Function TestRoleAccessQuery

db/query_test.go:300–341

(t *testing.T)

}

func TestRoleAccessQuery(t *testing.T) {
	db, ctx := setupTestDB(t)
	defer db.Close(ctx)
	collection, ctx := GetSingleDatabaseCollectionWithUser(ctx, t, db)

	collection.ChannelMapper = channels.NewChannelMapper(ctx,
		`function(doc, oldDoc) {
	role(doc.accessUser, "role:" + doc.accessChannel)
}`, db.Options.JavascriptTimeout)
	// Add docs with access grants assignment
	for i := 1; i <= 5; i++ {
		_, _, err := collection.Put(ctx, fmt.Sprintf("accessTest%d", i), Body{"accessUser": "user1", "accessChannel": fmt.Sprintf("channel%d", i)})
		assert.NoError(t, err, "Put accessTest doc")
	}

	// Standard query
	username := "user1"
	results, queryErr := collection.QueryRoleAccess(base.TestCtx(t), username)
	assert.NoError(t, queryErr, "Query error")
	var row map[string]interface{}
	rowCount := 0
	for results.Next(ctx, &row) {
		rowCount++
	}
	assert.Equal(t, 5, rowCount)
	assert.NoError(t, results.Close())

	// Attempt to introduce syntax errors. Each of these should return zero rows and no error.
	// Validates select clause protection
	usernames := []string{"user1'", "user1?", "user1 ! user2$"}
	// usernames = append(usernames, "user1`AND") // TODO: MB-50619 - broken until Server 7.1.0
	for _, username := range usernames {
		results, queryErr = collection.QueryRoleAccess(base.TestCtx(t), username)
		assert.NoError(t, queryErr, "Query error")
		rowCount = 0
		for results.Next(ctx, &row) {
			rowCount++
		}
		assert.Equal(t, 0, rowCount)
		assert.NoError(t, results.Close())
	}
}

func countQueryResults(ctx context.Context, results sgbucket.QueryResultIterator) int {