Function TestGuestReadOnly

rest/doc_api_test.go:140–178

(t *testing.T)

}

func TestGuestReadOnly(t *testing.T) {
	rt := NewRestTester(t, &RestTesterConfig{
		GuestEnabled: true,
		DatabaseConfig: &DatabaseConfig{DbConfig: DbConfig{
			Unsupported: &db.UnsupportedOptions{
				GuestReadOnly: true,
			},
		},
		}},
	)
	defer rt.Close()

	const docID = "doc"

	// Write a document as admin
	response := rt.SendAdminRequest(http.MethodPut, "/{{.keyspace}}/"+docID, `{"val": "test"}`)
	RequireStatus(t, response, http.StatusCreated)

	// Attempt to read as guest
	body := rt.GetDocBody(docID)
	assert.Equal(t, "test", body["val"].(string))
	rev := body["_rev"].(string)

	// Attempt to write as guest
	response = rt.SendRequest(http.MethodPut, "/{{.keyspace}}/doc?rev="+rev, `{"val": "newval"}`)
	RequireStatus(t, response, http.StatusForbidden)

	// Attempt to access _blipsync as guest - blip sync handling for read-only GUEST is applied at replication level (to allow pull-only replications).
	// Should succeed permission check, and only fail on websocket upgrade
	response = rt.SendRequest(http.MethodGet, "/{{.db}}/_blipsync", "")
	RequireStatus(t, response, http.StatusUpgradeRequired)

	// Verify matching on _blipsync path doesn't incorrectly match docs, attachments
	response = rt.SendRequest(http.MethodPut, "/{{.keyspace}}/doc_named_blipsync", "")
	RequireStatus(t, response, http.StatusForbidden)
	response = rt.SendRequest(http.MethodPut, "/{{.keyspace}}/doc/_blipsync", "")
	RequireStatus(t, response, http.StatusForbidden)

}

func TestGetDocWithCV(t *testing.T) {
	rt := NewRestTesterPersistentConfig(t)