Function TestAccessFunctionDb

db/database_test.go:2495–2533

(t *testing.T)

}

func TestAccessFunctionDb(t *testing.T) {

	db, ctx := setupTestDB(t)
	defer db.Close(ctx)

	authenticator := db.Authenticator(ctx)
	user, err := authenticator.NewUser("naomi", "letmein", channels.BaseSetOf(t, "Netflix"))
	require.NoError(t, err)
	user.SetExplicitRoles(channels.TimedSet{"animefan": channels.NewVbSimpleSequence(1), "tumblr": channels.NewVbSimpleSequence(1)}, 1)
	assert.NoError(t, authenticator.Save(user), "Save")

	collection, ctx := GetSingleDatabaseCollectionWithUser(ctx, t, db)

	_, err = collection.UpdateSyncFun(ctx, `function(doc){access(doc.users,doc.userChannels);}`)
	require.NoError(t, err)

	body := Body{"users": []string{"naomi"}, "userChannels": []string{"Hulu"}}
	_, _, err = collection.Put(ctx, "doc1", body)
	assert.NoError(t, err, "")

	body = Body{"users": []string{"role:animefan"}, "userChannels": []string{"CrunchyRoll"}}
	_, _, err = collection.Put(ctx, "doc2", body)
	assert.NoError(t, err, "")

	// Create the role _after_ creating the documents, to make sure the previously-indexed access
	// privileges are applied.
	role, _ := authenticator.NewRole("animefan", nil)
	assert.NoError(t, authenticator.Save(role))

	user, err = authenticator.GetUser("naomi")
	assert.NoError(t, err, "GetUser")
	expected := channels.AtSequence(channels.BaseSetOf(t, "Hulu", "Netflix", "!"), 1)
	assert.Equal(t, expected, user.CollectionChannels(collection.ScopeName, collection.Name))

	expected.AddChannel("CrunchyRoll", 2)
	channels, err := user.InheritedCollectionChannels(collection.ScopeName, collection.Name)
	require.NoError(t, err)
	assert.Equal(t, expected, channels)
}

func TestDocIDs(t *testing.T) {
	tests := []struct {