Re: [Freeipa-devel] [PATCH] 0007 Add command to test HBAC rules

2011-07-29 Thread Alexander Bokovoy
On 29.07.2011 07:41, Rob Crittenden wrote: Alexander Bokovoy wrote: On 29.07.2011 06:38, Alexander Bokovoy wrote: Fixed that all and added unit test for non-existing rules. Modified description to be more detailed and added real examples. Scratch previous version, while nicely renaming unit

Re: [Freeipa-devel] [PATCH] 0007 Add command to test HBAC rules

2011-07-29 Thread Rob Crittenden
Alexander Bokovoy wrote: On 29.07.2011 07:41, Rob Crittenden wrote: Alexander Bokovoy wrote: On 29.07.2011 06:38, Alexander Bokovoy wrote: Fixed that all and added unit test for non-existing rules. Modified description to be more detailed and added real examples. Scratch previous version,

Re: [Freeipa-devel] [PATCH] 0007 Add command to test HBAC rules

2011-07-28 Thread Rob Crittenden
Alexander Bokovoy wrote: On 27.07.2011 18:37, Jakub Hrozek wrote: On 07/27/2011 03:12 PM, Alexander Bokovoy wrote: +for ipa_rule in rules: +try: +res = request.evaluate([ipa_rule]) +if res == pyhbac.HBAC_EVAL_ALLOW: +

Re: [Freeipa-devel] [PATCH] 0007 Add command to test HBAC rules

2011-07-28 Thread Alexander Bokovoy
On 29.07.2011 06:38, Alexander Bokovoy wrote: Fixed that all and added unit test for non-existing rules. Modified description to be more detailed and added real examples. Scratch previous version, while nicely renaming unit tests before commit and after patch testing I didn't keep right order of

Re: [Freeipa-devel] [PATCH] 0007 Add command to test HBAC rules

2011-07-28 Thread Rob Crittenden
Alexander Bokovoy wrote: On 29.07.2011 06:38, Alexander Bokovoy wrote: Fixed that all and added unit test for non-existing rules. Modified description to be more detailed and added real examples. Scratch previous version, while nicely renaming unit tests before commit and after patch testing I

[Freeipa-devel] [PATCH] 0007 Add command to test HBAC rules

2011-07-27 Thread Alexander Bokovoy
On 26.07.2011 22:55, Dmitri Pal wrote: The tests imply that there are deny rules. We removed them so very soon there would be no deny rules. Should the results of the test show something like: -- Access granted : True -- Granted by:

Re: [Freeipa-devel] [PATCH] 0007 Add command to test HBAC rules

2011-07-27 Thread Jakub Hrozek
On 07/27/2011 03:12 PM, Alexander Bokovoy wrote: +for ipa_rule in rules: +try: +res = request.evaluate([ipa_rule]) +if res == pyhbac.HBAC_EVAL_ALLOW: +matched_rules.append(ipa_rule.name) +