1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
|
// Test that the collection catalog is restored correctly after a restart in a multitenant
// environment.
(function() {
"use strict";
load('jstests/aggregation/extras/utils.js'); // For arrayEq()
function runTest(featureFlagRequireTenantId) {
const rst = new ReplSetTest({
nodes: 3,
nodeOptions: {
auth: '',
setParameter:
{multitenancySupport: true, featureFlagRequireTenantID: featureFlagRequireTenantId}
}
});
rst.startSet({keyFile: 'jstests/libs/key1'});
rst.initiate();
let primary = rst.getPrimary();
let adminDb = primary.getDB('admin');
// Must be authenticated as a user with ActionType::useTenant in order to use $tenant.
assert.commandWorked(adminDb.runCommand({createUser: 'admin', pwd: 'pwd', roles: ['root']}));
assert(adminDb.auth('admin', 'pwd'));
{
const kTenant = ObjectId();
let testDb = primary.getDB('myDb0');
// Create a collection by inserting a document to it.
assert.commandWorked(testDb.runCommand(
{insert: 'myColl0', documents: [{_id: 0, a: 1, b: 1}], '$tenant': kTenant}));
// Run findAndModify on the document.
let fad = assert.commandWorked(testDb.runCommand({
findAndModify: "myColl0",
query: {a: 1},
update: {$inc: {a: 10}},
'$tenant': kTenant
}));
assert.eq({_id: 0, a: 1, b: 1}, fad.value);
// Create a view on the collection.
assert.commandWorked(testDb.runCommand(
{"create": "view1", "viewOn": "myColl0", pipeline: [], '$tenant': kTenant}));
// Stop the rs and restart it.
rst.stopSet(null /* signal */, true /* forRestart */, {noCleanData: true});
rst.startSet({restart: true});
primary = rst.getPrimary();
adminDb = primary.getDB('admin');
assert(adminDb.auth('admin', 'pwd'));
testDb = primary.getDB('myDb0');
// Assert we see 3 collections in the tenant's db 'myDb0' - the original collection we
// created, the view on it, and the system.views collection.
const colls = assert.commandWorked(
testDb.runCommand({listCollections: 1, nameOnly: true, '$tenant': kTenant}));
assert.eq(3, colls.cursor.firstBatch.length, tojson(colls.cursor.firstBatch));
const expectedColls = [
{"name": "myColl0", "type": "collection"},
{"name": "system.views", "type": "collection"},
{"name": "view1", "type": "view"}
];
assert(arrayEq(expectedColls, colls.cursor.firstBatch), tojson(colls.cursor.firstBatch));
// Assert we can still run findAndModify on the doc.
fad = assert.commandWorked(testDb.runCommand({
findAndModify: "myColl0",
query: {a: 11},
update: {$inc: {a: 10}},
'$tenant': kTenant
}));
assert.eq({_id: 0, a: 11, b: 1}, fad.value);
const findAndModPrefixed =
primary.getDB(kTenant + '_myDb0')
.runCommand({findAndModify: "myColl0", query: {b: 1}, update: {$inc: {b: 10}}});
if (!featureFlagRequireTenantId) {
// Check that we do find the doc when the tenantId was passed as a prefix, only if the
// feature flag is not enabled. In this case, the server still accepts prefixed names,
// and will parse the tenant from the db name.
assert.commandWorked(findAndModPrefixed);
assert.eq({_id: 0, a: 21, b: 1}, findAndModPrefixed.value);
} else {
// assert.commandFailed(findAndModPrefixed);
// TODO SERVER-70876 Uncomment out the check above, and remove the check below.
assert.eq(null, findAndModPrefixed.value);
}
}
rst.stopSet();
}
runTest(true);
runTest(false);
})();
|
