36 lines
1.3 KiB
JavaScript
36 lines
1.3 KiB
JavaScript
// SERVER-8802: Test that you can't build indexes on system.users and use that to drop users with
|
|
// dropDups.
|
|
let conn = MongoRunner.runMongod({auth: ""});
|
|
|
|
let adminDB = conn.getDB("admin");
|
|
let testDB = conn.getDB("test");
|
|
adminDB.createUser({user: "admin", pwd: "x", roles: ["userAdminAnyDatabase"]});
|
|
adminDB.auth("admin", "x");
|
|
adminDB.createUser({user: "mallory", pwd: "x", roles: ["readWriteAnyDatabase"]});
|
|
testDB.createUser({user: "user", pwd: "x", roles: ["read"]});
|
|
assert.eq(3, adminDB.system.users.count());
|
|
adminDB.logout();
|
|
|
|
adminDB.auth("mallory", "x");
|
|
let res = adminDB.system.users.createIndex({haxx: 1}, {unique: true, dropDups: true});
|
|
assert(!res.ok);
|
|
assert.eq(13, res.code); // unauthorized
|
|
// Make sure that no indexes were built.
|
|
let collectionInfosCursor = adminDB.runCommand("listCollections", {
|
|
filter: {
|
|
$and: [
|
|
{name: /^admin\.system\.users\.\$/},
|
|
{name: {$ne: "admin.system.users.$_id_"}},
|
|
{name: {$ne: "admin.system.users.$user_1_db_1"}},
|
|
],
|
|
},
|
|
});
|
|
|
|
assert.eq([], new DBCommandCursor(adminDB, collectionInfosCursor).toArray());
|
|
adminDB.logout();
|
|
|
|
adminDB.auth("admin", "x");
|
|
// Make sure that no users were actually dropped
|
|
assert.eq(3, adminDB.system.users.count());
|
|
MongoRunner.stopMongod(conn, null, {user: "admin", pwd: "x"});
|