Function assert_readonly_denied

nodedb-test-support/src/pgwire_auth_helpers.rs:112–116

Run DDL as a readonly identity and assert it is denied with `permission denied`.

(state: &SharedState, sql: &str)

/// Run DDL as a readonly identity and assert it is denied with `permission denied`.
pub async fn assert_readonly_denied(state: &SharedState, sql: &str) {
    let viewer = readonly_user();
    let err = ddl_err(state, &viewer, sql).await;
    assert!(err.contains("permission denied"), "{err}");
}

/// Cluster-admin identity (no implicit RLS bypass, no cross-DB data access).
pub fn cluster_admin_user() -> AuthenticatedIdentity {