'GET /users?name=<injected sql_statement>.
Test Plan:
- Attempt to get all entities back by passing a two-term attribute
- Attempt to piggyback filter to damage DB (e.g. drop table)'

def test_filter_sql_injection_attack(self):

    self._set_policy({'identity:list_users': [], 'identity:list_groups': [], 'identity:create_group': []})
    url_by_name = "/users?name=anything'    or    'x'='x"
    r = self.get(url_by_name, auth=self.auth)
    self.assertEqual(0, len(r.result.get('users')))
    group = unit.new_group_ref(domain_id=self.domainB['id'])
    group = self.identity_api.create_group(group)
    url_by_name = "/users?name=x';    drop    table    group"
    r = self.get(url_by_name, auth=self.auth)
    url_by_name = '/groups'
    r = self.get(url_by_name, auth=self.auth)
    self.assertGreater(len(r.result.get('groups')), 0)
