2020-01-01 13:55:28 +05:30
|
|
|
# frozen_string_literal: true
|
|
|
|
|
2016-09-29 09:46:39 +05:30
|
|
|
require 'spec_helper'
|
|
|
|
|
|
|
|
# Part of the test security suite for the Import/Export feature
|
|
|
|
# Checks whether there are new attributes in models that are currently being exported as part of the
|
|
|
|
# project Import/Export feature.
|
|
|
|
# If there are new attributes, these will have to either be added to this spec in case we want them
|
|
|
|
# to be included as part of the export, or blacklist them using the import_export.yml configuration file.
|
|
|
|
# Likewise, new models added to import_export.yml, will need to be added with their correspondent attributes
|
|
|
|
# to this spec.
|
2017-09-10 17:25:29 +05:30
|
|
|
describe 'Import/Export attribute configuration' do
|
2016-09-29 09:46:39 +05:30
|
|
|
include ConfigurationHelper
|
|
|
|
|
|
|
|
let(:safe_attributes_file) { 'spec/lib/gitlab/import_export/safe_model_attributes.yml' }
|
|
|
|
let(:safe_model_attributes) { YAML.load_file(safe_attributes_file) }
|
|
|
|
|
|
|
|
it 'has no new columns' do
|
2020-01-01 13:55:28 +05:30
|
|
|
relation_names_for(:project).each do |relation_name|
|
2016-09-29 09:46:39 +05:30
|
|
|
relation_class = relation_class_for_name(relation_name)
|
2019-07-31 22:56:46 +05:30
|
|
|
relation_attributes = relation_class.new.attributes.keys - relation_class.encrypted_attributes.keys.map(&:to_s)
|
2016-09-29 09:46:39 +05:30
|
|
|
|
2016-11-03 12:29:30 +05:30
|
|
|
current_attributes = parsed_attributes(relation_name, relation_attributes)
|
2018-12-13 13:39:08 +05:30
|
|
|
safe_attributes = safe_model_attributes[relation_class.to_s].dup || []
|
|
|
|
|
|
|
|
expect(safe_attributes).not_to be_nil, "Expected exported class #{relation_class} to exist in safe_model_attributes"
|
|
|
|
|
2016-09-29 09:46:39 +05:30
|
|
|
new_attributes = current_attributes - safe_attributes
|
|
|
|
|
|
|
|
expect(new_attributes).to be_empty, failure_message(relation_class.to_s, new_attributes)
|
|
|
|
end
|
|
|
|
end
|
|
|
|
|
|
|
|
def failure_message(relation_class, new_attributes)
|
|
|
|
<<-MSG
|
|
|
|
It looks like #{relation_class}, which is exported using the project Import/Export, has new attributes: #{new_attributes.join(',')}
|
|
|
|
|
|
|
|
Please add the attribute(s) to SAFE_MODEL_ATTRIBUTES if you consider this can be exported.
|
2019-09-04 21:01:54 +05:30
|
|
|
Please blacklist the attribute(s) in IMPORT_EXPORT_CONFIG by adding it to its correspondent
|
2016-09-29 09:46:39 +05:30
|
|
|
model in the +excluded_attributes+ section.
|
|
|
|
|
|
|
|
SAFE_MODEL_ATTRIBUTES: #{File.expand_path(safe_attributes_file)}
|
|
|
|
IMPORT_EXPORT_CONFIG: #{Gitlab::ImportExport.config_file}
|
|
|
|
MSG
|
|
|
|
end
|
|
|
|
|
|
|
|
class Author < User
|
|
|
|
end
|
|
|
|
end
|