sl@0: # 2006 June 10
sl@0: #
sl@0: # The author disclaims copyright to this source code.  In place of
sl@0: # a legal notice, here is a blessing:
sl@0: #
sl@0: #    May you do good and not evil.
sl@0: #    May you find forgiveness for yourself and forgive others.
sl@0: #    May you share freely, never taking more than you give.
sl@0: #
sl@0: #***********************************************************************
sl@0: # This file implements regression tests for SQLite library.  The
sl@0: # focus of this file is the authorisation callback and virtual tables.
sl@0: #
sl@0: # $Id: vtab3.test,v 1.3 2008/07/12 14:52:21 drh Exp $
sl@0: 
sl@0: set testdir [file dirname $argv0]
sl@0: source $testdir/tester.tcl
sl@0: 
sl@0: ifcapable !vtab||!auth {
sl@0:   finish_test
sl@0:   return
sl@0: }
sl@0: 
sl@0: set ::auth_fail 0
sl@0: set ::auth_log [list]
sl@0: set ::auth_filter [list SQLITE_READ SQLITE_UPDATE SQLITE_SELECT SQLITE_PRAGMA]
sl@0: 
sl@0: proc auth {code arg1 arg2 arg3 arg4} {
sl@0:   if {[lsearch $::auth_filter $code]>-1} {
sl@0:     return SQLITE_OK
sl@0:   }
sl@0:   lappend ::auth_log $code $arg1 $arg2 $arg3 $arg4
sl@0:   incr ::auth_fail -1
sl@0:   if {$::auth_fail == 0} {
sl@0:     return SQLITE_DENY
sl@0:   }
sl@0:   return SQLITE_OK
sl@0: }
sl@0: 
sl@0: do_test vtab3-1.1 {
sl@0:   execsql {
sl@0:     CREATE TABLE elephant(
sl@0:       name VARCHAR(32), 
sl@0:       color VARCHAR(16), 
sl@0:       age INTEGER, 
sl@0:       UNIQUE(name, color)
sl@0:     );
sl@0:   }
sl@0: } {}
sl@0: 
sl@0: 
sl@0: do_test vtab3-1.2 {
sl@0:   register_echo_module [sqlite3_connection_pointer db]
sl@0:   db authorizer ::auth
sl@0:   execsql {
sl@0:     CREATE VIRTUAL TABLE pachyderm USING echo(elephant);
sl@0:   }
sl@0:   set ::auth_log
sl@0: } [list \
sl@0:   SQLITE_INSERT        sqlite_master {}   main {} \
sl@0:   SQLITE_CREATE_VTABLE pachyderm     echo main {} \
sl@0: ]
sl@0: 
sl@0: do_test vtab3-1.3 {
sl@0:   set ::auth_log [list]
sl@0:   execsql {
sl@0:     DROP TABLE pachyderm;
sl@0:   }
sl@0:   set ::auth_log
sl@0: } [list \
sl@0:   SQLITE_DELETE        sqlite_master {}   main {} \
sl@0:   SQLITE_DROP_VTABLE   pachyderm     echo main {} \
sl@0:   SQLITE_DELETE        pachyderm     {}   main {} \
sl@0:   SQLITE_DELETE        sqlite_master {}   main {} \
sl@0: ]
sl@0: 
sl@0: do_test vtab3-1.4 {
sl@0:   set ::auth_fail 1
sl@0:   catchsql {
sl@0:     CREATE VIRTUAL TABLE pachyderm USING echo(elephant);
sl@0:   }
sl@0: } {1 {not authorized}}
sl@0: do_test vtab3-1.5 {
sl@0:   execsql {
sl@0:     SELECT name FROM sqlite_master WHERE type = 'table';
sl@0:   }
sl@0: } {elephant}
sl@0: 
sl@0: do_test vtab3-1.5 {
sl@0:   set ::auth_fail 2
sl@0:   catchsql {
sl@0:     CREATE VIRTUAL TABLE pachyderm USING echo(elephant);
sl@0:   }
sl@0: } {1 {not authorized}}
sl@0: do_test vtab3-1.6 {
sl@0:   execsql {
sl@0:     SELECT name FROM sqlite_master WHERE type = 'table';
sl@0:   }
sl@0: } {elephant}
sl@0: 
sl@0: do_test vtab3-1.5 {
sl@0:   set ::auth_fail 3
sl@0:   catchsql {
sl@0:     CREATE VIRTUAL TABLE pachyderm USING echo(elephant);
sl@0:   }
sl@0: } {0 {}}
sl@0: do_test vtab3-1.6 {
sl@0:   execsql {
sl@0:     SELECT name FROM sqlite_master WHERE type = 'table';
sl@0:   }
sl@0: } {elephant pachyderm}
sl@0: 
sl@0: foreach i [list 1 2 3 4] {
sl@0:   set ::auth_fail $i
sl@0:   do_test vtab3-1.7.$i.1 {
sl@0:     set rc [catch {
sl@0:       execsql {DROP TABLE pachyderm;}
sl@0:     } msg]
sl@0:     if {$msg eq "authorization denied"} {set msg "not authorized"}
sl@0:     list $rc $msg
sl@0:   } {1 {not authorized}}
sl@0:   do_test vtab3-1.7.$i.2 {
sl@0:     execsql {
sl@0:       SELECT name FROM sqlite_master WHERE type = 'table';
sl@0:     }
sl@0:   } {elephant pachyderm}
sl@0: }
sl@0: do_test vtab3-1.8.1 {
sl@0:   set ::auth_fail 0
sl@0:   catchsql {
sl@0:     DROP TABLE pachyderm;
sl@0:   }
sl@0: } {0 {}}
sl@0: do_test vtab3-1.8.2 {
sl@0:   execsql {
sl@0:     SELECT name FROM sqlite_master WHERE type = 'table';
sl@0:   }
sl@0: } {elephant}
sl@0: 
sl@0: finish_test