summaryrefslogtreecommitdiff
path: root/jstests/auth/rename.js
blob: 0db405d32db1deb7ab44f12be88a89e581521a12 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
// test renameCollection with auth

// Multiple users cannot be authenticated on one connection within a session.
TestData.disableImplicitSessions = true;

(function() {
'use strict';

const m = MongoRunner.runMongod({auth: ""});

const db1 = m.getDB("foo");
const db2 = m.getDB("bar");
const admin = m.getDB('admin');

// Setup initial data
admin.createUser({user: 'admin', pwd: 'password', roles: jsTest.adminUserRoles});
admin.auth('admin', 'password');

db1.createUser({user: "foo", pwd: "bar", roles: jsTest.basicUserRoles});
db2.createUser({user: "bar", pwd: "foo", roles: [{role: 'readWriteAnyDatabase', db: 'admin'}]});

printjson(db1.a.count());
db1.a.save({});
assert.eq(db1.a.count(), 1);

admin.logout();

// can't run same db w/o auth
assert.commandFailed(
    admin.runCommand({renameCollection: db1.a.getFullName(), to: db1.b.getFullName()}));

// can run same db with auth
assert(db1.auth('foo', 'bar'));
assert.commandWorked(
    admin.runCommand({renameCollection: db1.a.getFullName(), to: db1.b.getFullName()}));

// can't run diff db w/o auth
assert.commandFailed(
    admin.runCommand({renameCollection: db1.b.getFullName(), to: db2.a.getFullName()}));
db1.logout();

// can run diff db with auth
assert(db2.auth('bar', 'foo'));
assert.commandWorked(
    admin.runCommand({renameCollection: db1.b.getFullName(), to: db2.a.getFullName()}));

// test post conditions
assert.eq(db1.a.count(), 0);
assert.eq(db1.b.count(), 0);
assert.eq(db2.a.count(), 1);
db2.logout();

assert(admin.auth('admin', 'password'));
MongoRunner.stopMongod(m);
})();