mongo/jstests/auth/auth3.js

(function() {

'use strict'

var conn = MongoRunner.runMongod({ auth: "" });

var admin = conn.getDB("admin");
var errorCodeUnauthorized = 13;

admin.createUser({user:"foo",pwd: "bar", roles: jsTest.adminUserRoles});

print("make sure curop, killop, and unlock fail");

var x = admin.$cmd.sys.inprog.findOne();
assert(!("inprog" in x), tojson(x));
assert.eq(x.code, errorCodeUnauthorized, tojson(x));

x = admin.killOp(123);
assert(!("info" in x), tojson(x));
assert.eq(x.code, errorCodeUnauthorized, tojson(x));

x = admin.fsyncUnlock();
assert(x.errmsg != "not locked", tojson(x));
assert.eq(x.code, errorCodeUnauthorized, tojson(x));

conn.getDB("admin").auth("foo","bar");

assert("inprog" in admin.currentOp());
assert("info" in admin.killOp(123));
assert.eq(admin.fsyncUnlock().errmsg, "not locked");

})();