Environmentvariableextension securitymanager tests

src/test/java/org/junitpioneer/jupiter/EnvironmentVariableUtilsTests.java

@@ -0,0 +1,59 @@
+/*
+ * Copyright 2015-2020 the original author or authors.
+ *
+ * All rights reserved. This program and the accompanying materials are
+ * made available under the terms of the Eclipse Public License v2.0 which
+ * accompanies this distribution and is available at
+ *
+ * http://www.eclipse.org/legal/epl-v20.html
+ */
+
+package org.junitpioneer.jupiter;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.assertj.core.api.Assertions.assertThatCode;
+import static org.assertj.core.api.Assertions.assertThatThrownBy;
+
+import java.security.AccessControlException;
+import java.security.Policy;
+
+import org.junit.jupiter.api.DisplayName;
+import org.junit.jupiter.api.Test;
+
+@DisplayName("EnvironmentVariableUtils")
+@ClearEnvironmentVariable(key = "TEST")
+class EnvironmentVariableUtilsTests {
+
+	@Test
+	@SetSystemProperty(key = "java.security.policy", value = "file:src/test/resources/default-testing.policy")
+	void shouldThrowAccessControlExceptionWithDefaultSecurityManager() {
+		executeWithSecurityManager(() -> assertThatThrownBy(() -> EnvironmentVariableUtils.set("TEST", "TEST"))
+				.isInstanceOf(AccessControlException.class));
+	}
+
+	@Test
+	@SetSystemProperty(key = "java.security.policy", value = "file:src/test/resources/reflect-permission-testing.policy")
+	void shouldModifyEnvironmentVariableIfPermissionIsGiven() {
+		executeWithSecurityManager(() -> {
+			assertThatCode(() -> EnvironmentVariableUtils.set("TEST", "TEST")).doesNotThrowAnyException();
+			assertThat(System.getenv("TEST")).isEqualTo("TEST");
+		});
+	}
+
+	/*
+	 * This needs to be done during the execution of the test method and cannot be moved to setup/tear down
+	 * because junit uses reflection and the default SecurityManager prevents that.
+	 */
+	private void executeWithSecurityManager(Runnable runnable) {
+		Policy.getPolicy().refresh();
+		SecurityManager securityManager = System.getSecurityManager();
+		System.setSecurityManager(new SecurityManager());
+		try {
+			runnable.run();
+		}
+		finally {
+			System.setSecurityManager(securityManager);
+		}
+	}
+
+}

src/test/resources/default-testing.policy

@@ -0,0 +1,7 @@
+grant {
+        // allow to reset the SecurityManager after the unit test
+        permission java.lang.RuntimePermission "setSecurityManager";
+
+        // necessary for gradle
+        permission javax.management.MBeanServerPermission "createMBeanServer";
+};

src/test/resources/reflect-permission-testing.policy

@@ -0,0 +1,17 @@
+grant {
+        // allow to reset the SecurityManager after the unit test
+        permission java.lang.RuntimePermission "setSecurityManager";
+
+        // necessary for gradle
+        permission javax.management.MBeanServerPermission "createMBeanServer";
+
+        // needed for EnvironmentVariableUtilsTests#shouldModifyEnvironmentVariableIfPermissionIsGiven
+        permission java.lang.RuntimePermission "getenv.*";
+
+        // needed for assertj
+        permission java.util.logging.LoggingPermission "control";
+
+        // needed for EnvironmentVariableUtils
+        permission java.lang.RuntimePermission "accessDeclaredMembers";
+        permission java.lang.reflect.ReflectPermission "suppressAccessChecks";
+};