feat: SAC 0.7.0 display_name columns and event severity overrides

Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
PTah
2026-06-01 10:21:43 +10:00
parent 8de5d14cfb
commit de29270a25
25 changed files with 850 additions and 222 deletions
@@ -0,0 +1,53 @@
"""Tests for per-event-type severity overrides."""
import uuid
from app.models.event_severity_override import EventSeverityOverride
VALID_EVENT = {
"schema_version": "1.0",
"event_id": "550e8400-e29b-41d4-a716-446655440000",
"occurred_at": "2026-05-27T10:00:00+03:00",
"source": {"product": "rdp-login-monitor", "product_version": "1.2.3-SAC"},
"host": {"hostname": "test-host", "os_family": "windows"},
"category": "auth",
"type": "rdp.login.success",
"severity": "info",
"title": "RDP login",
"summary": "pytest",
}
def test_severity_override_applied_on_ingest(client, auth_headers, jwt_headers, db_session):
db_session.add(EventSeverityOverride(event_type="rdp.login.success", severity="warning"))
db_session.commit()
event_id = str(uuid.uuid4())
payload = {**VALID_EVENT, "event_id": event_id}
r = client.post("/api/v1/events", json=payload, headers=auth_headers)
assert r.status_code == 201
listed = client.get("/api/v1/events", headers=jwt_headers, params={"type": "rdp.login.success"})
row = next(i for i in listed.json()["items"] if i["event_id"] == event_id)
assert row["severity"] == "warning"
def test_severity_overrides_settings_api(client, jwt_headers, db_session):
db_session.add(EventSeverityOverride(event_type="ssh.login.failed", severity="high"))
db_session.commit()
r = client.get("/api/v1/settings/notifications/severity-overrides", headers=jwt_headers)
assert r.status_code == 200
items = {i["event_type"]: i for i in r.json()["items"]}
assert items["ssh.login.failed"]["override_severity"] == "high"
assert items["rdp.login.success"]["default_severity"] == "info"
put = client.put(
"/api/v1/settings/notifications/severity-overrides",
headers=jwt_headers,
json={"overrides": {"rdp.login.success": "warning", "ssh.login.failed": None}},
)
assert put.status_code == 200
updated = {i["event_type"]: i for i in put.json()["items"]}
assert updated["rdp.login.success"]["override_severity"] == "warning"
assert updated["ssh.login.failed"]["override_severity"] is None
+2 -2
View File
@@ -4,6 +4,6 @@ from app.version import APP_NAME, APP_VERSION, APP_VERSION_LABEL
def test_version_constants():
assert APP_VERSION == "0.6.0"
assert APP_VERSION == "0.7.0"
assert APP_NAME == "Security Alert Center"
assert APP_VERSION_LABEL == "Security Alert Center v.0.6.0"
assert APP_VERSION_LABEL == "Security Alert Center v.0.7.0"