Function TestNewlyCreateSGWPermissions

rest/admin_api_auth_test.go:999–1463

(t *testing.T)

}

func TestNewlyCreateSGWPermissions(t *testing.T) {
	if base.UnitTestUrlIsWalrus() {
		t.Skip("This test only works against Couchbase Server")
	}
	base.TestsRequireMobileRBAC(t)
	mobileSyncGateway := "mobile_sync_gateway"
	syncGatewayDevOps := "sync_gateway_dev_ops"
	syncGatewayApp := "sync_gateway_app"
	syncGatewayAppRo := "sync_gateway_app_ro"
	syncGatewayConfigurator := "sync_gateway_configurator"
	syncGatewayReplicator := "sync_gateway_replicator"

	rt := NewRestTester(t, &RestTesterConfig{
		AdminInterfaceAuthentication:    true,
		enableAdminAuthPermissionsCheck: true,
	})
	defer rt.Close()

	bucketName := rt.Bucket().GetName()

	eps, httpClient, err := rt.ServerContext().ObtainManagementEndpointsAndHTTPClient()
	require.NoError(t, err)

	MakeUser(t, httpClient, eps[0], mobileSyncGateway, "password", []string{fmt.Sprintf("%s[*]", mobileSyncGateway)})
	defer DeleteUser(t, httpClient, eps[0], mobileSyncGateway)
	MakeUser(t, httpClient, eps[0], syncGatewayDevOps, "password", []string{syncGatewayDevOps})
	defer DeleteUser(t, httpClient, eps[0], syncGatewayDevOps)
	MakeUser(t, httpClient, eps[0], syncGatewayApp, "password", []string{fmt.Sprintf("%s[*]", syncGatewayApp)})
	defer DeleteUser(t, httpClient, eps[0], syncGatewayApp)
	MakeUser(t, httpClient, eps[0], syncGatewayAppRo, "password", []string{fmt.Sprintf("%s[*]", syncGatewayAppRo)})
	defer DeleteUser(t, httpClient, eps[0], syncGatewayAppRo)
	MakeUser(t, httpClient, eps[0], syncGatewayConfigurator, "password", []string{fmt.Sprintf("%s[*]", syncGatewayConfigurator)})
	defer DeleteUser(t, httpClient, eps[0], syncGatewayConfigurator)
	MakeUser(t, httpClient, eps[0], syncGatewayReplicator, "password", []string{fmt.Sprintf("%s[*]", syncGatewayReplicator)})
	defer DeleteUser(t, httpClient, eps[0], syncGatewayReplicator)

	testUsers := []string{syncGatewayDevOps, syncGatewayApp, syncGatewayAppRo, syncGatewayReplicator, syncGatewayConfigurator}

	endPoints := []struct {
		Method   string
		Endpoint string
		Users    []string
	}{
		{
			Method:   "GET",
			Endpoint: "/db/",
			Users:    []string{syncGatewayDevOps, syncGatewayConfigurator},
		},
		{
			Method:   "POST",
			Endpoint: "/db/",
			Users:    []string{syncGatewayApp},
		},
		{
			Method:   "GET",
			Endpoint: "/db/_all_docs",
			Users:    []string{syncGatewayApp, syncGatewayAppRo},
		},