Method TestQueryRemoveUnauthorizedPred

acl/acl_test.go:1062–1210

()

}

func (asuite *AclTestSuite) TestQueryRemoveUnauthorizedPred() {
	t := asuite.T()
	ctx, cancel := context.WithTimeout(context.Background(), 100*time.Second)
	defer cancel()

	gc, cleanup, err := asuite.dc.Client()
	require.NoError(t, err)
	defer cleanup()
	require.NoError(t, gc.LoginIntoNamespace(ctx, dgraphapi.DefaultUser,
		dgraphapi.DefaultPassword, x.RootNamespace))

	hc, err := asuite.dc.HTTPClient()
	require.NoError(t, err)
	require.NoError(t, hc.LoginIntoNamespace(dgraphapi.DefaultUser,
		dgraphapi.DefaultPassword, x.RootNamespace))

	require.NoError(t, gc.DropAll())

	op := api.Operation{Schema: `
		name	 : string @index(exact) .
		nickname : string @index(exact) .
		age 	 : int .
		type TypeName {
			name: string
			age: int
		}
	`}
	require.NoError(t, gc.Alter(ctx, &op))

	resetUser(t, hc)
	createdGroup, err := hc.CreateGroup(devGroup)
	require.NoError(t, err)
	require.Equal(t, devGroup, createdGroup)
	require.NoError(t, hc.AddUserToGroup(userid, devGroup))

	mu := &api.Mutation{
		SetNquads: []byte(`
			_:a <name> "RandomGuy" .
			_:a <age> "23" .
			_:a <nickname> "RG" .
			_:a <dgraph.type> "TypeName" .
			_:b <name> "RandomGuy2" .
			_:b <age> "25" .
			_:b <nickname> "RG2" .
			_:b <dgraph.type> "TypeName" .`),
		CommitNow: true,
	}
	_, err = gc.Mutate(mu)
	require.NoError(t, err)

	// give read access of <name> to alice
	require.NoError(t, hc.AddRulesToGroup(devGroup,
		[]dgraphapi.AclRule{{Predicate: "name", Permission: Read.Code}}, true))
	asuite.Upgrade()
	userClient, cleanup, err := asuite.dc.Client()
	require.NoError(t, err)
	defer cleanup()