|
1 # 2006 Aug 24 |
|
2 # |
|
3 # The author disclaims copyright to this source code. In place of |
|
4 # a legal notice, here is a blessing: |
|
5 # |
|
6 # May you do good and not evil. |
|
7 # May you find forgiveness for yourself and forgive others. |
|
8 # May you share freely, never taking more than you give. |
|
9 # |
|
10 #*********************************************************************** |
|
11 # This file implements regression tests for SQLite library. The |
|
12 # focus of this script is testing the sqlite3_set_authorizer() API |
|
13 # and related functionality. |
|
14 # |
|
15 # $Id: auth2.test,v 1.3 2008/07/02 13:13:53 danielk1977 Exp $ |
|
16 # |
|
17 |
|
18 set testdir [file dirname $argv0] |
|
19 source $testdir/tester.tcl |
|
20 |
|
21 # disable this test if the SQLITE_OMIT_AUTHORIZATION macro is |
|
22 # defined during compilation. |
|
23 if {[catch {db auth {}} msg]} { |
|
24 finish_test |
|
25 return |
|
26 } |
|
27 |
|
28 do_test auth2-1.1 { |
|
29 execsql { |
|
30 CREATE TABLE t1(a,b,c); |
|
31 INSERT INTO t1 VALUES(1,2,3); |
|
32 } |
|
33 set ::flist {} |
|
34 proc auth {code arg1 arg2 arg3 arg4} { |
|
35 if {$code=="SQLITE_FUNCTION"} { |
|
36 lappend ::flist $arg2 |
|
37 if {$arg2=="max"} { |
|
38 return SQLITE_DENY |
|
39 } elseif {$arg2=="min"} { |
|
40 return SQLITE_IGNORE |
|
41 } else { |
|
42 return SQLITE_OK |
|
43 } |
|
44 } |
|
45 return SQLITE_OK |
|
46 } |
|
47 db authorizer ::auth |
|
48 catchsql {SELECT max(a,b,c) FROM t1} |
|
49 } {1 {not authorized to use function: max}} |
|
50 do_test auth2-1.2 { |
|
51 set ::flist |
|
52 } max |
|
53 do_test auth2-1.3 { |
|
54 set ::flist {} |
|
55 catchsql {SELECT min(a,b,c) FROM t1} |
|
56 } {0 {{}}} |
|
57 do_test auth2-1.4 { |
|
58 set ::flist |
|
59 } min |
|
60 do_test auth2-1.5 { |
|
61 set ::flist {} |
|
62 catchsql {SELECT coalesce(min(a,b,c),999) FROM t1} |
|
63 } {0 999} |
|
64 do_test auth2-1.6 { |
|
65 set ::flist |
|
66 } {coalesce min} |
|
67 do_test auth2-1.7 { |
|
68 set ::flist {} |
|
69 catchsql {SELECT coalesce(a,b,c) FROM t1} |
|
70 } {0 1} |
|
71 do_test auth2-1.8 { |
|
72 set ::flist |
|
73 } coalesce |
|
74 |
|
75 # Make sure the authorizer is not called when parsing the schema |
|
76 # and when computing the result set of a view. |
|
77 # |
|
78 db close |
|
79 sqlite3 db test.db |
|
80 sqlite3 db2 test.db |
|
81 proc auth {args} { |
|
82 global authargs |
|
83 append authargs $args\n |
|
84 return SQLITE_OK |
|
85 } |
|
86 db auth auth |
|
87 do_test auth2-2.1 { |
|
88 set ::authargs {} |
|
89 db eval { |
|
90 CREATE TABLE t2(x,y,z); |
|
91 } |
|
92 set ::authargs |
|
93 } {SQLITE_INSERT sqlite_master {} main {} |
|
94 SQLITE_CREATE_TABLE t2 {} main {} |
|
95 SQLITE_UPDATE sqlite_master type main {} |
|
96 SQLITE_UPDATE sqlite_master name main {} |
|
97 SQLITE_UPDATE sqlite_master tbl_name main {} |
|
98 SQLITE_UPDATE sqlite_master rootpage main {} |
|
99 SQLITE_UPDATE sqlite_master sql main {} |
|
100 SQLITE_READ sqlite_master ROWID main {} |
|
101 SQLITE_READ sqlite_master name main {} |
|
102 SQLITE_READ sqlite_master rootpage main {} |
|
103 SQLITE_READ sqlite_master sql main {} |
|
104 SQLITE_READ sqlite_master tbl_name main {} |
|
105 } |
|
106 do_test auth2-2.2 { |
|
107 set ::authargs {} |
|
108 db eval { |
|
109 CREATE VIEW v2 AS SELECT x+y AS a, y+z AS b from t2; |
|
110 } |
|
111 set ::authargs |
|
112 } {SQLITE_INSERT sqlite_master {} main {} |
|
113 SQLITE_CREATE_VIEW v2 {} main {} |
|
114 SQLITE_UPDATE sqlite_master type main {} |
|
115 SQLITE_UPDATE sqlite_master name main {} |
|
116 SQLITE_UPDATE sqlite_master tbl_name main {} |
|
117 SQLITE_UPDATE sqlite_master rootpage main {} |
|
118 SQLITE_UPDATE sqlite_master sql main {} |
|
119 SQLITE_READ sqlite_master ROWID main {} |
|
120 SQLITE_READ sqlite_master name main {} |
|
121 SQLITE_READ sqlite_master rootpage main {} |
|
122 SQLITE_READ sqlite_master sql main {} |
|
123 SQLITE_READ sqlite_master tbl_name main {} |
|
124 } |
|
125 do_test auth2-2.3 { |
|
126 set ::authargs {} |
|
127 db eval { |
|
128 SELECT a, b FROM v2; |
|
129 } |
|
130 set ::authargs |
|
131 } {SQLITE_SELECT {} {} {} {} |
|
132 SQLITE_READ v2 a main {} |
|
133 SQLITE_READ v2 b main {} |
|
134 SQLITE_READ t2 x main v2 |
|
135 SQLITE_READ t2 y main v2 |
|
136 SQLITE_READ t2 y main v2 |
|
137 SQLITE_READ t2 z main v2 |
|
138 SQLITE_SELECT {} {} {} v2 |
|
139 } |
|
140 do_test auth2-2.4 { |
|
141 db2 eval { |
|
142 CREATE TABLE t3(p,q,r); |
|
143 } |
|
144 set ::authargs {} |
|
145 db eval { |
|
146 SELECT b, a FROM v2; |
|
147 } |
|
148 set ::authargs |
|
149 } {SQLITE_SELECT {} {} {} {} |
|
150 SQLITE_READ v2 b main {} |
|
151 SQLITE_READ v2 a main {} |
|
152 SQLITE_READ t2 x main v2 |
|
153 SQLITE_READ t2 y main v2 |
|
154 SQLITE_READ t2 y main v2 |
|
155 SQLITE_READ t2 z main v2 |
|
156 SQLITE_SELECT {} {} {} v2 |
|
157 SQLITE_SELECT {} {} {} {} |
|
158 SQLITE_READ v2 b main {} |
|
159 SQLITE_READ v2 a main {} |
|
160 SQLITE_READ t2 x main v2 |
|
161 SQLITE_READ t2 y main v2 |
|
162 SQLITE_READ t2 y main v2 |
|
163 SQLITE_READ t2 z main v2 |
|
164 SQLITE_SELECT {} {} {} v2 |
|
165 } |
|
166 db2 close |
|
167 |
|
168 finish_test |