()
| 37 | |
| 38 | #[tokio::test] |
| 39 | async fn create_oidc_provider_requires_superuser() { |
| 40 | let state = make_state_with_catalog(); |
| 41 | let viewer = readonly_user(); |
| 42 | let err = ddl_err( |
| 43 | &state, |
| 44 | &viewer, |
| 45 | "CREATE OIDC PROVIDER bad \ |
| 46 | ISSUER 'https://x.example/' \ |
| 47 | JWKS_URI 'https://x.example/jwks'", |
| 48 | ) |
| 49 | .await; |
| 50 | assert!( |
| 51 | err.contains("42501") || err.contains("permission denied"), |
| 52 | "expected permission denied, got: {err}" |
| 53 | ); |
| 54 | } |
| 55 | |
| 56 | // ── DROP OIDC PROVIDER ────────────────────────────────────────────────────── |
| 57 |
nothing calls this directly
no test coverage detected