ansible/test/integration/targets/win_owner/tasks/main.yml
Andrew Saraceni 8f050d3719 Fix SID Lookup Issues on Assorted Windows Modules (#28979)
* fix sid lookup issues and update copyright/license to latest format

* simplify win_owner and win_share by removing unnecessary function
2017-09-11 07:34:51 +10:00

234 lines
6.5 KiB
YAML

---
# Setup tests
- name: gather facts on host for use with later tests
setup:
- name: remove test path to ensure baseline
win_file:
path: "{{test_win_owner_path}}"
state: absent
- name: create test paths
win_file:
path: "{{test_win_owner_path}}\\{{item}}"
state: directory
with_items:
- folder
- folder\folder1
- folder\folder2
- folder with space
- folder with space\folder1
- folder with space\folder2
- name: create system test files
win_copy:
dest: "{{test_win_owner_path}}\\{{item}}"
content: content
with_items:
- folder\file.txt
- folder\folder1\file.txt
- folder\folder2\file.txt
- folder with space\file.txt
- folder with space\folder1\file.txt
- folder with space\folder2\file.txt
# Run win_owner tests
- name: set owner for invalid path
win_owner:
path: C:\invalid
user: SYSTEM
register: invalid_path
failed_when: invalid_path.msg != 'C:\invalid file or directory does not exist on the host'
- name: set owner for invalid user
win_owner:
path: "{{test_win_owner_path}}"
user: invalid-user
register: invalid_user
failed_when: invalid_user.msg is not search("account_name invalid-user is not a valid account, cannot get SID.*")
- name: set owner defaults check
win_owner:
path: "{{test_win_owner_path}}\\folder"
user: SYSTEM
register: defaults_check
check_mode: True
- name: get owner of folder of set owner defaults check
win_command: powershell.exe "(Get-Acl -Path '{{test_win_owner_path}}\\folder').Owner"
register: actual_defaults_check
- name: assert set owner defaults check
assert:
that:
- defaults_check|changed
- actual_defaults_check.stdout_lines[0] == 'BUILTIN\Administrators'
- name: set owner defaults
win_owner:
path: "{{test_win_owner_path}}\\folder"
user: SYSTEM
register: defaults
- name: get owner of folder of set owner defaults
win_command: powershell.exe "(Get-Acl -Path '{{test_win_owner_path}}\\folder').Owner"
register: actual_defaults
- name: assert set owner defaults
assert:
that:
- defaults|changed
- actual_defaults.stdout_lines[0] == 'NT AUTHORITY\SYSTEM'
- name: set owner defaults again
win_owner:
path: "{{test_win_owner_path}}\\folder"
user: SYSTEM
register: defaults_again
- name: get owner of folder of set owner defaults again
win_command: powershell.exe "(Get-Acl -Path '{{test_win_owner_path}}\\folder').Owner"
register: actual_defaults_again
- name: assert set owner defaults again
assert:
that:
- not defaults_again|changed
- actual_defaults_again.stdout_lines[0] == 'NT AUTHORITY\SYSTEM'
- name: set owner recurse check
win_owner:
path: "{{test_win_owner_path}}\\folder"
user: SYSTEM
recurse: True
register: recurse_check
check_mode: True
- name: get owner of folder of set owner recurse check
win_command: powershell.exe "(Get-Acl -Path '{{test_win_owner_path}}\\{{item.path}}').Owner"
register: actual_recurse_check
failed_when: actual_recurse_check.stdout_lines[0] != item.owner
with_items:
- { path: 'folder', owner: 'NT AUTHORITY\SYSTEM' }
- { path: 'folder\file.txt', owner: 'BUILTIN\Administrators' }
- { path: 'folder\folder1', owner: 'BUILTIN\Administrators' }
- { path: 'folder\folder1\file.txt', owner: 'BUILTIN\Administrators' }
- { path: 'folder\folder2', owner: 'BUILTIN\Administrators' }
- { path: 'folder\folder2\file.txt', owner: 'BUILTIN\Administrators' }
- name: assert set owner recurse check
assert:
that:
- recurse_check|changed
- name: set owner recurse
win_owner:
path: "{{test_win_owner_path}}\\folder"
user: SYSTEM
recurse: True
register: recurse
- name: get owner of folder of set owner recurse
win_command: powershell.exe "(Get-Acl -Path '{{test_win_owner_path}}\\{{item}}').Owner"
register: actual_recurse
failed_when: actual_recurse.stdout_lines[0] != 'NT AUTHORITY\SYSTEM'
with_items:
- folder
- folder\file.txt
- folder\folder1
- folder\folder1\file.txt
- folder\folder2
- folder\folder2\file.txt
- name: assert set owner recurse
assert:
that:
- recurse|changed
- name: set owner recurse again
win_owner:
path: "{{test_win_owner_path}}\\folder"
user: SYSTEM
recurse: True
register: recurse_again
- name: get owner of folder of set owner recurse again
win_command: powershell.exe "(Get-Acl -Path '{{test_win_owner_path}}\\{{item}}').Owner"
register: actual_recurse_again
failed_when: actual_recurse_again.stdout_lines[0] != 'NT AUTHORITY\SYSTEM'
with_items:
- folder
- folder\file.txt
- folder\folder1
- folder\folder1\file.txt
- folder\folder2
- folder\folder2\file.txt
- name: assert set owner recurse again
assert:
that:
- not recurse_again|changed
- name: create test user
win_user:
name: test win owner
password: TtPp!@#$%^ + {{ lookup('password', '/dev/null length=15') }}
- name: set owner with space recurse
win_owner:
path: "{{test_win_owner_path}}\\folder with space"
user: test win owner
recurse: True
register: recurse_space
- name: get owner of folder of set owner with space recurse
win_command: powershell.exe "(Get-Acl -Path '{{test_win_owner_path}}\\{{item}}').Owner"
register: actual_recurse_space
failed_when: actual_recurse_space.stdout_lines[0]|upper != ansible_hostname + '\\TEST WIN OWNER'
with_items:
- folder with space
- folder with space\file.txt
- folder with space\folder1
- folder with space\folder1\file.txt
- folder with space\folder2
- folder with space\folder2\file.txt
- name: assert set owner with space recurse
assert:
that:
- recurse_space|changed
- name: set owner with space recurse again
win_owner:
path: "{{test_win_owner_path}}\\folder with space"
user: test win owner
recurse: True
register: recurse_space_again
- name: get owner of folder of set owner with space recurse again
win_command: powershell.exe "(Get-Acl -Path '{{test_win_owner_path}}\\{{item}}').Owner"
register: actual_recurse_space_again
failed_when: actual_recurse_space_again.stdout_lines[0]|upper != ansible_hostname + '\\TEST WIN OWNER'
with_items:
- folder with space
- folder with space\file.txt
- folder with space\folder1
- folder with space\folder1\file.txt
- folder with space\folder2
- folder with space\folder2\file.txt
- name: assert set owner with space recurse again
assert:
that:
- not recurse_space_again|changed
# Run cleanup after tests
- name: delete test path
win_file:
path: "{{test_win_owner_path}}"
state: absent
- name: remove test user
win_user:
name: test win owner
state: absent