--- /dev/null
+*** Settings ***
+Documentation Test suite tests access controll procedures related to accessControlPolicy resource described
+... in OneM2M specifications:
+... TS-0001: 9.6.2 Resource Type accessControlPolicy
+... TS-0004: 7.3.3.15 Check authorization of the originator
+... TS-0003: 7.1 Access Control Mechanism
+Suite Setup Create Session session http://${ODL_SYSTEM_1_IP}:${RESTCONFPORT} auth=${AUTH} headers=${HEADERS_XML}
+Suite Teardown Delete All Sessions
+Library RequestsLibrary
+Library ../../../libraries/Common.py
+Resource ../../../libraries/Utils.robot
+Resource ../../../variables/Variables.robot
+
+*** Variables ***
+
+*** Test Cases ***
+1.01.01 ACP cseBase: Permit: privileges: AE, CRUD
+ [Documentation] Test ACPs of cseBase which are used by target container resource. Test only privileges with single
+ ... accessControlRule with accessControlOriginators set to AE-ID and accessControlOperations set to
+ ... CRUD operations. Test CRUD requests which are permitted by ACP.
+ [Tags] not-implemented exclude
+ TODO
+
+1.01.02 ACP cseBase: Deny: privileges: AE, CRUD
+ [Documentation] Test ACPs of cseBase which are used by target container resource. Test only privileges with single
+ ... accessControlRule with accessControlOriginators set to AE-ID and accessControlOperations set to
+ ... CRUD operations. Test CRUD requests which are denied by ACP due to different request originator
+ ... AE-ID or CSE as originator.
+ [Tags] not-implemented exclude
+ TODO
+
+1.01.03 ACP cseBase: Deny: privileges: AE, other than REQ operations
+ [Documentation] Test ACPs of cseBase which are used by target container resource. Test only privileges with single
+ ... accessControlRule with accessControlOriginators set to AE-ID and accessControlOperations set to
+ ... all operations expect to the operation used in the request.
+ ... Test CRUD requests which are denied by ACP due to non-permitted operation.
+ [Tags] not-implemented exclude
+ TODO
+
+1.01.04 ACP cseBase: Permit: privileges: AE, N
+ [Documentation] Test ACPs of cseBase which are used by target container resource. Test only privileges with single
+ ... accessControlRule with accessControlOriginators set to AE-ID and accessControlOperations set
+ ... to N operation. Test the notification request which is permitted by ACP.
+ [Tags] not-implemented exclude
+ TODO
+
+1.01.05 ACP cseBase: Deny: privileges: AE, N
+ [Documentation] Test ACPs of cseBase which are used by target container resource. Test only privileges with single
+ ... accessControlRule with accessControlOriginators set to AE-ID and accessControlOperations set
+ ... to N operation. Test notify reques which is denied by ACP due to different request originator
+ ... AE-ID or CSE as originator.
+ [Tags] not-implemented exclude
+ TODO
+
+1.01.06 ACP cseBase: Deny: privileges: AE, CRUD + Discovery
+ [Documentation] Test ACPs of cseBase which are used by target container resource. Test only privileges with single
+ ... accessControlRule with accessControlOriginators set to AE-ID and accessControlOperations set
+ ... to CRUD + Discovery operations. Test CRUD + Discovery requests which are denied by ACP because
+ ... the notify operation is not permitted.
+ [Tags] not-implemented exclude
+ TODO
+
+1.01.07 ACP cseBase: Permit: privileges: AE, Discovery
+ [Documentation] Test ACPs of cseBase which are used by target container resource. Test only privileges with single
+ ... accessControlRule with accessControlOriginators set to AE-ID and accessControlOperations set
+ ... to Discovery operation. Test the discovery request which is permitted by ACP.
+ [Tags] not-implemented exclude
+ TODO
+
+1.01.08 ACP cseBase: Deny: privileges: AE, Discovery
+ [Documentation] Test ACPs of cseBase which are used by target container resource. Test only privileges with single
+ ... accessControlRule with accessControlOriginators set to AE-ID and accessControlOperations set
+ ... to Discovery operation. Test discovery request which is denied by ACP due to different request
+ ... originator AE-ID or CSE as originator.
+ [Tags] not-implemented exclude
+ TODO
+
+1.01.09 ACP cseBase: Deny: privileges: AE, CRUDN
+ [Documentation] Test ACPs of cseBase which are used by target container resource. Test only privileges with single
+ ... accessControlRule with accessControlOriginators set to AE-ID and accessControlOperations set
+ ... to CRUDN operations. Test discovery request which is denied by ACP because the discovery operation
+ ... is not permitted.
+ [Tags] not-implemented exclude
+ TODO
+
+1.01.10 ACP cseBase: Permit: privileges: AE, CRUDN + Discovery, multiple accessControlRules
+ [Documentation] Test ACPs of cseBase which are used by target container resource. Test only privileges with three
+ ... accessControlRules and only one of them permits tested requests. Used ACPs have set AE-ID in
+ ... accessControlOriginators and accessControlOperations set to CRUDN + Discovery operations.
+ [Tags] not-implemented exclude
+ TODO
+
+1.01.11 ACP cseBase: Permit: selfPrivileges: AE, CRUDN + Discovery, multiple accessControlRules
+ [Documentation] Test ACPs of cseBase and test their selfPrivileges with three
+ ... accessControlRules and only one of them permits tested requests. Used ACPs have set AE-ID in
+ ... accessControlOriginators and accessControlOperations set to CRUDN + Discovery operations.
+ [Tags] not-implemented exclude
+ TODO
+
+1.01.12 ACP cseBase: Deny: selfPrivileges: AE, CRUDN + Discovery, multiple accessControlRules
+ [Documentation] Test ACPs of cseBase and test their selfPrivileges with three
+ ... accessControlRules and all of them deny tested requests. Used ACPs have set AE-ID in
+ ... accessControlOriginators and accessControlOperations set to CRUDN + Discovery operations.
+ [Tags] not-implemented exclude
+ TODO
+
+1.01.13 ACP cseBase: Permit: AE, CRUDN + Discovery, accessControlContexts/accessControlWindow
+ [Documentation] Test ACPs of cseBase which are used by target container resource. Test only privileges with single
+ ... accessControlRule with accessControlOriginators set to AE-ID and accessControlOperations set
+ ... to CRUDN + Discovery operations. Used ACPs have set also accessControlWindow and tested requests
+ ... meet all cryteria and are permitted.
+ [Tags] not-implemented exclude
+ TODO
+
+1.01.14 ACP cseBase: Deny: AE, CRUDN + Discovery, accessControlContexts/accessControlWindow
+ [Documentation] Test ACPs of cseBase which are used by target container resource. Test only privileges with single
+ ... accessControlRule with accessControlOriginators set to AE-ID and accessControlOperations set
+ ... to CRUDN + Discovery operations. Used ACPs have set also accessControlWindow and tested requests
+ ... do not meet this cryteria and are denied.
+ [Tags] not-implemented exclude
+ TODO
+
+1.01.15 ACP cseBase: Permit: AE, CRUDN + Discovery, accessControlContexts/accessControlIpAddresses/ipv4Addresses
+ [Documentation] Test ACPs of cseBase which are used by target container resource. Test only privileges with single
+ ... accessControlRule with accessControlOriginators set to AE-ID and accessControlOperations set
+ ... to CRUDN + Discovery operations. Used ACPs have set also accessControlIpAddresses/ipv4Addresses
+ ... and tested requests meet all cryteria and are permitted.
+ [Tags] not-implemented exclude
+ TODO
+
+1.01.16 ACP cseBase: Deny: AE, CRUDN + Discovery, accessControlContexts/accessControlIpAddresses/ipv4Addresses
+ [Documentation] Test ACPs of cseBase which are used by target container resource. Test only privileges with single
+ ... accessControlRule with accessControlOriginators set to AE-ID and accessControlOperations set
+ ... to CRUDN + Discovery operations. Used ACPs have set also accessControlIpAddresses/ipv4Addresses
+ ... and tested requests do not meet this cryteria and are denied.
+ [Tags] not-implemented exclude
+ TODO
+
+1.01.17 ACP cseBase: Permit: AE, CRUDN + Discovery, accessControlContexts/accessControlIpAddresses/ipv6Addresses
+ [Documentation] Test ACPs of cseBase which are used by target container resource. Test only privileges with single
+ ... accessControlRule with accessControlOriginators set to AE-ID and accessControlOperations set
+ ... to CRUDN + Discovery operations. Used ACPs have set also accessControlIpAddresses/ipv6Addresses
+ ... and tested requests meet all cryteria and are permitted.
+ [Tags] not-implemented exclude
+ TODO
+
+1.01.18 ACP cseBase: Deny: AE, CRUDN + Discovery, accessControlContexts/accessControlIpAddresses/ipv6Addresses
+ [Documentation] Test ACPs of cseBase which are used by target container resource. Test only privileges with single
+ ... accessControlRule with accessControlOriginators set to AE-ID and accessControlOperations set
+ ... to CRUDN + Discovery operations. Used ACPs have set also accessControlIpAddresses/ipv6Addresses
+ ... and tested requests do not meet this cryteria and are denied.
+ [Tags] not-implemented exclude
+ TODO
+
+1.01.19 ACP cseBase: Permit: AE, CRUDN + Discovery, accessControlContexts/accessControlLocationRegions
+ [Documentation] Test ACPs of cseBase which are used by target container resource. Test only privileges with single
+ ... accessControlRule with accessControlOriginators set to AE-ID and accessControlOperations set
+ ... to CRUDN + Discovery operations. Used ACPs have set also accessControlLocationRegions
+ ... and tested requests meet all cryteria and are permitted.
+ [Tags] not-implemented exclude
+ TODO
+
+1.01.20 ACP cseBase: Deny: AE, CRUDN + Discovery, accessControlContexts/accessControlLocationRegions
+ [Documentation] Test ACPs of cseBase which are used by target container resource. Test only privileges with single
+ ... accessControlRule with accessControlOriginators set to AE-ID and accessControlOperations set
+ ... to CRUDN + Discovery operations. Used ACPs have set also accessControlLocationRegions
+ ... and tested requests do not meet this cryteria and are denied.
+ [Tags] not-implemented exclude
+ TODO
+
+1.01.21 ACP cseBase: Permit: AE, CRUDN + Discovery, accessControlObjectDetails
+ [Documentation] Test ACPs of cseBase which are used by target container resource. Test only privileges with single
+ ... accessControlRule with accessControlOriginators set to AE-ID and accessControlOperations set
+ ... to CRUDN + Discovery operations. Used ACPs have set also accessControlObjectDetails
+ ... and tested requests meet all cryteria and are permitted.
+ [Tags] not-implemented exclude
+ TODO
+
+1.01.22 ACP cseBase: Deny: AE, CRUDN + Discovery, accessControlObjectDetails
+ [Documentation] Test ACPs of cseBase which are used by target container resource. Test only privileges with single
+ ... accessControlRule with accessControlOriginators set to AE-ID and accessControlOperations set
+ ... to CRUDN + Discovery operations. Used ACPs have set also accessControlObjectDetails
+ ... and tested requests do not meet this cryteria and are denied.
+ [Tags] not-implemented exclude
+ TODO
+
+1.01.23 ACP cseBase: Permit: AE, CRUDN + Discovery, accessControlAuthenticationFlag
+ [Documentation] Test ACPs of cseBase which are used by target container resource. Test only privileges with single
+ ... accessControlRule with accessControlOriginators set to AE-ID and accessControlOperations set
+ ... to CRUDN + Discovery operations. Used ACPs have set also accessControlAuthenticationFlag
+ ... and tested requests meet all cryteria and are permitted.
+ [Tags] not-implemented exclude
+ TODO
+
+1.01.24 ACP cseBase: Deny: AE, CRUDN + Discovery, accessControlAuthenticationFlag
+ [Documentation] Test ACPs of cseBase which are used by target container resource. Test only privileges with single
+ ... accessControlRule with accessControlOriginators set to AE-ID and accessControlOperations set
+ ... to CRUDN + Discovery operations. Used ACPs have set also accessControlAuthenticationFlag
+ ... and tested requests do not meet this cryteria and are denied.
+ [Tags] not-implemented exclude
+ TODO
+
+1.02.01 ACP cseBase: Permit: existing Group including originator, CRUD
+ [Documentation] Test ACP of cseBase which are used by target container resource. Test only privileges with single
+ ... accessControlRule with accessControlOriginators set to existing Group with the request originator
+ ... included and accessControlOperations set
+ ... to CRUD operations. Test CRUD requests which are permitted by ACP.
+ [Tags] not-implemented exclude
+ TODO
+
+1.02.02 ACP cseBase: Deny: not existing Group including originator, CRUD
+ [Documentation] Test ACP of cseBase which are used by target container resource. Test only privileges with single
+ ... accessControlRule with accessControlOriginators set to not existing Group with the
+ ... request originator included and accessControlOperations set to CRUD operations.
+ ... Test CRUD requests which are denied by ACP.
+ [Tags] not-implemented exclude
+ TODO
+
+1.02.03 ACP cseBase: Deny: existing Group not including originator, CRUD
+ [Documentation] Test ACP of cseBase which are used by target container resource. Test only privileges with single
+ ... accessControlRule with accessControlOriginators set to existing Group without the request
+ ... originator included and accessControlOperations set to CRUD operations. Test CRUD requests which
+ ... are denied by ACP.
+ [Tags] not-implemented exclude
+ TODO
+
+1.02.04 ACP cseBase: Deny: existing Group including originator, other than request operations
+ [Documentation] Test ACP of cseBase which are used by target container resource. Test only privileges with single
+ ... accessControlRule with accessControlOriginators set to existing Group with the request originator
+ ... included and accessControlOperations set
+ ... to CRUD operations other than operation used in request so the requests are denied.
+ [Tags] not-implemented exclude
+ TODO
+
+1.02.05 ACP cseBase: Permit: existing Group including originator, N
+ [Documentation] Test ACP of cseBase which are used by target container resource. Test only privileges with single
+ ... accessControlRule with accessControlOriginators set to existing Group with the request originator
+ ... included and accessControlOperations set to notify operation. Test notify requests which are
+ ... permitted by ACP.
+ [Tags] not-implemented exclude
+ TODO
+
+1.02.06 ACP cseBase: Deny: not existing Group including originator, N
+ [Documentation] Test ACP of cseBase which are used by target container resource. Test only privileges with single
+ ... accessControlRule with accessControlOriginators set to not existing Group with the
+ ... request originator included and accessControlOperations set to notify operation.
+ ... Test notify requests which are denied by ACP.
+ [Tags] not-implemented exclude
+ TODO
+
+1.02.07 ACP cseBase: Deny: existing Group not including originator, N
+ [Documentation] Test ACP of cseBase which are used by target container resource. Test only privileges with single
+ ... accessControlRule with accessControlOriginators set to existing Group without the request
+ ... originator included and accessControlOperations set to notify operation. Test notify requests which
+ ... are denied by ACP.
+ [Tags] not-implemented exclude
+ TODO
+
+1.02.08 ACP cseBase: Deny: existing Group including originator, CRUD + Discovery
+ [Documentation] Test ACP of cseBase which are used by target container resource. Test only privileges with single
+ ... accessControlRule with accessControlOriginators set to existing Group with the request originator
+ ... included and accessControlOperations set
+ ... to CRUD + Discovery operations so the tested notification requests are denied.
+ [Tags] not-implemented exclude
+ TODO
+
+1.02.09 ACP cseBase: Permit: existing Group including originator, Discovery
+ [Documentation] Test ACP of cseBase which are used by target container resource. Test only privileges with single
+ ... accessControlRule with accessControlOriginators set to existing Group with the request originator
+ ... included and accessControlOperations set to discovery operation. Test discovery requests which are
+ ... permitted by ACP.
+ [Tags] not-implemented exclude
+ TODO
+
+1.02.10 ACP cseBase: Deny: not existing Group including originator, Discovery
+ [Documentation] Test ACP of cseBase which are used by target container resource. Test only privileges with single
+ ... accessControlRule with accessControlOriginators set to not existing Group with the
+ ... request originator included and accessControlOperations set to discovery operation.
+ ... Test discovery requests which are denied by ACP.
+ [Tags] not-implemented exclude
+ TODO
+
+1.02.11 ACP cseBase: Deny: existing Group not including originator, Discovery
+ [Documentation] Test ACP of cseBase which are used by target container resource. Test only privileges with single
+ ... accessControlRule with accessControlOriginators set to existing Group without the request
+ ... originator included and accessControlOperations set to discovery operation. Test discovery requests which
+ ... are denied by ACP.
+ [Tags] not-implemented exclude
+ TODO
+
+1.02.12 ACP cseBase: Deny: existing Group including originator, CRUDN
+ [Documentation] Test ACP of cseBase which are used by target container resource. Test only privileges with single
+ ... accessControlRule with accessControlOriginators set to existing Group with the request originator
+ ... included and accessControlOperations set
+ ... to CRUDN operations so the tested discovery requests are denied.
+ [Tags] not-implemented exclude
+ TODO
+
+1.03.01 ACP cseBase: Permit: All, CRUD
+ [Documentation] Test ACPs of cseBase which are used by target container resource. Test only privileges with single
+ ... accessControlRule with accessControlOriginators set to All and accessControlOperations set to
+ ... CRUD operations. Test CRUD requests which are permitted by ACP.
+ [Tags] not-implemented exclude
+ TODO
+
+1.03.02 ACP cseBase: Deny: All, other than REQ operations
+ [Documentation] Test ACPs of cseBase which are used by target container resource. Test only privileges with single
+ ... accessControlRule with accessControlOriginators set to All and accessControlOperations set to
+ ... all operations expect to the operation used in the request.
+ ... Test CRUD requests which are denied by ACP due to non-permitted operation.
+ [Tags] not-implemented exclude
+ TODO
+
+1.03.03 ACP cseBase: Permit: All, N
+ [Documentation] Test ACPs of cseBase which are used by target container resource. Test only privileges with single
+ ... accessControlRule with accessControlOriginators set to All and accessControlOperations set
+ ... to N operation. Test the notification request which is permitted by ACP.
+ [Tags] not-implemented exclude
+ TODO
+
+1.03.04 ACP cseBase: Deny: All, CRUD + Discovery
+ [Documentation] Test ACPs of cseBase which are used by target container resource. Test only privileges with single
+ ... accessControlRule with accessControlOriginators set to All and accessControlOperations set
+ ... to CRUD + Discovery operations. Test CRUD + Discovery requests which are denied by ACP because
+ ... the notify operation is not permitted.
+ [Tags] not-implemented exclude
+ TODO
+
+1.03.05 ACP cseBase: Permit: All, Discovery
+ [Documentation] Test ACPs of cseBase which are used by target container resource. Test only privileges with single
+ ... accessControlRule with accessControlOriginators set to All and accessControlOperations set
+ ... to Discovery operation. Test the discovery request which is permitted by ACP.
+ [Tags] not-implemented exclude
+ TODO
+
+1.03.06 ACP cseBase: Deny: All, CRUDN
+ [Documentation] Test ACPs of cseBase which are used by target container resource. Test only privileges with single
+ ... accessControlRule with accessControlOriginators set to All and accessControlOperations set
+ ... to CRUDN operations. Test discovery request which is denied by ACP because the discovery operation
+ ... is not permitted.
+ [Tags] not-implemented exclude
+ TODO
+
+1.04 ACP cseBase: accessControlOriginators CSE
+ [Documentation] Implement the same scenario as in 1.01.01 - 1.01.09 but with accessControlOriginators set to
+ ... specific CSE-ID(s). Split into multiple TCs if needed.
+ [Tags] not-implemented exclude
+ TODO
+
+1.05 ACP cseBase: accessControlOriginators role
+ [Documentation] Implement the same scenario as in 1.01.01 - 1.01.09 but with accessControlOriginators set to
+ ... specific role(s). Split into multiple TCs if needed.
+ [Tags] not-implemented exclude
+ TODO
+
+1.06 ACP cseBase: accessControlOriginators domain
+ [Documentation] Implement the same scenario as in 1.01.01 - 1.01.09 but with accessControlOriginators set to
+ ... specific domain(s). Split into multiple TCs if needed.
+ [Tags] not-implemented exclude
+ TODO
+
+2.00 ACP remoteCSE
+ [Documentation] Implement the same scenario as in 1.01.01 - 1.01.09 but with ACP resource created as child
+ ... resource of remoteCSE resource. Split into multiple TCs if needed.
+ [Tags] not-implemented exclude
+ TODO
+
+3.00 ACP AE
+ [Documentation] Implement the same scenario as in 1.01.01 - 1.01.09 but with ACP resource created as child
+ ... resource of AE resource. Split into multiple TCs if needed.
+ [Tags] not-implemented exclude
+ TODO
+
+4.01 ACP system default
+ [Documentation] Test multiple scenarios with resources with empty accessControlPolicyIDs attribute.
+ ... System default policy should be used.
+ ... Split into multiple TCs if needed.
+ [Tags] not-implemented exclude
+ TODO
+
+5.01 ACP cseBase: resources without accessControlPolicyIDs
+ [Documentation] Test ACP procedures with resources without accessControlPolicyIDs attribute,
+ ... e.g.: Oldest, Latest, etc.
+ ... ACP IDs defined for parent resource should be used in such cases. Test also cases when also
+ ... parent resource doesn't have specified ACP IDs, system default ACP should be used.
+ ... Split into multiple TCs if needed.
+ [Tags] not-implemented exclude
+ TODO
+
+6.01 ACP cseBase: announced resources
+ [Documentation] Test ACP procedures with announced resources.
+ ... Split into multiple TCs if needed.
+ [Tags] not-implemented exclude
+ TODO
+
+*** Keywords ***
+TODO
+ Fail "Not implemented"
Code Review / integration / test.git / blobdiff