Revize afdd306f

Added Super Admin user

re #9790

backend/src/test/java/cz/zcu/kiv/backendapi/user/UserServiceImplTest.java

@@ -177 +177 @@
         verify(userRepository, never()).save(any());
     }
 
+    @Test
+    void testCanNotUpdatePermissionsAdmin() {
+        // given
+        String email = "[e-mail]";
+        UserEntity userEntity = new UserEntity("John Doe", email, "", (byte) 0, true);
+        PermissionDto permissionDto = new PermissionDto();
+        given(userRepository.findByEmail(email)).willReturn(Optional.of(userEntity));
+
+        // when
+        assertThatThrownBy(() -> underTest.updatePermissions(email, permissionDto))
+                .isInstanceOf(ApiRequestException.class)
+                .hasMessageContaining("Permissions for user with ADMIN rights can not be changed");
+
+        // then
+        verify(userRepository, never()).delete(any());
+    }
+
     @Test
     void testCanResetPassword() {
         // given
@@ -216 +233 @@
         verify(userRepository, never()).save(any());
     }
 
+    @Test
+    void testCanNotResetSuperAdminPassword() {
+        // given
+        String email = "[e-mail]";
+        String newPassword = "password123";
+
+        // when
+        // then
+        assertThatThrownBy(() -> underTest.resetPassword(email, newPassword))
+                .isInstanceOf(ApiRequestException.class)
+                .hasMessageContaining("Password for SUPER ADMIN can not be changed");
+
+        verify(userRepository, never()).save(any());
+        verify(userRepository, never()).findByEmail(any());
+    }
+
     @Test
     void testCanDeleteUser() {
         // given
@@ -267 +300 @@
         UserEntity userEntity1 = new UserEntity("first", "[e-mail]", "password", (byte) 0, false);
         UserEntity userEntity2 = new UserEntity("second", "[e-mail]", "password2", (byte) 1, false);
         UserEntity userEntity3 = new UserEntity("third", "[e-mail]", "password3", (byte) 7, true);
+        UserEntity userEntity4 = new UserEntity("SuperAdmin", "[e-mail]", "password3", (byte) 7, true);
 
         UserDto userDto1 = new UserDto("first", "[e-mail]", new PermissionDto(), null);
         UserDto userDto2 = new UserDto("second", "[e-mail]", new PermissionDto(true, false, false), null);
         UserDto userDto3 = new UserDto("third", "[e-mail]", new PermissionDto(true, true, true), null);
 
-        given(userRepository.findAll()).willReturn(List.of(userEntity1, userEntity2, userEntity3));
+        given(userRepository.findAll()).willReturn(List.of(userEntity1, userEntity2, userEntity3, userEntity4));
 
         // when
         List<UserDto> allUsers = underTest.getAllUsers();
@@ -344 +378 @@
 
         verify(userRepository, never()).save(any());
     }
+
+    @Test
+    void testCanNotChangePasswordSuperAdmin() {
+        // given
+        String email = "[e-mail]";
+        String oldPassword = "password";
+        String newPassword = "password123";
+        UserEntity userEntity = new UserEntity("John Doe", email, bCryptPasswordEncoder.encode(oldPassword), (byte) 7, true);
+        SecurityContext securityContext = mock(SecurityContext.class);
+        Authentication authentication = mock(Authentication.class);
+        given(securityContext.getAuthentication()).willReturn(authentication);
+        SecurityContextHolder.setContext(securityContext);
+        UsernamePasswordAuthenticationToken authenticationToken = new UsernamePasswordAuthenticationToken(email, null, Collections.emptySet());
+        SecurityContextHolder.getContext().setAuthentication(authenticationToken);
+        given(SecurityContextHolder.getContext().getAuthentication().getPrincipal()).willReturn(email);
+        given(userRepository.findByEmail(email)).willReturn(Optional.of(userEntity));
+
+        // when
+        // then
+        assertThatThrownBy(() -> underTest.changePassword(oldPassword, newPassword))
+                .isInstanceOf(ApiRequestException.class)
+                .hasMessageContaining("Can not change password for SUPER ADMIN");
+
+        verify(userRepository, never()).save(any());
+    }
 }