Back to Repositories

Testing Security Manager Override Implementation in Apache Airflow

This test suite implements a mock security manager for Apache Airflow’s authentication and authorization testing. It extends the Flask-AppBuilder security manager override to provide controlled testing environments for access control and permissions verification.

Test Coverage Overview

The test coverage focuses on security manager functionality within Airflow’s authentication framework.

Key areas covered include:

Viewer virtual model sets (VMS) validation
Security manager override behavior
Integration with Flask-AppBuilder security features
Permission handling and access control testing

Implementation Analysis

The testing approach utilizes a mock security manager that inherits from FabAirflowSecurityManagerOverride. This implementation allows for isolated testing of security features without affecting the production environment.

Notable patterns include:

Provider compatibility error handling
Security manager inheritance structure
Viewer VMS configuration

Technical Details

Testing infrastructure includes:

Python’s built-in unittest framework
Airflow provider compatibility utilities
Flask-AppBuilder security components
Custom ignore_provider_compatibility_error decorator

Best Practices Demonstrated

The test implementation showcases several security testing best practices.

Notable examples include:

Proper isolation of security components
Clear separation of concerns
Compatibility version management
Structured mock object implementation

apache/airflow

tests_common/test_utils/mock_security_manager.py

            
# Licensed to the Apache Software Foundation (ASF) under one
# or more contributor license agreements.  See the NOTICE file
# distributed with this work for additional information
# regarding copyright ownership.  The ASF licenses this file
# to you under the Apache License, Version 2.0 (the
# "License"); you may not use this file except in compliance
# with the License.  You may obtain a copy of the License at
#
#   http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing,
# software distributed under the License is distributed on an
# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
# KIND, either express or implied.  See the License for the
# specific language governing permissions and limitations
# under the License.
from __future__ import annotations

from tests_common.test_utils.compat import ignore_provider_compatibility_error

with ignore_provider_compatibility_error("2.9.0", __file__):
    from airflow.providers.fab.auth_manager.security_manager.override import FabAirflowSecurityManagerOverride


class MockSecurityManager(FabAirflowSecurityManagerOverride):
    """Mock Security Manager for testing purposes."""

    VIEWER_VMS = {
        "Airflow",
    }