mirror of
https://github.com/MODSetter/SurfSense.git
synced 2026-06-18 21:15:16 +02:00
chore: linting
This commit is contained in:
parent
4b8a2f9726
commit
b89866541e
10 changed files with 42 additions and 59 deletions
|
|
@ -23,6 +23,7 @@ import time
|
|||
from collections.abc import Sequence
|
||||
|
||||
import sqlalchemy as sa
|
||||
|
||||
from alembic import op
|
||||
|
||||
revision: str = "164"
|
||||
|
|
|
|||
|
|
@ -16,6 +16,7 @@ import time
|
|||
from collections.abc import Sequence
|
||||
|
||||
import sqlalchemy as sa
|
||||
|
||||
from alembic import op
|
||||
|
||||
revision: str = "165"
|
||||
|
|
|
|||
|
|
@ -15,6 +15,7 @@ boundary.
|
|||
|
||||
from __future__ import annotations
|
||||
|
||||
import contextlib
|
||||
import uuid
|
||||
from unittest.mock import AsyncMock, patch
|
||||
|
||||
|
|
@ -97,14 +98,16 @@ class TestConnectorIndexCrossSpaceAuthz:
|
|||
db_session, victim, space_a, SearchSourceConnectorType.GITHUB_CONNECTOR
|
||||
)
|
||||
|
||||
with patch(_CHECK_PERMISSION, new=AsyncMock()) as check_permission_mock:
|
||||
with pytest.raises(HTTPException) as exc_info:
|
||||
await index_connector_content(
|
||||
connector_id=connector_a.id,
|
||||
search_space_id=space_b.id, # the attacker's own space
|
||||
session=db_session,
|
||||
user=attacker,
|
||||
)
|
||||
with (
|
||||
patch(_CHECK_PERMISSION, new=AsyncMock()) as check_permission_mock,
|
||||
pytest.raises(HTTPException) as exc_info,
|
||||
):
|
||||
await index_connector_content(
|
||||
connector_id=connector_a.id,
|
||||
search_space_id=space_b.id, # the attacker's own space
|
||||
session=db_session,
|
||||
user=attacker,
|
||||
)
|
||||
|
||||
assert exc_info.value.status_code == 404
|
||||
# Rejected at the search-space reconciliation, never reaching (or relying
|
||||
|
|
@ -124,18 +127,18 @@ class TestConnectorIndexCrossSpaceAuthz:
|
|||
db_session, owner, space, SearchSourceConnectorType.CLICKUP_CONNECTOR
|
||||
)
|
||||
|
||||
with patch(_CHECK_PERMISSION, new=AsyncMock()) as check_permission_mock:
|
||||
try:
|
||||
await index_connector_content(
|
||||
connector_id=connector.id,
|
||||
search_space_id=space.id, # the connector's own space
|
||||
session=db_session,
|
||||
user=owner,
|
||||
)
|
||||
except Exception:
|
||||
# Any downstream indexing behaviour is irrelevant to the authz
|
||||
# contract under test; we only assert what space was authorized.
|
||||
pass
|
||||
# Any downstream indexing behaviour is irrelevant to the authz contract
|
||||
# under test; we only assert what space was authorized.
|
||||
with (
|
||||
patch(_CHECK_PERMISSION, new=AsyncMock()) as check_permission_mock,
|
||||
contextlib.suppress(Exception),
|
||||
):
|
||||
await index_connector_content(
|
||||
connector_id=connector.id,
|
||||
search_space_id=space.id, # the connector's own space
|
||||
session=db_session,
|
||||
user=owner,
|
||||
)
|
||||
|
||||
check_permission_mock.assert_awaited_once()
|
||||
# The space passed to check_permission must be the connector's own space.
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue