Function TestForceAPIForbiddenErrors

rest/access_test.go:300–498

CBG-2143: Make sure the REST API is returning forbidden errors if when unsupported config option is set

(t *testing.T)

// CBG-2143: Make sure the REST API is returning forbidden errors if when unsupported config option is set
func TestForceAPIForbiddenErrors(t *testing.T) {
	base.SetUpTestLogging(t, base.LevelDebug, base.KeyCRUD, base.KeyHTTP)
	testCases := []struct {
		forceForbiddenErrors bool
	}{
		{
			forceForbiddenErrors: true,
		},
		{
			forceForbiddenErrors: false,
		},
	}
	for _, test := range testCases {
		t.Run(fmt.Sprintf("Forbidden errors %v", test.forceForbiddenErrors), func(t *testing.T) {
			// assertRespStatus changes behaviour depending on if forcing forbidden errors
			assertRespStatus := func(resp *TestResponse, statusIfForbiddenErrorsFalse int) {
				if test.forceForbiddenErrors {
					AssertHTTPErrorReason(t, resp, http.StatusForbidden, "forbidden")
					return
				}
				AssertStatus(t, resp, statusIfForbiddenErrorsFalse)
			}

			rt := NewRestTester(t,
				&RestTesterConfig{
					SyncFn: `
				function(doc, oldDoc) {
					if (!doc.doNotSync) {
						access("NoPerms", "chan2");
						access("Perms", "chan2");
						requireAccess("chan");
						channel(doc.channels);
					}
				}`,
					DatabaseConfig: &DatabaseConfig{DbConfig: DbConfig{
						Unsupported: &db.UnsupportedOptions{
							ForceAPIForbiddenErrors: test.forceForbiddenErrors,
						},
						Guest: &auth.PrincipalConfig{
							Disabled: base.Ptr(false),
						},
						Users: map[string]*auth.PrincipalConfig{
							"NoPerms": {
								Password: base.Ptr("password"),
							},
							"Perms": {
								Password: base.Ptr("password"),
							},
						},
					}},
				})
			defer rt.Close()
			dataStore := rt.GetSingleDataStore()
			c := dataStore.CollectionName()
			s := dataStore.ScopeName()

			// update the user to add chan
			resp := rt.SendAdminRequest(http.MethodPut, "/{{.db}}/_user/Perms", GetUserPayload(t, "Perms", "password", "", dataStore, []string{"chan"}, nil))