| // Copyright 2021 The Chromium OS Authors. All rights reserved. |
| // Use of this source code is governed by a BSD-style license that can be |
| // found in the LICENSE file. |
| |
| package dlp |
| |
| import ( |
| "context" |
| "time" |
| |
| "chromiumos/tast/common/policy" |
| "chromiumos/tast/common/policy/fakedms" |
| "chromiumos/tast/errors" |
| "chromiumos/tast/local/chrome" |
| "chromiumos/tast/local/chrome/ash" |
| "chromiumos/tast/local/chrome/uiauto" |
| "chromiumos/tast/local/chrome/uiauto/faillog" |
| "chromiumos/tast/local/chrome/uiauto/nodewith" |
| "chromiumos/tast/local/chrome/uiauto/role" |
| "chromiumos/tast/local/input" |
| "chromiumos/tast/local/policyutil" |
| "chromiumos/tast/local/policyutil/fixtures" |
| "chromiumos/tast/testing" |
| ) |
| |
| func init() { |
| testing.AddTest(&testing.Test{ |
| Func: DataLeakPreventionRulesListPrinting, |
| Desc: "Test behavior of DataLeakPreventionRulesList policy with printing blocked restriction", |
| Contacts: []string{ |
| "vishal38785@gmail.com", // Test author |
| "chromeos-dlp@google.com", |
| }, |
| SoftwareDeps: []string{"chrome"}, |
| Attr: []string{"group:mainline"}, |
| Fixture: "chromePolicyLoggedIn", |
| }) |
| } |
| |
| func DataLeakPreventionRulesListPrinting(ctx context.Context, s *testing.State) { |
| cr := s.FixtValue().(*fixtures.FixtData).Chrome |
| fakeDMS := s.FixtValue().(*fixtures.FixtData).FakeDMS |
| |
| // DLP policy with printing blocked restriction. |
| policyDLP := []policy.Policy{&policy.DataLeakPreventionRulesList{ |
| Val: []*policy.DataLeakPreventionRulesListValue{ |
| { |
| Name: "Disable Printing in confidential content", |
| Description: "User should not be able to print confidential content", |
| Sources: &policy.DataLeakPreventionRulesListSources{ |
| Urls: []string{ |
| "salesforce.com", |
| "google.com", |
| "company.com", |
| }, |
| }, |
| Restrictions: []*policy.DataLeakPreventionRulesListRestrictions{ |
| { |
| Class: "PRINTING", |
| Level: "BLOCK", |
| }, |
| }, |
| }, |
| }, |
| }, |
| } |
| |
| // Update the policy blob. |
| pb := fakedms.NewPolicyBlob() |
| pb.AddPolicies(policyDLP) |
| |
| // Update policy. |
| if err := policyutil.ServeBlobAndRefresh(ctx, fakeDMS, cr, pb); err != nil { |
| s.Fatal("Failed to serve and refresh: ", err) |
| } |
| |
| // Connect to Test API. |
| tconn, err := cr.TestAPIConn(ctx) |
| if err != nil { |
| s.Fatal("Failed to connect to test API: ", err) |
| } |
| |
| keyboard, err := input.VirtualKeyboard(ctx) |
| if err != nil { |
| s.Fatal("Failed to get keyboard: ", err) |
| } |
| defer keyboard.Close() |
| |
| printingNotAllowed := "Printing is blocked" |
| |
| for _, param := range []struct { |
| name string |
| printingAllowed bool |
| url string |
| wantNotification string |
| }{ |
| { |
| name: "salesforce", |
| printingAllowed: false, |
| url: "https://www.salesforce.com/", |
| wantNotification: printingNotAllowed, |
| }, |
| { |
| name: "google", |
| printingAllowed: false, |
| url: "https://www.google.com/", |
| wantNotification: printingNotAllowed, |
| }, |
| { |
| name: "company", |
| printingAllowed: false, |
| url: "https://www.company.com/", |
| wantNotification: printingNotAllowed, |
| }, |
| { |
| name: "chromium", |
| printingAllowed: true, |
| url: "https://www.chromium.org/", |
| wantNotification: "Printing allowed no notification", |
| }, |
| } { |
| s.Run(ctx, param.name, func(ctx context.Context, s *testing.State) { |
| defer faillog.DumpUITreeWithScreenshotOnError(ctx, s.OutDir(), s.HasError, cr, "ui_tree_"+param.name) |
| |
| conn, err := cr.NewConn(ctx, param.url) |
| if err != nil { |
| s.Fatal("Failed to open page: ", err) |
| } |
| defer conn.Close() |
| |
| // Make a call to print page. |
| printingPossible, err := testPrinting(ctx, tconn, keyboard) |
| if err != nil && param.printingAllowed { |
| s.Fatal("Failed to run test body: ", err) |
| } |
| |
| if printingPossible != param.printingAllowed { |
| s.Errorf("Unexpected printing restriction; got: %t, want: %t", printingPossible, param.printingAllowed) |
| } |
| |
| if !param.printingAllowed { |
| if _, err := ash.WaitForNotification(ctx, tconn, 15*time.Second, ash.WaitIDContains("print_dlp_blocked"), ash.WaitTitle(param.wantNotification)); err != nil { |
| s.Fatalf("Failed to wait for notification with title %q: %v", param.wantNotification, err) |
| } |
| } |
| }) |
| } |
| } |
| |
| // testPrinting tests whether printing is possible via hotkey (Ctrl + P). |
| func testPrinting(ctx context.Context, tconn *chrome.TestConn, keyboard *input.KeyboardEventWriter) (bool, error) { |
| // Type the shortcut. |
| if err := keyboard.Accel(ctx, "Ctrl+P"); err != nil { |
| return false, errors.Wrap(err, "failed to type printing hotkey: ") |
| } |
| |
| // Check if printing dialog has appeared. |
| ui := uiauto.New(tconn) |
| |
| if err := ui.WaitUntilExists(nodewith.Name("Print").ClassName("RootView").Role(role.Window))(ctx); err != nil { |
| return false, errors.Wrap(err, "failed to check for printing windows existance: ") |
| } |
| |
| return true, nil |
| } |