Function TestUserViewQuery

rest/view_api_test.go:236–292

(t *testing.T)

}

func TestUserViewQuery(t *testing.T) {
	if !base.TestsDisableGSI() {
		t.Skip("views tests are not applicable under GSI")
	}

	rtConfig := RestTesterConfig{
		SyncFn:       `function(doc) {channel(doc.channel)}`,
		GuestEnabled: true,
	}

	rt := NewRestTesterDefaultCollection(t, &rtConfig) // views only use default collection
	defer rt.Close()

	ctx := rt.Context()
	a := rt.ServerContext().Database(ctx, "db").Authenticator(ctx)
	rt.ServerContext().Database(ctx, "db").SetUserViewsEnabled(true)

	// Create a view:
	response := rt.SendAdminRequest(http.MethodPut, "/db/_design/foo", `{"views":{"bar": {"map": "function(doc) {emit(doc.key, doc.value);}"}}}`)
	RequireStatus(t, response, http.StatusCreated)

	// Create docs:
	response = rt.SendRequest(http.MethodPut, "/db/doc1", `{"key":10, "value":"ten", "channel":"W"}`)
	RequireStatus(t, response, http.StatusCreated)
	response = rt.SendRequest(http.MethodPut, "/db/doc2", `{"key":7, "value":"seven", "channel":"Q"}`)
	RequireStatus(t, response, http.StatusCreated)

	// Create a user:
	password := "123456"
	quinn, _ := a.NewUser("quinn", password, channels.BaseSetOf(t, "Q", "q"))
	assert.NoError(t, a.Save(quinn))

	// Have the user query the view:
	result := rt.WaitForNUserViewResults(1, "/db/_design/foo/_view/bar", quinn, password)
	require.Len(t, result.Rows, 1)
	assert.Equal(t, 1, result.TotalRows)
	row := result.Rows[0]
	assert.Equal(t, float64(7), row.Key)
	assert.Equal(t, "seven", row.Value)

	// Admin should see both rows:
	result = rt.WaitForNAdminViewResults(2, "/db/_design/foo/_view/bar")
	require.Len(t, result.Rows, 2)
	row = result.Rows[0]
	assert.Equal(t, float64(7), row.Key)
	assert.Equal(t, "seven", row.Value)

	row = result.Rows[1]
	assert.Equal(t, float64(10), row.Key)
	assert.Equal(t, "ten", row.Value)

	// Make sure users are not allowed to query internal views:
	request := Request(http.MethodGet, "/db/_design/sync_gateway/_view/access", "")
	request.SetBasicAuth(quinn.Name(), password)
	response = rt.Send(request)
	RequireStatus(t, response, http.StatusForbidden)
}