datamodel: rpz: deny message validation + test

diff --git a/manager/knot_resolver_manager/datamodel/rpz_schema.py b/manager/knot_resolver_manager/datamodel/rpz_schema.py
index af8a3138faacbcf67e13edc24d682518e91d0edc..2f577d70a486adcace0553fd8a902f2f4bd80181 100644 (file)
--- a/manager/knot_resolver_manager/datamodel/rpz_schema.py
+++ b/manager/knot_resolver_manager/datamodel/rpz_schema.py
@@ -13,3 +13,7 @@ class RPZSchema(SchemaNode):
     views: Optional[List[str]] = None
     options: Optional[List[FlagsEnum]] = None
     message: Optional[str] = None
+
+    def _validate(self) -> None:
+        if self.message and not self.action == "deny":
+            raise ValueError("'message' field can only be defined for 'deny' action")

diff --git a/manager/tests/unit/datamodel/test_rpz_schema.py b/manager/tests/unit/datamodel/test_rpz_schema.py
new file mode 100644 (file)
index 0000000..7661095
--- /dev/null
+++ b/manager/tests/unit/datamodel/test_rpz_schema.py
@@ -0,0 +1,12 @@
+from pytest import raises
+
+from knot_resolver_manager.datamodel.rpz_schema import RPZSchema
+from knot_resolver_manager.exceptions import KresdManagerException
+
+
+def test_message():
+
+    assert RPZSchema({"action": "deny", "file": "blocklist.rpz", "message": "this is deny message"})
+
+    with raises(KresdManagerException):
+        RPZSchema({"action": "pass", "file": "whitelist.rpz", "message": "this is deny message"})