Function TestBulkDocsChangeToAccess

rest/access_test.go:501–542

TestBulkDocsChangeToAccess verifies that access() grants from one doc in a single bulk_docs request apply to subsequent docs in the same batch.

(t *testing.T)

// TestBulkDocsChangeToAccess verifies that access() grants from one doc in a single bulk_docs request apply to subsequent docs in the same batch.
func TestBulkDocsChangeToAccess(t *testing.T) {
	base.SetUpTestLogging(t, base.LevelInfo, base.KeyAccess)

	rtConfig := RestTesterConfig{SyncFn: `
		function(doc) {
			if(doc.type == "setaccess") {
				channel(doc.channel);
				access(doc.owner, doc.channel);
			} else {
				requireAccess(doc.channel);
			}
		}`}
	rt := NewRestTesterDefaultCollection(t, &rtConfig)
	defer rt.Close()

	ctx := rt.Context()
	a := rt.ServerContext().Database(ctx, "db").Authenticator(ctx)
	user, err := a.GetUser("")
	assert.NoError(t, err)
	user.SetDisabled(true)
	err = a.Save(user)
	assert.NoError(t, err)

	// Create a test user
	user, err = a.NewUser("user1", "letmein", nil)
	assert.NoError(t, err)
	assert.NoError(t, a.Save(user))

	input := `{"docs": [{"_id": "bulk1", "type" : "setaccess", "owner":"user1" , "channel":"chan1"}, {"_id": "bulk2" , "channel":"chan1"}]}`
	response := rt.SendUserRequest("POST", "/db/_bulk_docs", input, "user1")
	RequireStatus(t, response, 201)

	var docs []interface{}
	require.NoError(t, base.JSONUnmarshal(response.Body.Bytes(), &docs))
	require.Len(t, docs, 2)
	assert.NotContains(t, response.BodyString(), `missing channel access`)
	assert.NotContains(t, response.BodyString(), `"status":403"`)
	assert.Contains(t, response.BodyString(), `"id":"bulk1"`)
	assert.Contains(t, response.BodyString(), `"rev":"1-afbcffa8a4641a0f4dd94d3fc9593e74"`)
	assert.Contains(t, response.BodyString(), `"id":"bulk2"`)
	assert.Contains(t, response.BodyString(), `"rev":"1-4d79588b9fe9c38faae61f0c1b9471c0"`)
}

// Test _all_docs API call under different security scenarios
func TestAllDocsAccessControl(t *testing.T) {