9ad8d6335f
There are likely more JavaScript tests which have been added since
r3.6.9 that still need to be tagged.
(cherry picked from commit 05ec08fa62)
63 lines
2.0 KiB
JavaScript
63 lines
2.0 KiB
JavaScript
// @tags: [
|
|
// assumes_superuser_permissions,
|
|
// assumes_write_concern_unchanged,
|
|
// requires_auth,
|
|
// requires_non_retryable_commands,
|
|
// ]
|
|
|
|
// Ensure that inserts and updates of the system.users collection validate the schema of inserted
|
|
// documents.
|
|
|
|
mydb = db.getSisterDB("validate_user_documents");
|
|
|
|
function assertGLEOK(status) {
|
|
assert(status.ok && status.err === null, "Expected OK status object; found " + tojson(status));
|
|
}
|
|
|
|
function assertGLENotOK(status) {
|
|
assert(status.ok && status.err !== null,
|
|
"Expected not-OK status object; found " + tojson(status));
|
|
}
|
|
|
|
mydb.dropDatabase();
|
|
mydb.dropAllUsers();
|
|
|
|
//
|
|
// Tests of the insert path
|
|
//
|
|
|
|
// V0 user document document; insert should fail.
|
|
assert.commandFailed(
|
|
mydb.runCommand({createUser: 1, user: "spencer", pwd: "password", readOnly: true}));
|
|
|
|
// V1 user document; insert should fail.
|
|
assert.commandFailed(
|
|
mydb.runCommand({createUser: 1, user: "spencer", userSource: "test2", roles: ["dbAdmin"]}));
|
|
|
|
// Valid V2 user document; insert should succeed.
|
|
assert.commandWorked(mydb.runCommand({createUser: "spencer", pwd: "password", roles: ["dbAdmin"]}));
|
|
|
|
// Valid V2 user document; insert should succeed.
|
|
assert.commandWorked(mydb.runCommand({
|
|
createUser: "andy",
|
|
pwd: "password",
|
|
roles: [{role: "dbAdmin", db: "validate_user_documents", hasRole: true, canDelegate: false}]
|
|
}));
|
|
|
|
// Non-existent role; insert should fail
|
|
assert.commandFailed(mydb.runCommand({createUser: "bob", pwd: "password", roles: ["fakeRole123"]}));
|
|
|
|
//
|
|
// Tests of the update path
|
|
//
|
|
|
|
// Update a document in a legal way, expect success.
|
|
assert.commandWorked(mydb.runCommand({updateUser: 'spencer', roles: ['read']}));
|
|
|
|
// Update a document in a way that is illegal, expect failure.
|
|
assert.commandFailed(mydb.runCommand({updateUser: 'spencer', readOnly: true}));
|
|
assert.commandFailed(mydb.runCommand({updateUser: 'spencer', pwd: ""}));
|
|
assert.commandFailed(mydb.runCommand({updateUser: 'spencer', roles: ['fakeRole123']}));
|
|
|
|
mydb.dropDatabase();
|