casbin/enforcer_cached_synced_test.go at master · apache/casbin · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
// Licensed to the Apache Software Foundation (ASF) under one
// or more contributor license agreements.  See the NOTICE file
// distributed with this work for additional information
// regarding copyright ownership.  The ASF licenses this file
// to you under the Apache License, Version 2.0 (the
// "License"); you may not use this file except in compliance
// with the License.  You may obtain a copy of the License at
//
//   http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing,
// software distributed under the License is distributed on an
// "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
// KIND, either express or implied.  See the License for the
// specific language governing permissions and limitations
// under the License.

package casbin

import (
	"sync"
	"testing"
	"time"
)

func testSyncEnforceCache(t *testing.T, e *SyncedCachedEnforcer, sub string, obj interface{}, act string, res bool) {
	t.Helper()
	if myRes, _ := e.Enforce(sub, obj, act); myRes != res {
		t.Errorf("%s, %v, %s: %t, supposed to be %t", sub, obj, act, myRes, res)
	}
}

func TestSyncCache(t *testing.T) {
	e, _ := NewSyncedCachedEnforcer("examples/basic_model.conf", "examples/basic_policy.csv")
	e.expireTime = time.Millisecond
	// The cache is enabled by default for NewCachedEnforcer.
	g := sync.WaitGroup{}
	goThread := 1000
	g.Add(goThread)
	for i := 0; i < goThread; i++ {
		go func() {
			_, _ = e.AddPolicy("alice", "data2", "read")
			testSyncEnforceCache(t, e, "alice", "data2", "read", true)
			if e.InvalidateCache() != nil {
				panic("never reached")
			}
			g.Done()
		}()
	}
	g.Wait()
	_, _ = e.RemovePolicy("alice", "data2", "read")

	testSyncEnforceCache(t, e, "alice", "data1", "read", true)
	time.Sleep(time.Millisecond * 2) // coverage for expire
	testSyncEnforceCache(t, e, "alice", "data1", "read", true)

	testSyncEnforceCache(t, e, "alice", "data1", "write", false)
	testSyncEnforceCache(t, e, "alice", "data2", "read", false)
	testSyncEnforceCache(t, e, "alice", "data2", "write", false)
	// The cache is enabled, calling RemovePolicy, LoadPolicy or RemovePolicies will
	// also operate cached items.
	_, _ = e.RemovePolicy("alice", "data1", "read")

	testSyncEnforceCache(t, e, "alice", "data1", "read", false)
	testSyncEnforceCache(t, e, "alice", "data1", "write", false)
	testSyncEnforceCache(t, e, "alice", "data2", "read", false)
	testSyncEnforceCache(t, e, "alice", "data2", "write", false)

	e, _ = NewSyncedCachedEnforcer("examples/rbac_model.conf", "examples/rbac_policy.csv")

	testSyncEnforceCache(t, e, "alice", "data1", "read", true)
	testSyncEnforceCache(t, e, "bob", "data2", "write", true)
	testSyncEnforceCache(t, e, "alice", "data2", "read", true)
	testSyncEnforceCache(t, e, "alice", "data2", "write", true)

	_, _ = e.RemovePolicies([][]string{
		{"alice", "data1", "read"},
		{"bob", "data2", "write"},
	})

	testSyncEnforceCache(t, e, "alice", "data1", "read", false)
	testSyncEnforceCache(t, e, "bob", "data2", "write", false)
	testSyncEnforceCache(t, e, "alice", "data2", "read", true)
	testSyncEnforceCache(t, e, "alice", "data2", "write", true)
}