Function TestDisablePermissionCheck

rest/admin_api_auth_test.go:913–997

(t *testing.T)

}

func TestDisablePermissionCheck(t *testing.T) {
	if base.UnitTestUrlIsWalrus() {
		t.Skip("This test only works against Couchbase Server")
	}

	clusterAdminPermission := Permission{"!admin", false}

	// Some random role and perm
	viewsAdminRole := RouteRole{RoleName: "views_admin", DatabaseScoped: true}
	statsReadPermission := Permission{".stats!read", true}

	serverIsCE := base.TestsUseServerCE()

	rt := NewRestTester(t, nil)
	SGWorBFArole := RouteRole{MobileSyncGatewayRole.RoleName, true}
	if serverIsCE {
		SGWorBFArole = RouteRole{BucketFullAccessRole.RoleName, true}
	}
	rt.Close()

	testCases := []struct {
		Name               string
		CreateUser         string
		CreateUserRole     *RouteRole
		RequirePerms       []Permission
		EEOnly             bool
		DoPermissionCheck  bool
		ExpectedStatusCode int
	}{
		{
			Name:               "AccessViaRole",
			CreateUser:         "SGWUser",
			CreateUserRole:     &SGWorBFArole,
			RequirePerms:       []Permission{clusterAdminPermission},
			DoPermissionCheck:  false,
			ExpectedStatusCode: http.StatusOK,
		},
		{
			Name:               "AccessViaPermission",
			CreateUser:         "PermUser",
			CreateUserRole:     &viewsAdminRole,
			RequirePerms:       []Permission{statsReadPermission},
			EEOnly:             true, // Permissions only exist in EE Server
			DoPermissionCheck:  true,
			ExpectedStatusCode: http.StatusOK,
		},
		{
			Name:               "AccessViaPermissionButDisabled",
			CreateUser:         "SGWUser",
			CreateUserRole:     &viewsAdminRole,
			RequirePerms:       []Permission{statsReadPermission},
			EEOnly:             true, // Permissions only exist in EE Server
			DoPermissionCheck:  false,
			ExpectedStatusCode: http.StatusForbidden,
		},
	}

	for _, testCase := range testCases {