tests/carservice_unit_test/src/com/android/car/PermissionHelperTest.java

/*
 * Copyright (C) 2021 The Android Open Source Project
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 *      http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */
package com.android.car;

import static android.content.pm.PackageManager.PERMISSION_DENIED;
import static android.content.pm.PackageManager.PERMISSION_GRANTED;

import static com.android.dx.mockito.inline.extended.ExtendedMockito.doReturn;

import static com.google.common.truth.Truth.assertWithMessage;

import static org.mockito.ArgumentMatchers.anyBoolean;
import static org.mockito.ArgumentMatchers.anyInt;
import static org.mockito.ArgumentMatchers.eq;
import static org.testng.Assert.expectThrows;

import android.app.ActivityManager;
import android.car.test.mocks.AbstractExtendedMockitoTestCase;
import android.os.Binder;
import android.util.Log;

import org.junit.Test;

public final class PermissionHelperTest extends AbstractExtendedMockitoTestCase {

    private static final String TAG = PermissionHelperTest.class.getSimpleName();
    private static final String MESSAGE = "D'OH!";

    private static final int UID = Binder.getCallingUid();

    private static final String PERMISSION1 = "LicenseToKill";
    private static final String PERMISSION2 = "LicenseToLove";

    @Override
    protected void onSessionBuilder(CustomMockitoSessionBuilder session) {
        session.spyStatic(ActivityManager.class);
    }

    @Test
    public void testHasAtLeastOnePermission_none() {
        mockPermission(PERMISSION1, PERMISSION_DENIED);
        mockPermission(PERMISSION2, PERMISSION_DENIED);

        assertWithMessage("has at least %s", PERMISSION2).that(
                PermissionHelper.hasAtLeastOnePermissionGranted(UID, PERMISSION1, PERMISSION2))
                .isFalse();
    }

    @Test
    public void testHasAtLeastOnePermission_one() {
        mockPermission(PERMISSION1, PERMISSION_DENIED);
        mockPermission(PERMISSION2, PERMISSION_GRANTED);

        assertWithMessage("has at least %s", PERMISSION2).that(
                PermissionHelper.hasAtLeastOnePermissionGranted(UID, PERMISSION1, PERMISSION2))
                .isTrue();
    }

    @Test
    public void testHasAtLeastOnePermission_both() {
        mockPermission(PERMISSION1, PERMISSION_GRANTED);
        mockPermission(PERMISSION2, PERMISSION_GRANTED);

        assertWithMessage("has at least %s", PERMISSION2).that(
                PermissionHelper.hasAtLeastOnePermissionGranted(UID, PERMISSION1, PERMISSION2))
                .isTrue();
    }

    @Test
    public void testCheckHasAtLeastOnePermission_none() {
        mockPermission(PERMISSION1, PERMISSION_DENIED);
        mockPermission(PERMISSION2, PERMISSION_DENIED);

        SecurityException exception = expectThrows(SecurityException.class, () -> PermissionHelper
                .checkHasAtLeastOnePermissionGranted(MESSAGE, PERMISSION1, PERMISSION2));

        assertExceptionMessageContains(exception, MESSAGE);
    }

    @Test
    public void testCheckHasAtLeastOnePermissionGranted_one() {
        mockPermission(PERMISSION1, PERMISSION_DENIED);
        mockPermission(PERMISSION2, PERMISSION_GRANTED);

        PermissionHelper.checkHasAtLeastOnePermissionGranted(MESSAGE, PERMISSION1, PERMISSION2);
    }

    @Test
    public void testCheckHasAtLeastOnePermissionGranted_both() {
        mockPermission(PERMISSION1, PERMISSION_DENIED);
        mockPermission(PERMISSION2, PERMISSION_GRANTED);

        PermissionHelper.checkHasAtLeastOnePermissionGranted(MESSAGE, PERMISSION1, PERMISSION2);
    }

    @Test
    public void testCheckHasDumpPermissionGranted_notGranted() {
        mockPermission(android.Manifest.permission.DUMP, PERMISSION_DENIED);

        SecurityException exception = expectThrows(SecurityException.class,
                () -> PermissionHelper.checkHasDumpPermissionGranted(MESSAGE));

        assertExceptionMessageContains(exception, MESSAGE);
        assertExceptionMessageContains(exception, android.Manifest.permission.DUMP);
    }

    @Test
    public void testCheckHasDumpPermissionGranted_granted() {
        mockPermission(android.Manifest.permission.DUMP, PERMISSION_GRANTED);

        PermissionHelper.checkHasDumpPermissionGranted(MESSAGE);
    }

    private void assertExceptionMessageContains(Exception exception, String subString) {
        assertWithMessage("exception (%s) message", exception).that(exception.getMessage())
                .contains(subString);
    }

    private void mockPermission(String permission, int value) {
        Log.d(TAG, "mockHasPermissions(): uid=" + UID + ", permission=" + permission
                + ", granted=" + (value == PERMISSION_GRANTED));

        doReturn(value).when(() -> ActivityManager.checkComponentPermission(eq(permission),
                eq(UID), anyInt(), anyBoolean()));
    }
}