opensearch-dashboards-functional-test/cypress/integration/plugins/reports-dashboards/05-security.spec.js at ab759f34c4be04933255c0b453921052d42e572f · opensearch-project/opensearch-dashboards-functional-test · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
/*
 * Copyright OpenSearch Contributors
 * SPDX-License-Identifier: Apache-2.0
 */

import { BASE_PATH } from '../../../utils/constants';

if (Cypress.env('SECURITY_ENABLED')) {
  describe('Reporting Security - Internal User with reports_full_access', () => {
    const username = 'reportuser';
    const password = 'TestPassword123!';
    const roleName = `reports_full_access_${Math.random()
      .toString(36)
      .substring(2, 10)}`;

    it('creates a new internal user', () => {
      cy.visit(`${BASE_PATH}/app/security-dashboards-plugin#/users`);
      cy.contains('Internal users');
      cy.get('a[href="#/users/create"]').click({ force: true });

      cy.get('input[data-test-subj="name-text"]').type(username);
      cy.get('input[data-test-subj="password"]').type(password);
      cy.get('input[data-test-subj="re-enter-password"]').type(password);
      cy.get('button').contains('Create').click();

      cy.contains(username).should('exist');
    });

    it('creates a new role with reports_full_access permissions', () => {
      Cypress.on('uncaught:exception', () => {
        return false;
      });

      cy.visit(`${BASE_PATH}/app/security-dashboards-plugin#/roles/create`);

      cy.get('input[data-test-subj="name-text"]').type(roleName);

      const permissions = [
        'cluster:admin/opendistro/reports/definition/create',
        'cluster:admin/opendistro/reports/definition/delete',
        'cluster:admin/opendistro/reports/definition/get',
        'cluster:admin/opendistro/reports/definition/list',
        'cluster:admin/opendistro/reports/definition/on_demand',
        'cluster:admin/opendistro/reports/definition/update',
        'cluster:admin/opendistro/reports/instance/get',
        'cluster:admin/opendistro/reports/instance/list',
        'cluster:admin/opendistro/reports/menu/download',
      ];

      permissions.forEach((perm) => {
        cy.get('input[data-test-subj="comboBoxSearchInput"]')
          .eq(0)
          .type(`${perm}{downArrow}{enter}`);
      });

      cy.get('button').contains('Create').click();
      cy.contains(roleName).should('exist');
    });

    it('maps the user to the reports_full_access role', () => {
      cy.visit(
        `${BASE_PATH}/app/security-dashboards-plugin#/roles/edit/${roleName}/mapuser`
      );
      cy.contains('Map users');

      cy.get('div[data-test-subj="comboBoxInput"]').type(username);
      cy.get('button[id="map"]').click();

      cy.contains(username).should('exist');
    });

    it('verifies the user can access reporting', () => {
      cy.visit(`${BASE_PATH}/logout`);
      cy.visit(BASE_PATH);

      cy.get('input[name="username"]', { timeout: 10000 }).should('be.visible').type(username);
      cy.get('input[name="password"]').type(password);
      cy.get('button[type="submit"]').click();

      cy.visit(`${BASE_PATH}/app/reports-dashboards#/`);
      cy.contains('Reporting').should('exist');
      cy.get('#createReportHomepageButton').should('exist').click();
      cy.contains('Create new report').should('exist');
    });
  });
}