-
Notifications
You must be signed in to change notification settings - Fork 26
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
1 parent
e8d3a6c
commit 780c23d
Showing
3 changed files
with
135 additions
and
16 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
115 changes: 115 additions & 0 deletions
115
tests/functional/adapter/grants/test_roles_model_grants.py
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,115 @@ | ||
| import pytest, os | ||
| from dbt.tests.adapter.grants.test_model_grants import ( | ||
| BaseModelGrants, | ||
| user2_model_schema_yml, | ||
| user2_table_model_schema_yml, | ||
| table_model_schema_yml, | ||
| multiple_users_table_model_schema_yml, | ||
| multiple_privileges_table_model_schema_yml, | ||
| ) | ||
| from dbt.tests.util import ( | ||
| run_dbt, | ||
| get_manifest, | ||
| write_file, | ||
| get_connection, | ||
| run_dbt_and_capture | ||
| ) | ||
| from tests.functional.adapter.grants.base_grants import BaseGrantsDremio | ||
| from tests.utils.util import relation_from_name | ||
|
|
||
| TEST_ROLE_ENV_VARS = ["DBT_TEST_ROLE_1", "DBT_TEST_ROLE_2"] | ||
|
|
||
| my_model_sql = """ | ||
| select 1 as fun | ||
| """ | ||
|
|
||
| role1_model_schema_yml = """ | ||
| version: 2 | ||
| models: | ||
| - name: my_model | ||
| config: | ||
| grants: | ||
| select: ["role:{{ env_var('DBT_TEST_ROLE_1') }}"] | ||
| """ | ||
|
|
||
| multiple_roles_model_schema_yml = """ | ||
| version: 2 | ||
| models: | ||
| - name: my_model | ||
| config: | ||
| grants: | ||
| select: ["role:{{ env_var('DBT_TEST_ROLE_1') }}", "role:{{ env_var('DBT_TEST_ROLE_2') }}"] | ||
| """ | ||
|
|
||
| users_and_roles_model_schema_yml = """ | ||
| version: 2 | ||
| models: | ||
| - name: my_model | ||
| config: | ||
| grants: | ||
| select: ["user:{{ env_var('DBT_TEST_USER_1') }}", "user:{{ env_var('DBT_TEST_USER_2') }}", "role:{{ env_var('DBT_TEST_ROLE_1') }}", "role:{{ env_var('DBT_TEST_ROLE_2') }}"] | ||
| """ | ||
|
|
||
| class TestViewRolesGrantsDremio(BaseGrantsDremio, BaseModelGrants): | ||
| @pytest.fixture(scope="class", autouse=True) | ||
| def get_test_roles(self, project): | ||
| test_roles = [] | ||
| for env_var in TEST_ROLE_ENV_VARS: | ||
| role = os.getenv(env_var) | ||
| if role: | ||
| test_roles.append(role) | ||
| return test_roles | ||
|
|
||
| def test_view_role1_grants(self, project, get_test_roles): | ||
| test_roles = get_test_roles | ||
| select_privilege_name = self.privilege_grantee_name_overrides()["select"] | ||
| assert len(test_roles) == 2 | ||
|
|
||
| # View materialization, single select grant | ||
| updated_yaml = self.interpolate_name_overrides(role1_model_schema_yml) | ||
| write_file(updated_yaml, project.project_root, "models", "schema.yml") | ||
| (results, log_output) = run_dbt_and_capture(["--debug", "run"]) | ||
| assert len(results) == 1 | ||
| manifest = get_manifest(project.project_root) | ||
| model_id = "model.test.my_model" | ||
| model = manifest.nodes[model_id] | ||
| assert model.config.materialized == "view" | ||
| expected = {select_privilege_name: ["role:" + test_roles[0]]} | ||
| self.assert_expected_grants_match_actual(project, "my_model", expected) | ||
|
|
||
| def test_view_multiple_roles_grants(self, project, get_test_roles): | ||
| test_roles = get_test_roles | ||
| select_privilege_name = self.privilege_grantee_name_overrides()["select"] | ||
| assert len(test_roles) == 2 | ||
|
|
||
| # View materialization, single select grant | ||
| updated_yaml = self.interpolate_name_overrides(multiple_roles_model_schema_yml) | ||
| write_file(updated_yaml, project.project_root, "models", "schema.yml") | ||
| (results, log_output) = run_dbt_and_capture(["--debug", "run"]) | ||
| assert len(results) == 1 | ||
| manifest = get_manifest(project.project_root) | ||
| model_id = "model.test.my_model" | ||
| model = manifest.nodes[model_id] | ||
| assert model.config.materialized == "view" | ||
| expected = {select_privilege_name: ["role:" + test_roles[0], "role:" + test_roles[1]]} | ||
| self.assert_expected_grants_match_actual(project, "my_model", expected) | ||
|
|
||
| def test_view_multiple_users_and_roles(self, project, get_test_users, get_test_roles): | ||
| test_users = get_test_users | ||
| assert len(test_users) == 3 | ||
| test_roles = get_test_roles | ||
| assert len(test_roles) == 2 | ||
|
|
||
| select_privilege_name = self.privilege_grantee_name_overrides()["select"] | ||
|
|
||
| # View materialization, multiple select grants | ||
| updated_yaml = self.interpolate_name_overrides(users_and_roles_model_schema_yml) | ||
| write_file(updated_yaml, project.project_root, "models", "schema.yml") | ||
| (results, log_output) = run_dbt_and_capture(["--debug", "run"]) | ||
| assert len(results) == 1 | ||
| manifest = get_manifest(project.project_root) | ||
| model_id = "model.test.my_model" | ||
| model = manifest.nodes[model_id] | ||
| assert model.config.materialized == "view" | ||
| expected = {select_privilege_name: ["user:" + test_users[0], "user:" + test_users[1], "role:" + test_roles[0], "role:" + test_roles[1]]} | ||
| self.assert_expected_grants_match_actual(project, "my_model", expected) |