40 lines
1.2 KiB
JavaScript
40 lines
1.2 KiB
JavaScript
/**
|
|
* Test that user modifications on replica set primaries
|
|
* will invalidate cached user credentials on secondaries
|
|
* @tags: [requires_replication]
|
|
*/
|
|
|
|
import {ReplSetTest} from "jstests/libs/replsettest.js";
|
|
|
|
var NUM_NODES = 3;
|
|
var rsTest = new ReplSetTest({nodes: NUM_NODES});
|
|
rsTest.startSet({oplogSize: 10, keyFile: 'jstests/libs/key1'});
|
|
rsTest.initiate();
|
|
rsTest.awaitSecondaryNodes();
|
|
|
|
var primary = rsTest.getPrimary();
|
|
var secondary = rsTest.getSecondary();
|
|
var admin = primary.getDB('admin');
|
|
|
|
// Setup initial data
|
|
admin.createUser({user: 'admin', pwd: 'password', roles: jsTest.adminUserRoles});
|
|
admin.auth('admin', 'password');
|
|
|
|
primary.getDB('foo').createUser({user: 'foo', pwd: 'foopwd', roles: []}, {w: NUM_NODES});
|
|
|
|
let secondaryFoo = secondary.getDB('foo');
|
|
secondaryFoo.auth('foo', 'foopwd');
|
|
assert.throws(function() {
|
|
secondaryFoo.col.findOne();
|
|
}, [], "Secondary read worked without permissions");
|
|
|
|
primary.getDB('foo').updateUser('foo', {roles: jsTest.basicUserRoles}, {w: NUM_NODES});
|
|
assert.doesNotThrow(function() {
|
|
secondaryFoo.col.findOne();
|
|
}, [], "Secondary read did not work with permissions");
|
|
|
|
admin.logout();
|
|
secondaryFoo.logout();
|
|
|
|
rsTest.stopSet();
|