@@ -103,6 +103,19 @@ func TestAuthzOwnerRole(t *testing.T) {
103
103
require .True (t , isAuthorizedOperation (api .MessagesMethodName , ownerRoleName ))
104
104
require .True (t , isAuthorizedOperation (api .ListSubscriptionsMethodName , ownerRoleName ))
105
105
106
+ // search
107
+ require .True (t , isAuthorizedOperation (api .CreateOrUpdateIndexMethodName , ownerRoleName ))
108
+ require .True (t , isAuthorizedOperation (api .GetIndexMethodName , ownerRoleName ))
109
+ require .True (t , isAuthorizedOperation (api .DeleteIndexMethodName , ownerRoleName ))
110
+ require .True (t , isAuthorizedOperation (api .ListIndexesMethodName , ownerRoleName ))
111
+ require .True (t , isAuthorizedOperation (api .SearchGetMethodName , ownerRoleName ))
112
+ require .True (t , isAuthorizedOperation (api .SearchCreateById , ownerRoleName ))
113
+ require .True (t , isAuthorizedOperation (api .SearchCreate , ownerRoleName ))
114
+ require .True (t , isAuthorizedOperation (api .SearchCreateOrReplace , ownerRoleName ))
115
+ require .True (t , isAuthorizedOperation (api .SearchUpdate , ownerRoleName ))
116
+ require .True (t , isAuthorizedOperation (api .SearchDeleteByQuery , ownerRoleName ))
117
+ require .True (t , isAuthorizedOperation (api .SearchSearch , ownerRoleName ))
118
+
106
119
// negative
107
120
require .False (t , isAuthorizedOperation (api .VerifyInvitationMethodName , ownerRoleName ))
108
121
require .False (t , isAuthorizedOperation (api .CreateNamespaceMethodName , ownerRoleName ))
@@ -184,6 +197,19 @@ func TestAuthzEditorRole(t *testing.T) {
184
197
require .True (t , isAuthorizedOperation (api .MessagesMethodName , editorRoleName ))
185
198
require .True (t , isAuthorizedOperation (api .ListSubscriptionsMethodName , editorRoleName ))
186
199
200
+ // search
201
+ require .True (t , isAuthorizedOperation (api .CreateOrUpdateIndexMethodName , editorRoleName ))
202
+ require .True (t , isAuthorizedOperation (api .GetIndexMethodName , editorRoleName ))
203
+ require .True (t , isAuthorizedOperation (api .DeleteIndexMethodName , editorRoleName ))
204
+ require .True (t , isAuthorizedOperation (api .ListIndexesMethodName , editorRoleName ))
205
+ require .True (t , isAuthorizedOperation (api .SearchGetMethodName , editorRoleName ))
206
+ require .True (t , isAuthorizedOperation (api .SearchCreateById , editorRoleName ))
207
+ require .True (t , isAuthorizedOperation (api .SearchCreate , editorRoleName ))
208
+ require .True (t , isAuthorizedOperation (api .SearchCreateOrReplace , editorRoleName ))
209
+ require .True (t , isAuthorizedOperation (api .SearchUpdate , editorRoleName ))
210
+ require .True (t , isAuthorizedOperation (api .SearchDeleteByQuery , editorRoleName ))
211
+ require .True (t , isAuthorizedOperation (api .SearchSearch , editorRoleName ))
212
+
187
213
// negative
188
214
require .False (t , isAuthorizedOperation (api .ListUsersMethodName , editorRoleName ))
189
215
require .False (t , isAuthorizedOperation (api .VerifyInvitationMethodName , editorRoleName ))
@@ -233,6 +259,12 @@ func TestAuthzReadOnlyRole(t *testing.T) {
233
259
// realtime
234
260
require .True (t , isAuthorizedOperation (api .ReadMessagesMethodName , readOnlyRoleName ))
235
261
262
+ // search
263
+ require .True (t , isAuthorizedOperation (api .GetIndexMethodName , readOnlyRoleName ))
264
+ require .True (t , isAuthorizedOperation (api .ListIndexesMethodName , readOnlyRoleName ))
265
+ require .True (t , isAuthorizedOperation (api .SearchGetMethodName , readOnlyRoleName ))
266
+ require .True (t , isAuthorizedOperation (api .SearchSearch , readOnlyRoleName ))
267
+
236
268
// negative
237
269
require .False (t , isAuthorizedOperation (api .BeginTransactionMethodName , readOnlyRoleName ))
238
270
require .False (t , isAuthorizedOperation (api .CommitTransactionMethodName , readOnlyRoleName ))
@@ -269,4 +301,13 @@ func TestAuthzReadOnlyRole(t *testing.T) {
269
301
require .False (t , isAuthorizedOperation (api .DeleteGlobalAppKeyMethodName , readOnlyRoleName ))
270
302
require .False (t , isAuthorizedOperation (api .ListGlobalAppKeysMethodName , readOnlyRoleName ))
271
303
require .False (t , isAuthorizedOperation (api .RotateGlobalAppKeySecretMethodName , readOnlyRoleName ))
304
+
305
+ // search
306
+ require .False (t , isAuthorizedOperation (api .CreateOrUpdateIndexMethodName , readOnlyRoleName ))
307
+ require .False (t , isAuthorizedOperation (api .DeleteIndexMethodName , readOnlyRoleName ))
308
+ require .False (t , isAuthorizedOperation (api .SearchCreateById , readOnlyRoleName ))
309
+ require .False (t , isAuthorizedOperation (api .SearchCreate , readOnlyRoleName ))
310
+ require .False (t , isAuthorizedOperation (api .SearchCreateOrReplace , readOnlyRoleName ))
311
+ require .False (t , isAuthorizedOperation (api .SearchUpdate , readOnlyRoleName ))
312
+ require .False (t , isAuthorizedOperation (api .SearchDeleteByQuery , readOnlyRoleName ))
272
313
}
0 commit comments