableCEAndUnSetOrganization, enableEEAndSetOrganization, queryAsUserWithSuccess } from '../../utils/testQueryHelper'; | ||
| import { findById } from '../../../src/domain/report'; | ||
| import { execChildPython } from '../../../src/python/pythonBridge'; | ||
| import { taskHandler } from '../../../src/manager/taskManager'; | ||
|
|
||
| const ORGANIZATION_SHARING_QUERY = gql` | ||
| mutation StixCoreObjectSharingGroupAddMutation( | ||
| $id: ID! | ||
| $organizationId: ID! | ||
| ) { | ||
| stixCoreObjectEdit(id: $id) { | ||
| restrictionOrganizationAdd(organizationId: $organizationId) { | ||
| id | ||
| objectOrganization { | ||
| id | ||
| name | ||
| } | ||
| } | ||
| } | ||
| } | ||
| `; | ||
|
|
||
| const REPORT_STIX_DOMAIN_ENTITIES = gql` | ||
| query report($id: String!) { | ||
| report(id: $id) { | ||
| id | ||
| standard_id | ||
| objects(first: 30) { | ||
| edges { | ||
| node { | ||
| ... on BasicObject { | ||
| id | ||
| standard_id | ||
| } | ||
| ... on BasicRelationship { | ||
| id | ||
| standard_id | ||
| } | ||
| } | ||
| } | ||
| } | ||
| } | ||
| } | ||
| `; | ||
|
|
||
| const importOpts: string[] = [API_URI, ADMIN_API_TOKEN, './tests/data/organization-sharing/20241003_Report_to_test_orga_sharing_full.json']; | ||
|
|
||
| describe('Database provision', () => { | ||
| it('Should import creation succeed', async () => { | ||
| // Inject data | ||
| const execution = await execChildPython(testContext, ADMIN_USER, PYTHON_PATH, 'local_importer.py', importOpts); | ||
| expect(execution).not.toBeNull(); | ||
| expect(execution.status).toEqual('success'); | ||
| }, FIVE_MINUTES); | ||
| // Python lib is fixed but we need to wait for a new release | ||
| it('Should import update succeed', async () => { | ||
| const execution = await execChildPython(testContext, ADMIN_USER, PYTHON_PATH, 'local_importer.py', importOpts); | ||
| expect(execution).not.toBeNull(); | ||
| expect(execution.status).toEqual('success'); | ||
| }, FIVE_MINUTES); | ||
| }); | ||
|
|
||
| describe('Organization sharing standard behavior for container', () => { | ||
| let reportInternalId: string; | ||
| let organizationId: string; | ||
| it('should load Report', async () => { | ||
| const report = await findById(testContext, ADMIN_USER, 'report--ce32448d-733b-5e34-ac4f-2759ce5db1ae'); | ||
| expect(report).not.toBeUndefined(); | ||
| reportInternalId = report.id; | ||
| }); | ||
| it('should platform organization sharing and EE activated', async () => { | ||
| await enableEEAndSetOrganization(PLATFORM_ORGANIZATION); | ||
| }); | ||
| it('should user from different organization not access the report', async () => { | ||
| const queryResult = await queryAsUserWithSuccess(USER_EDITOR.client, { | ||
| query: REPORT_STIX_DOMAIN_ENTITIES, | ||
| variables: { id: reportInternalId }, | ||
| }); | ||
| expect(queryResult.data.report).toBeNull(); | ||
| }); | ||
| it('should share Report with Organization', async () => { | ||
| // Get organization id | ||
| organizationId = await getOrganizationIdByName(TEST_ORGANIZATION.name); | ||
| const organizationSharingQueryResult = await adminQueryWithSuccess({ | ||
| query: ORGANIZATION_SHARING_QUERY, | ||
| variables: { id: reportInternalId, organizationId } | ||
| }); | ||
| expect(organizationSharingQueryResult?.data?.stixCoreObjectEdit.restrictionOrganizationAdd).not.toBeNull(); | ||
| expect(organizationSharingQueryResult?.data?.stixCoreObjectEdit.restrictionOrganizationAdd.objectOrganization[0].name).toEqual(TEST_ORGANIZATION.name); | ||
|
|
||
| // Need background task magic to happens for sharing | ||
| await taskHandler(); | ||
| }); | ||
| it('should Editor user access all objects', async () => { | ||
| const queryResult = await queryAsUserWithSuccess(USER_EDITOR.client, { | ||
| query: REPORT_STIX_DOMAIN_ENTITIES, | ||
| variables: { id: reportInternalId }, | ||
| }); | ||
| expect(queryResult.data.report.objects.edges.length).toEqual(8); | ||
| }); | ||
| it('should all entities deleted', async () => { | ||
| const PURGE_QUERY = gql` | ||
| mutation ReportPopoverDeletionMutation( | ||
| $id: ID! | ||
| $purgeElements: Boolean | ||
| ) { | ||
| reportEdit(id: $id) { | ||
| delete(purgeElements: $purgeElements) | ||
| } | ||
| } | ||
| `; | ||
| const purgeQueryResult = await adminQueryWithSuccess({ | ||
| query: PURGE_QUERY, | ||
| variables: { | ||
| id: reportInternalId, | ||
| purgeElements: true | ||
| } | ||
| }); | ||
| expect(purgeQueryResult.data.reportEdit.delete).toEqual(reportInternalId); | ||
| }); | ||
| it('should plateform organization sharing and EE deactivated', async () => { | ||
| await enableCEAndUnSetOrganization(); | ||
| }); | ||
| }); |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.