1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
|
# Copyright (C) 2006-2010 Canonical Ltd
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
"""Tests for bzr setting permissions.
Files in the branch control directory (.bzr or .bzr/branch) should inherit
the .bzr directory permissions.
So if the directory is group writable, the files and subdirs should be as well.
"""
# TODO: jam 20051215 Currently the default behavior for 'bzr branch' is just
# defined by the local umask. This isn't terrible, is it
# the truly desired behavior?
import os
import sys
import stat
from StringIO import StringIO
from bzrlib import tests
from bzrlib.branch import Branch
from bzrlib.bzrdir import BzrDir
from bzrlib.lockable_files import LockableFiles
from bzrlib.remote import RemoteBranchFormat
from bzrlib.tests.test_permissions import chmod_r, check_mode_r
from bzrlib.tests.test_sftp_transport import TestCaseWithSFTPServer
from bzrlib.workingtree import WorkingTree
class _NullPermsStat(object):
"""A class that proxy's a stat result and strips permissions."""
def __init__(self, orig_stat):
self._orig_stat = orig_stat
# We strip all permission bits from st_mode
self.st_mode = orig_stat.st_mode & ~07777
def __getattr__(self, name):
return getattr(self._orig_stat, name)
class TestPermissions(tests.TestCaseWithTransport):
def test_new_branch(self):
if isinstance(self.branch_format, RemoteBranchFormat):
# Remote branch format have no permission logic in them; there's
# nothing to test here.
raise tests.TestNotApplicable('Remote branches have no'
' permission logic')
if sys.platform == 'win32':
raise tests.TestNotApplicable('chmod has no effect on win32')
# also, these are BzrBranch format specific things..
os.mkdir('a')
mode = stat.S_IMODE(os.stat('a').st_mode)
t = self.make_branch_and_tree('.')
b = t.branch
self.assertEqualMode(mode, b.bzrdir._get_dir_mode())
self.assertEqualMode(mode & ~07111, b.bzrdir._get_file_mode())
self.assertEqualMode(mode, b.control_files._dir_mode)
self.assertEqualMode(mode & ~07111, b.control_files._file_mode)
os.mkdir('d')
os.chmod('d', 0700)
b = self.make_branch('d')
self.assertEqualMode(0700, b.bzrdir._get_dir_mode())
self.assertEqualMode(0600, b.bzrdir._get_file_mode())
self.assertEqualMode(0700, b.control_files._dir_mode)
self.assertEqualMode(0600, b.control_files._file_mode)
check_mode_r(self, 'd/.bzr', 00600, 00700)
def test_new_branch_group_sticky_bit(self):
if isinstance(self.branch_format, RemoteBranchFormat):
# Remote branch format have no permission logic in them; there's
# nothing to test here.
raise tests.TestNotApplicable('Remote branches have no'
' permission logic')
if sys.platform == 'win32':
raise tests.TestNotApplicable('chmod has no effect on win32')
elif sys.platform == 'darwin' or sys.platform.startswith('freebsd'):
# OS X (and FreeBSD) create temp dirs with the 'wheel' group, which
# users are not likely to be in, and this prevents us from setting
# the sgid bit
os.chown(self.test_dir, os.getuid(), os.getgid())
# also, these are BzrBranch format specific things..
t = self.make_branch_and_tree('.')
b = t.branch
os.mkdir('b')
os.chmod('b', 02777)
b = self.make_branch('b')
self.assertEqualMode(02777, b.bzrdir._get_dir_mode())
self.assertEqualMode(00666, b.bzrdir._get_file_mode())
self.assertEqualMode(02777, b.control_files._dir_mode)
self.assertEqualMode(00666, b.control_files._file_mode)
check_mode_r(self, 'b/.bzr', 00666, 02777)
os.mkdir('c')
os.chmod('c', 02750)
b = self.make_branch('c')
self.assertEqualMode(02750, b.bzrdir._get_dir_mode())
self.assertEqualMode(00640, b.bzrdir._get_file_mode())
self.assertEqualMode(02750, b.control_files._dir_mode)
self.assertEqualMode(00640, b.control_files._file_mode)
check_mode_r(self, 'c/.bzr', 00640, 02750)
def test_mode_0(self):
"""Test when a transport returns null permissions for .bzr"""
if isinstance(self.branch_format, RemoteBranchFormat):
# Remote branch format have no permission logic in them; there's
# nothing to test here.
raise tests.TestNotApplicable('Remote branches have no'
' permission logic')
self.make_branch_and_tree('.')
bzrdir = BzrDir.open('.')
# Monkey patch the transport
_orig_stat = bzrdir.transport.stat
def null_perms_stat(*args, **kwargs):
result = _orig_stat(*args, **kwargs)
return _NullPermsStat(result)
bzrdir.transport.stat = null_perms_stat
self.assertIs(None, bzrdir._get_dir_mode())
self.assertIs(None, bzrdir._get_file_mode())
|