Function backup_database_readonly_denied

nodedb/tests/auth_admin_ddl_gating.rs:362–372

()

#[tokio::test]
async fn backup_database_readonly_denied() {
    let state = make_state_with_catalog();
    let foo_id = setup_foo_db(&state).await;
    let ro = readonly_user();
    let err = ddl_err(&state, &ro, "BACKUP DATABASE foo TO 's3://x'").await;
    assert!(
        err.contains("42501") || err.contains("permission denied"),
        "expected 42501/permission denied, got: {err}"
    );
    assert_audit_has(&state, AuditEvent::PermissionDenied, Some(foo_id));
}

// ─── RESTORE DATABASE ────────────────────────────────────────────────────────