Method TestAllowUIDAccess

acl/acl_test.go:2654–2710

()

}

func (asuite *AclTestSuite) TestAllowUIDAccess() {
	t := asuite.T()
	ctx, cancel := context.WithTimeout(context.Background(), 100*time.Second)
	defer cancel()

	gc, cleanup, err := asuite.dc.Client()
	require.NoError(t, err)
	defer cleanup()
	require.NoError(t, gc.LoginIntoNamespace(ctx, dgraphapi.DefaultUser,
		dgraphapi.DefaultPassword, x.RootNamespace))

	hc, err := asuite.dc.HTTPClient()
	require.NoError(t, err)
	require.NoError(t, hc.LoginIntoNamespace(dgraphapi.DefaultUser, dgraphapi.DefaultPassword, x.RootNamespace))

	require.NoError(t, gc.DropAll())
	op := api.Operation{Schema: `
		name	 : string @index(exact) .
	`}
	require.NoError(t, gc.Alter(ctx, &op))

	resetUser(t, hc)

	createdGroup, err := hc.CreateGroup(devGroup)
	require.NoError(t, err)
	require.Equal(t, devGroup, createdGroup)
	require.NoError(t, hc.AddUserToGroup(userid, devGroup))

	require.NoError(t, asuite.dc.AssignUids(gc.Dgraph, 101))
	mu := &api.Mutation{SetNquads: []byte(`<100> <name> "100th User" .`), CommitNow: true}
	_, err = gc.Mutate(mu)
	require.NoError(t, err)

	// give read access of <name> to alice
	require.NoError(t, hc.AddRulesToGroup(devGroup,
		[]dgraphapi.AclRule{{Predicate: "name", Permission: Read.Code}}, true))

	asuite.Upgrade()

	userClient, cleanup, err := asuite.dc.Client()
	require.NoError(t, err)
	defer cleanup()
	time.Sleep(defaultTimeToSleep)

	require.NoError(t, userClient.LoginIntoNamespace(ctx, userid, userpassword, x.RootNamespace))

	uidQuery := `
	{
		me(func: uid(100)) {
			uid
			name
		}
	}`
	resp, err := userClient.Query(uidQuery)
	require.NoError(t, err)
	require.NoError(t, dgraphapi.CompareJSON(`{"me":[{"name":"100th User", "uid": "0x64"}]}`, string(resp.GetJson())))
}