Mercurial > hg
annotate tests/test-http-permissions.t @ 48663:bf424fe4f814
lfs: take lock before writing requirements
With `share-safe`, we will also write file in the store, so we take the store
lock before writing requirements.
Differential Revision: https://phab.mercurial-scm.org/D11991
author | Pierre-Yves David <pierre-yves.david@octobus.net> |
---|---|
date | Fri, 07 Jan 2022 17:33:27 +0100 |
parents | 9acbe30953e8 |
children |
rev | line source |
---|---|
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1 $ cat > fakeremoteuser.py << EOF |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
2 > import os |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
3 > from mercurial.hgweb import hgweb_mod |
37785
b4d85bc122bd
wireproto: rename wireproto to wireprotov1server (API)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36800
diff
changeset
|
4 > from mercurial import wireprotov1server |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
5 > class testenvhgweb(hgweb_mod.hgweb): |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
6 > def __call__(self, env, respond): |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
7 > # Allow REMOTE_USER to define authenticated user. |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
8 > if r'REMOTE_USER' in os.environ: |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
9 > env[r'REMOTE_USER'] = os.environ[r'REMOTE_USER'] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
10 > # Allow REQUEST_METHOD to override HTTP method |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
11 > if r'REQUEST_METHOD' in os.environ: |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
12 > env[r'REQUEST_METHOD'] = os.environ[r'REQUEST_METHOD'] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
13 > return super(testenvhgweb, self).__call__(env, respond) |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
14 > hgweb_mod.hgweb = testenvhgweb |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
15 > |
39430
c3491d3f8984
py3: add more missing b'' prefixes in test files
Pulkit Goyal <pulkit@yandex-team.ru>
parents:
37845
diff
changeset
|
16 > @wireprotov1server.wireprotocommand(b'customreadnoperm') |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
17 > def customread(repo, proto): |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
18 > return b'read-only command no defined permissions\n' |
39430
c3491d3f8984
py3: add more missing b'' prefixes in test files
Pulkit Goyal <pulkit@yandex-team.ru>
parents:
37845
diff
changeset
|
19 > @wireprotov1server.wireprotocommand(b'customwritenoperm') |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
20 > def customwritenoperm(repo, proto): |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
21 > return b'write command no defined permissions\n' |
39430
c3491d3f8984
py3: add more missing b'' prefixes in test files
Pulkit Goyal <pulkit@yandex-team.ru>
parents:
37845
diff
changeset
|
22 > @wireprotov1server.wireprotocommand(b'customreadwithperm', permission=b'pull') |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
23 > def customreadwithperm(repo, proto): |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
24 > return b'read-only command w/ defined permissions\n' |
39430
c3491d3f8984
py3: add more missing b'' prefixes in test files
Pulkit Goyal <pulkit@yandex-team.ru>
parents:
37845
diff
changeset
|
25 > @wireprotov1server.wireprotocommand(b'customwritewithperm', permission=b'push') |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
26 > def customwritewithperm(repo, proto): |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
27 > return b'write command w/ defined permissions\n' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
28 > EOF |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
29 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
30 $ cat >> $HGRCPATH << EOF |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
31 > [extensions] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
32 > fakeremoteuser = $TESTTMP/fakeremoteuser.py |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
33 > strip = |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
34 > EOF |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
35 |
36751
2c647da851ed
tests: extract HTTP permissions tests to own test file
Gregory Szorc <gregory.szorc@gmail.com>
parents:
diff
changeset
|
36 $ hg init test |
2c647da851ed
tests: extract HTTP permissions tests to own test file
Gregory Szorc <gregory.szorc@gmail.com>
parents:
diff
changeset
|
37 $ cd test |
2c647da851ed
tests: extract HTTP permissions tests to own test file
Gregory Szorc <gregory.szorc@gmail.com>
parents:
diff
changeset
|
38 $ echo a > a |
2c647da851ed
tests: extract HTTP permissions tests to own test file
Gregory Szorc <gregory.szorc@gmail.com>
parents:
diff
changeset
|
39 $ hg ci -Ama |
2c647da851ed
tests: extract HTTP permissions tests to own test file
Gregory Szorc <gregory.szorc@gmail.com>
parents:
diff
changeset
|
40 adding a |
2c647da851ed
tests: extract HTTP permissions tests to own test file
Gregory Szorc <gregory.szorc@gmail.com>
parents:
diff
changeset
|
41 $ cd .. |
2c647da851ed
tests: extract HTTP permissions tests to own test file
Gregory Szorc <gregory.szorc@gmail.com>
parents:
diff
changeset
|
42 $ hg clone test test2 |
2c647da851ed
tests: extract HTTP permissions tests to own test file
Gregory Szorc <gregory.szorc@gmail.com>
parents:
diff
changeset
|
43 updating to branch default |
2c647da851ed
tests: extract HTTP permissions tests to own test file
Gregory Szorc <gregory.szorc@gmail.com>
parents:
diff
changeset
|
44 1 files updated, 0 files merged, 0 files removed, 0 files unresolved |
2c647da851ed
tests: extract HTTP permissions tests to own test file
Gregory Szorc <gregory.szorc@gmail.com>
parents:
diff
changeset
|
45 $ cd test2 |
2c647da851ed
tests: extract HTTP permissions tests to own test file
Gregory Szorc <gregory.szorc@gmail.com>
parents:
diff
changeset
|
46 $ echo a >> a |
2c647da851ed
tests: extract HTTP permissions tests to own test file
Gregory Szorc <gregory.szorc@gmail.com>
parents:
diff
changeset
|
47 $ hg ci -mb |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
48 $ hg book bm -r 0 |
36751
2c647da851ed
tests: extract HTTP permissions tests to own test file
Gregory Szorc <gregory.szorc@gmail.com>
parents:
diff
changeset
|
49 $ cd ../test |
2c647da851ed
tests: extract HTTP permissions tests to own test file
Gregory Szorc <gregory.szorc@gmail.com>
parents:
diff
changeset
|
50 |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
51 web.deny_read=* prevents access to wire protocol for all users |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
52 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
53 $ cat > .hg/hgrc <<EOF |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
54 > [web] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
55 > deny_read = * |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
56 > EOF |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
57 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
58 $ hg serve -p $HGPORT -d --pid-file hg.pid |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
59 $ cat hg.pid > $DAEMON_PIDS |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
60 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
61 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=capabilities' |
36754
e3c228b4510d
wireproto: declare operation type for most commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36753
diff
changeset
|
62 401 read not authorized |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
63 |
36754
e3c228b4510d
wireproto: declare operation type for most commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36753
diff
changeset
|
64 0 |
e3c228b4510d
wireproto: declare operation type for most commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36753
diff
changeset
|
65 read not authorized |
e3c228b4510d
wireproto: declare operation type for most commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36753
diff
changeset
|
66 [1] |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
67 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
68 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=stream_out' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
69 401 read not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
70 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
71 0 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
72 read not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
73 [1] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
74 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
75 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=listkeys' --requestheader 'x-hgarg-1=namespace=phases' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
76 401 read not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
77 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
78 0 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
79 read not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
80 [1] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
81 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
82 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=batch' --requestheader 'x-hgarg-1=cmds=listkeys+namespace%3Dphases' |
36755
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
83 401 read not authorized |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
84 |
36755
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
85 0 |
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
86 read not authorized |
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
87 [1] |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
88 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
89 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customreadnoperm' |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
90 401 read not authorized |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
91 |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
92 0 |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
93 read not authorized |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
94 [1] |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
95 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
96 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customreadwithperm' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
97 401 read not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
98 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
99 0 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
100 read not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
101 [1] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
102 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
103 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritenoperm' |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
104 401 read not authorized |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
105 |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
106 0 |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
107 read not authorized |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
108 [1] |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
109 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
110 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritewithperm' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
111 401 read not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
112 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
113 0 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
114 read not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
115 [1] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
116 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
117 $ hg --cwd ../test2 pull http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
118 pulling from http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
119 abort: authorization failed |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
120 [255] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
121 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
122 $ killdaemons.py |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
123 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
124 web.deny_read=* with REMOTE_USER set still locks out clients |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
125 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
126 $ REMOTE_USER=authed_user hg serve -p $HGPORT -d --pid-file hg.pid |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
127 $ cat hg.pid > $DAEMON_PIDS |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
128 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
129 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=capabilities' |
36754
e3c228b4510d
wireproto: declare operation type for most commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36753
diff
changeset
|
130 401 read not authorized |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
131 |
36754
e3c228b4510d
wireproto: declare operation type for most commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36753
diff
changeset
|
132 0 |
e3c228b4510d
wireproto: declare operation type for most commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36753
diff
changeset
|
133 read not authorized |
e3c228b4510d
wireproto: declare operation type for most commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36753
diff
changeset
|
134 [1] |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
135 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
136 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=stream_out' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
137 401 read not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
138 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
139 0 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
140 read not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
141 [1] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
142 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
143 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=batch' --requestheader 'x-hgarg-1=cmds=listkeys+namespace%3Dphases' |
36755
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
144 401 read not authorized |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
145 |
36755
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
146 0 |
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
147 read not authorized |
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
148 [1] |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
149 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
150 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customreadnoperm' |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
151 401 read not authorized |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
152 |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
153 0 |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
154 read not authorized |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
155 [1] |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
156 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
157 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customreadwithperm' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
158 401 read not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
159 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
160 0 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
161 read not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
162 [1] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
163 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
164 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritenoperm' |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
165 401 read not authorized |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
166 |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
167 0 |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
168 read not authorized |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
169 [1] |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
170 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
171 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritewithperm' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
172 401 read not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
173 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
174 0 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
175 read not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
176 [1] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
177 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
178 $ hg --cwd ../test2 pull http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
179 pulling from http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
180 abort: authorization failed |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
181 [255] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
182 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
183 $ killdaemons.py |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
184 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
185 web.deny_read=<user> denies access to unauthenticated user |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
186 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
187 $ cat > .hg/hgrc <<EOF |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
188 > [web] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
189 > deny_read = baduser1,baduser2 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
190 > EOF |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
191 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
192 $ hg serve -p $HGPORT -d --pid-file hg.pid |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
193 $ cat hg.pid > $DAEMON_PIDS |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
194 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
195 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=listkeys' --requestheader 'x-hgarg-1=namespace=phases' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
196 401 read not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
197 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
198 0 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
199 read not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
200 [1] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
201 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
202 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=batch' --requestheader 'x-hgarg-1=cmds=listkeys+namespace%3Dphases' |
36755
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
203 401 read not authorized |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
204 |
36755
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
205 0 |
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
206 read not authorized |
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
207 [1] |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
208 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
209 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customreadnoperm' |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
210 401 read not authorized |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
211 |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
212 0 |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
213 read not authorized |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
214 [1] |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
215 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
216 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customreadwithperm' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
217 401 read not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
218 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
219 0 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
220 read not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
221 [1] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
222 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
223 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritenoperm' |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
224 401 read not authorized |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
225 |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
226 0 |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
227 read not authorized |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
228 [1] |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
229 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
230 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritewithperm' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
231 401 read not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
232 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
233 0 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
234 read not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
235 [1] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
236 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
237 $ hg --cwd ../test2 pull http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
238 pulling from http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
239 abort: authorization failed |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
240 [255] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
241 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
242 $ killdaemons.py |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
243 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
244 web.deny_read=<user> denies access to users in deny list |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
245 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
246 $ REMOTE_USER=baduser2 hg serve -p $HGPORT -d --pid-file hg.pid |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
247 $ cat hg.pid > $DAEMON_PIDS |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
248 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
249 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=listkeys' --requestheader 'x-hgarg-1=namespace=phases' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
250 401 read not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
251 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
252 0 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
253 read not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
254 [1] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
255 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
256 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=batch' --requestheader 'x-hgarg-1=cmds=listkeys+namespace%3Dphases' |
36755
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
257 401 read not authorized |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
258 |
36755
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
259 0 |
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
260 read not authorized |
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
261 [1] |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
262 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
263 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customreadnoperm' |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
264 401 read not authorized |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
265 |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
266 0 |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
267 read not authorized |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
268 [1] |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
269 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
270 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customreadwithperm' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
271 401 read not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
272 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
273 0 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
274 read not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
275 [1] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
276 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
277 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritenoperm' |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
278 401 read not authorized |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
279 |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
280 0 |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
281 read not authorized |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
282 [1] |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
283 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
284 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritewithperm' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
285 401 read not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
286 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
287 0 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
288 read not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
289 [1] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
290 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
291 $ hg --cwd ../test2 pull http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
292 pulling from http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
293 abort: authorization failed |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
294 [255] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
295 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
296 $ killdaemons.py |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
297 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
298 web.deny_read=<user> allows access to authenticated users not in list |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
299 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
300 $ REMOTE_USER=gooduser hg serve -p $HGPORT -d --pid-file hg.pid |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
301 $ cat hg.pid > $DAEMON_PIDS |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
302 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
303 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=listkeys' --requestheader 'x-hgarg-1=namespace=phases' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
304 200 Script output follows |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
305 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
306 cb9a9f314b8b07ba71012fcdbc544b5a4d82ff5b 1 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
307 publishing True (no-eol) |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
308 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
309 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=batch' --requestheader 'x-hgarg-1=cmds=listkeys+namespace%3Dphases' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
310 200 Script output follows |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
311 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
312 cb9a9f314b8b07ba71012fcdbc544b5a4d82ff5b 1 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
313 publishing True (no-eol) |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
314 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
315 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customreadnoperm' |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
316 405 push requires POST request |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
317 |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
318 0 |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
319 push requires POST request |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
320 [1] |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
321 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
322 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customreadwithperm' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
323 200 Script output follows |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
324 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
325 read-only command w/ defined permissions |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
326 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
327 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritenoperm' |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
328 405 push requires POST request |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
329 |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
330 0 |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
331 push requires POST request |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
332 [1] |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
333 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
334 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritewithperm' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
335 405 push requires POST request |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
336 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
337 0 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
338 push requires POST request |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
339 [1] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
340 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
341 $ hg --cwd ../test2 pull http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
342 pulling from http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
343 searching for changes |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
344 no changes found |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
345 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
346 $ killdaemons.py |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
347 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
348 web.allow_read=* allows reads for unauthenticated users |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
349 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
350 $ cat > .hg/hgrc <<EOF |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
351 > [web] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
352 > allow_read = * |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
353 > EOF |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
354 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
355 $ hg serve -p $HGPORT -d --pid-file hg.pid |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
356 $ cat hg.pid > $DAEMON_PIDS |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
357 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
358 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=listkeys' --requestheader 'x-hgarg-1=namespace=phases' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
359 200 Script output follows |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
360 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
361 cb9a9f314b8b07ba71012fcdbc544b5a4d82ff5b 1 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
362 publishing True (no-eol) |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
363 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
364 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=batch' --requestheader 'x-hgarg-1=cmds=listkeys+namespace%3Dphases' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
365 200 Script output follows |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
366 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
367 cb9a9f314b8b07ba71012fcdbc544b5a4d82ff5b 1 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
368 publishing True (no-eol) |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
369 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
370 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customreadnoperm' |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
371 405 push requires POST request |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
372 |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
373 0 |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
374 push requires POST request |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
375 [1] |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
376 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
377 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customreadwithperm' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
378 200 Script output follows |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
379 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
380 read-only command w/ defined permissions |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
381 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
382 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritenoperm' |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
383 405 push requires POST request |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
384 |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
385 0 |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
386 push requires POST request |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
387 [1] |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
388 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
389 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritewithperm' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
390 405 push requires POST request |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
391 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
392 0 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
393 push requires POST request |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
394 [1] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
395 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
396 $ hg --cwd ../test2 pull http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
397 pulling from http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
398 searching for changes |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
399 no changes found |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
400 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
401 $ killdaemons.py |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
402 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
403 web.allow_read=* allows read for authenticated user |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
404 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
405 $ REMOTE_USER=authed_user hg serve -p $HGPORT -d --pid-file hg.pid |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
406 $ cat hg.pid > $DAEMON_PIDS |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
407 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
408 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=listkeys' --requestheader 'x-hgarg-1=namespace=phases' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
409 200 Script output follows |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
410 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
411 cb9a9f314b8b07ba71012fcdbc544b5a4d82ff5b 1 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
412 publishing True (no-eol) |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
413 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
414 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=batch' --requestheader 'x-hgarg-1=cmds=listkeys+namespace%3Dphases' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
415 200 Script output follows |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
416 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
417 cb9a9f314b8b07ba71012fcdbc544b5a4d82ff5b 1 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
418 publishing True (no-eol) |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
419 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
420 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customreadnoperm' |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
421 405 push requires POST request |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
422 |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
423 0 |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
424 push requires POST request |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
425 [1] |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
426 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
427 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customreadwithperm' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
428 200 Script output follows |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
429 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
430 read-only command w/ defined permissions |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
431 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
432 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritenoperm' |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
433 405 push requires POST request |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
434 |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
435 0 |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
436 push requires POST request |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
437 [1] |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
438 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
439 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritewithperm' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
440 405 push requires POST request |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
441 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
442 0 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
443 push requires POST request |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
444 [1] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
445 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
446 $ hg --cwd ../test2 pull http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
447 pulling from http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
448 searching for changes |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
449 no changes found |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
450 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
451 $ killdaemons.py |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
452 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
453 web.allow_read=<user> does not allow unauthenticated users to read |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
454 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
455 $ cat > .hg/hgrc <<EOF |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
456 > [web] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
457 > allow_read = gooduser |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
458 > EOF |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
459 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
460 $ hg serve -p $HGPORT -d --pid-file hg.pid |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
461 $ cat hg.pid > $DAEMON_PIDS |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
462 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
463 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=listkeys' --requestheader 'x-hgarg-1=namespace=phases' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
464 401 read not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
465 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
466 0 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
467 read not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
468 [1] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
469 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
470 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=batch' --requestheader 'x-hgarg-1=cmds=listkeys+namespace%3Dphases' |
36755
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
471 401 read not authorized |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
472 |
36755
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
473 0 |
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
474 read not authorized |
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
475 [1] |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
476 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
477 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customreadnoperm' |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
478 401 read not authorized |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
479 |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
480 0 |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
481 read not authorized |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
482 [1] |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
483 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
484 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customreadwithperm' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
485 401 read not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
486 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
487 0 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
488 read not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
489 [1] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
490 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
491 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritenoperm' |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
492 401 read not authorized |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
493 |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
494 0 |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
495 read not authorized |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
496 [1] |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
497 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
498 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritewithperm' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
499 401 read not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
500 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
501 0 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
502 read not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
503 [1] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
504 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
505 $ hg --cwd ../test2 pull http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
506 pulling from http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
507 abort: authorization failed |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
508 [255] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
509 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
510 $ killdaemons.py |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
511 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
512 web.allow_read=<user> does not allow user not in list to read |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
513 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
514 $ REMOTE_USER=baduser hg serve -p $HGPORT -d --pid-file hg.pid |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
515 $ cat hg.pid > $DAEMON_PIDS |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
516 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
517 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=listkeys' --requestheader 'x-hgarg-1=namespace=phases' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
518 401 read not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
519 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
520 0 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
521 read not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
522 [1] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
523 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
524 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=batch' --requestheader 'x-hgarg-1=cmds=listkeys+namespace%3Dphases' |
36755
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
525 401 read not authorized |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
526 |
36755
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
527 0 |
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
528 read not authorized |
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
529 [1] |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
530 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
531 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customreadnoperm' |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
532 401 read not authorized |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
533 |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
534 0 |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
535 read not authorized |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
536 [1] |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
537 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
538 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customreadwithperm' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
539 401 read not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
540 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
541 0 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
542 read not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
543 [1] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
544 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
545 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritenoperm' |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
546 401 read not authorized |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
547 |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
548 0 |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
549 read not authorized |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
550 [1] |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
551 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
552 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritewithperm' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
553 401 read not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
554 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
555 0 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
556 read not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
557 [1] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
558 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
559 $ hg --cwd ../test2 pull http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
560 pulling from http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
561 abort: authorization failed |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
562 [255] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
563 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
564 $ killdaemons.py |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
565 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
566 web.allow_read=<user> allows read from user in list |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
567 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
568 $ REMOTE_USER=gooduser hg serve -p $HGPORT -d --pid-file hg.pid |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
569 $ cat hg.pid > $DAEMON_PIDS |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
570 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
571 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=listkeys' --requestheader 'x-hgarg-1=namespace=phases' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
572 200 Script output follows |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
573 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
574 cb9a9f314b8b07ba71012fcdbc544b5a4d82ff5b 1 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
575 publishing True (no-eol) |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
576 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
577 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=batch' --requestheader 'x-hgarg-1=cmds=listkeys+namespace%3Dphases' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
578 200 Script output follows |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
579 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
580 cb9a9f314b8b07ba71012fcdbc544b5a4d82ff5b 1 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
581 publishing True (no-eol) |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
582 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
583 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customreadnoperm' |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
584 405 push requires POST request |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
585 |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
586 0 |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
587 push requires POST request |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
588 [1] |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
589 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
590 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customreadwithperm' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
591 200 Script output follows |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
592 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
593 read-only command w/ defined permissions |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
594 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
595 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritenoperm' |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
596 405 push requires POST request |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
597 |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
598 0 |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
599 push requires POST request |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
600 [1] |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
601 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
602 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritewithperm' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
603 405 push requires POST request |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
604 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
605 0 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
606 push requires POST request |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
607 [1] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
608 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
609 $ hg --cwd ../test2 pull http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
610 pulling from http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
611 searching for changes |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
612 no changes found |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
613 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
614 $ killdaemons.py |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
615 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
616 web.deny_read takes precedence over web.allow_read |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
617 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
618 $ cat > .hg/hgrc <<EOF |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
619 > [web] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
620 > allow_read = baduser |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
621 > deny_read = baduser |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
622 > EOF |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
623 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
624 $ REMOTE_USER=baduser hg serve -p $HGPORT -d --pid-file hg.pid |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
625 $ cat hg.pid > $DAEMON_PIDS |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
626 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
627 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=listkeys' --requestheader 'x-hgarg-1=namespace=phases' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
628 401 read not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
629 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
630 0 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
631 read not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
632 [1] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
633 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
634 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=batch' --requestheader 'x-hgarg-1=cmds=listkeys+namespace%3Dphases' |
36755
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
635 401 read not authorized |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
636 |
36755
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
637 0 |
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
638 read not authorized |
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
639 [1] |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
640 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
641 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customreadnoperm' |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
642 401 read not authorized |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
643 |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
644 0 |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
645 read not authorized |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
646 [1] |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
647 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
648 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customreadwithperm' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
649 401 read not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
650 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
651 0 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
652 read not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
653 [1] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
654 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
655 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritenoperm' |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
656 401 read not authorized |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
657 |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
658 0 |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
659 read not authorized |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
660 [1] |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
661 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
662 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritewithperm' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
663 401 read not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
664 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
665 0 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
666 read not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
667 [1] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
668 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
669 $ hg --cwd ../test2 pull http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
670 pulling from http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
671 abort: authorization failed |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
672 [255] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
673 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
674 $ killdaemons.py |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
675 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
676 web.allow-pull=false denies read access to repo |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
677 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
678 $ cat > .hg/hgrc <<EOF |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
679 > [web] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
680 > allow-pull = false |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
681 > EOF |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
682 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
683 $ hg serve -p $HGPORT -d --pid-file hg.pid |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
684 $ cat hg.pid > $DAEMON_PIDS |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
685 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
686 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=capabilities' |
36754
e3c228b4510d
wireproto: declare operation type for most commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36753
diff
changeset
|
687 401 pull not authorized |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
688 |
36754
e3c228b4510d
wireproto: declare operation type for most commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36753
diff
changeset
|
689 0 |
e3c228b4510d
wireproto: declare operation type for most commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36753
diff
changeset
|
690 pull not authorized |
e3c228b4510d
wireproto: declare operation type for most commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36753
diff
changeset
|
691 [1] |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
692 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
693 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=listkeys' --requestheader 'x-hgarg-1=namespace=phases' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
694 401 pull not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
695 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
696 0 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
697 pull not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
698 [1] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
699 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
700 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=batch' --requestheader 'x-hgarg-1=cmds=listkeys+namespace%3Dphases' |
36755
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
701 401 pull not authorized |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
702 |
36755
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
703 0 |
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
704 pull not authorized |
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
705 [1] |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
706 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
707 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customreadnoperm' |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
708 405 push requires POST request |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
709 |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
710 0 |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
711 push requires POST request |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
712 [1] |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
713 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
714 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customreadwithperm' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
715 401 pull not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
716 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
717 0 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
718 pull not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
719 [1] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
720 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
721 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritenoperm' |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
722 405 push requires POST request |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
723 |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
724 0 |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
725 push requires POST request |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
726 [1] |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
727 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
728 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritewithperm' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
729 405 push requires POST request |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
730 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
731 0 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
732 push requires POST request |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
733 [1] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
734 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
735 $ hg --cwd ../test2 pull http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
736 pulling from http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
737 abort: authorization failed |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
738 [255] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
739 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
740 $ killdaemons.py |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
741 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
742 Attempting a write command with HTTP GET fails |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
743 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
744 $ cat > .hg/hgrc <<EOF |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
745 > EOF |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
746 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
747 $ REQUEST_METHOD=GET hg serve -p $HGPORT -d --pid-file hg.pid |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
748 $ cat hg.pid > $DAEMON_PIDS |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
749 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
750 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=pushkey' --requestheader 'x-hgarg-1=namespace=bookmarks&key=bm&old=&new=cb9a9f314b8b07ba71012fcdbc544b5a4d82ff5b' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
751 405 push requires POST request |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
752 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
753 0 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
754 push requires POST request |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
755 [1] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
756 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
757 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=batch' --requestheader 'x-hgarg-1=cmds=pushkey+namespace%3Dbookmarks%2Ckey%3Dbm%2Cold%3D%2Cnew%3Dcb9a9f314b8b07ba71012fcdbc544b5a4d82ff5b' |
36755
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
758 405 push requires POST request |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
759 |
36755
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
760 0 |
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
761 push requires POST request |
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
762 [1] |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
763 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
764 $ hg bookmarks |
36755
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
765 no bookmarks set |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
766 $ hg bookmark -d bm |
36755
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
767 abort: bookmark 'bm' does not exist |
45913
9acbe30953e8
errors: raise InputError on bad bookmark argument
Martin von Zweigbergk <martinvonz@google.com>
parents:
45839
diff
changeset
|
768 [10] |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
769 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
770 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritenoperm' |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
771 405 push requires POST request |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
772 |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
773 0 |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
774 push requires POST request |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
775 [1] |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
776 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
777 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritewithperm' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
778 405 push requires POST request |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
779 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
780 0 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
781 push requires POST request |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
782 [1] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
783 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
784 $ killdaemons.py |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
785 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
786 Attempting a write command with an unknown HTTP verb fails |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
787 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
788 $ REQUEST_METHOD=someverb hg serve -p $HGPORT -d --pid-file hg.pid |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
789 $ cat hg.pid > $DAEMON_PIDS |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
790 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
791 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=pushkey' --requestheader 'x-hgarg-1=namespace=bookmarks&key=bm&old=&new=cb9a9f314b8b07ba71012fcdbc544b5a4d82ff5b' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
792 405 push requires POST request |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
793 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
794 0 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
795 push requires POST request |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
796 [1] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
797 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
798 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=batch' --requestheader 'x-hgarg-1=cmds=pushkey+namespace%3Dbookmarks%2Ckey%3Dbm%2Cold%3D%2Cnew%3Dcb9a9f314b8b07ba71012fcdbc544b5a4d82ff5b' |
36755
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
799 405 push requires POST request |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
800 |
36755
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
801 0 |
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
802 push requires POST request |
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
803 [1] |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
804 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
805 $ hg bookmarks |
36755
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
806 no bookmarks set |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
807 $ hg bookmark -d bm |
36755
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
808 abort: bookmark 'bm' does not exist |
45913
9acbe30953e8
errors: raise InputError on bad bookmark argument
Martin von Zweigbergk <martinvonz@google.com>
parents:
45839
diff
changeset
|
809 [10] |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
810 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
811 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritenoperm' |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
812 405 push requires POST request |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
813 |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
814 0 |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
815 push requires POST request |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
816 [1] |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
817 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
818 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritewithperm' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
819 405 push requires POST request |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
820 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
821 0 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
822 push requires POST request |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
823 [1] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
824 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
825 $ killdaemons.py |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
826 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
827 Pushing on a plaintext channel is disabled by default |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
828 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
829 $ cat > .hg/hgrc <<EOF |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
830 > EOF |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
831 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
832 $ REQUEST_METHOD=POST hg serve -p $HGPORT -d --pid-file hg.pid |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
833 $ cat hg.pid > $DAEMON_PIDS |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
834 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
835 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=pushkey' --requestheader 'x-hgarg-1=namespace=bookmarks&key=bm&old=&new=cb9a9f314b8b07ba71012fcdbc544b5a4d82ff5b' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
836 403 ssl required |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
837 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
838 0 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
839 ssl required |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
840 [1] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
841 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
842 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=batch' --requestheader 'x-hgarg-1=cmds=pushkey+namespace%3Dbookmarks%2Ckey%3Dbm%2Cold%3D%2Cnew%3Dcb9a9f314b8b07ba71012fcdbc544b5a4d82ff5b' |
36755
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
843 403 ssl required |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
844 |
36755
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
845 0 |
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
846 ssl required |
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
847 [1] |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
848 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
849 $ hg bookmarks |
36755
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
850 no bookmarks set |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
851 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
852 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritenoperm' |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
853 403 ssl required |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
854 |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
855 0 |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
856 ssl required |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
857 [1] |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
858 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
859 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritewithperm' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
860 403 ssl required |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
861 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
862 0 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
863 ssl required |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
864 [1] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
865 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
866 Reset server to remove REQUEST_METHOD hack to test hg client |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
867 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
868 $ killdaemons.py |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
869 $ hg serve -p $HGPORT -d --pid-file hg.pid |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
870 $ cat hg.pid > $DAEMON_PIDS |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
871 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
872 $ hg --cwd ../test2 push -B bm http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
873 pushing to http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
874 searching for changes |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
875 no changes found |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
876 abort: HTTP Error 403: ssl required |
45839
ebee234d952a
errors: set detailed exit code to 100 for some remote errors
Martin von Zweigbergk <martinvonz@google.com>
parents:
39430
diff
changeset
|
877 [100] |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
878 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
879 $ hg --cwd ../test2 push http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
880 pushing to http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
881 searching for changes |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
882 abort: HTTP Error 403: ssl required |
45839
ebee234d952a
errors: set detailed exit code to 100 for some remote errors
Martin von Zweigbergk <martinvonz@google.com>
parents:
39430
diff
changeset
|
883 [100] |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
884 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
885 $ killdaemons.py |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
886 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
887 web.deny_push=* denies pushing to unauthenticated users |
36751
2c647da851ed
tests: extract HTTP permissions tests to own test file
Gregory Szorc <gregory.szorc@gmail.com>
parents:
diff
changeset
|
888 |
2c647da851ed
tests: extract HTTP permissions tests to own test file
Gregory Szorc <gregory.szorc@gmail.com>
parents:
diff
changeset
|
889 $ cat > .hg/hgrc <<EOF |
2c647da851ed
tests: extract HTTP permissions tests to own test file
Gregory Szorc <gregory.szorc@gmail.com>
parents:
diff
changeset
|
890 > [web] |
2c647da851ed
tests: extract HTTP permissions tests to own test file
Gregory Szorc <gregory.szorc@gmail.com>
parents:
diff
changeset
|
891 > push_ssl = false |
2c647da851ed
tests: extract HTTP permissions tests to own test file
Gregory Szorc <gregory.szorc@gmail.com>
parents:
diff
changeset
|
892 > deny_push = * |
2c647da851ed
tests: extract HTTP permissions tests to own test file
Gregory Szorc <gregory.szorc@gmail.com>
parents:
diff
changeset
|
893 > EOF |
2c647da851ed
tests: extract HTTP permissions tests to own test file
Gregory Szorc <gregory.szorc@gmail.com>
parents:
diff
changeset
|
894 |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
895 $ REQUEST_METHOD=POST hg serve -p $HGPORT -d --pid-file hg.pid |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
896 $ cat hg.pid > $DAEMON_PIDS |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
897 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
898 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=pushkey' --requestheader 'x-hgarg-1=namespace=bookmarks&key=bm&old=&new=cb9a9f314b8b07ba71012fcdbc544b5a4d82ff5b' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
899 401 push not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
900 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
901 0 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
902 push not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
903 [1] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
904 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
905 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=batch' --requestheader 'x-hgarg-1=cmds=pushkey+namespace%3Dbookmarks%2Ckey%3Dbm%2Cold%3D%2Cnew%3Dcb9a9f314b8b07ba71012fcdbc544b5a4d82ff5b' |
36755
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
906 401 push not authorized |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
907 |
36755
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
908 0 |
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
909 push not authorized |
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
910 [1] |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
911 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
912 $ hg bookmarks |
36755
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
913 no bookmarks set |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
914 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
915 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritenoperm' |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
916 401 push not authorized |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
917 |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
918 0 |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
919 push not authorized |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
920 [1] |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
921 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
922 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritewithperm' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
923 401 push not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
924 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
925 0 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
926 push not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
927 [1] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
928 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
929 Reset server to remove REQUEST_METHOD hack to test hg client |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
930 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
931 $ killdaemons.py |
36751
2c647da851ed
tests: extract HTTP permissions tests to own test file
Gregory Szorc <gregory.szorc@gmail.com>
parents:
diff
changeset
|
932 $ hg serve -p $HGPORT -d --pid-file hg.pid |
2c647da851ed
tests: extract HTTP permissions tests to own test file
Gregory Szorc <gregory.szorc@gmail.com>
parents:
diff
changeset
|
933 $ cat hg.pid > $DAEMON_PIDS |
2c647da851ed
tests: extract HTTP permissions tests to own test file
Gregory Szorc <gregory.szorc@gmail.com>
parents:
diff
changeset
|
934 |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
935 $ hg --cwd ../test2 push -B bm http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
936 pushing to http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
937 searching for changes |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
938 no changes found |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
939 abort: authorization failed |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
940 [255] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
941 |
36751
2c647da851ed
tests: extract HTTP permissions tests to own test file
Gregory Szorc <gregory.szorc@gmail.com>
parents:
diff
changeset
|
942 $ hg --cwd ../test2 push http://localhost:$HGPORT/ |
2c647da851ed
tests: extract HTTP permissions tests to own test file
Gregory Szorc <gregory.szorc@gmail.com>
parents:
diff
changeset
|
943 pushing to http://localhost:$HGPORT/ |
2c647da851ed
tests: extract HTTP permissions tests to own test file
Gregory Szorc <gregory.szorc@gmail.com>
parents:
diff
changeset
|
944 searching for changes |
2c647da851ed
tests: extract HTTP permissions tests to own test file
Gregory Szorc <gregory.szorc@gmail.com>
parents:
diff
changeset
|
945 abort: authorization failed |
2c647da851ed
tests: extract HTTP permissions tests to own test file
Gregory Szorc <gregory.szorc@gmail.com>
parents:
diff
changeset
|
946 [255] |
2c647da851ed
tests: extract HTTP permissions tests to own test file
Gregory Szorc <gregory.szorc@gmail.com>
parents:
diff
changeset
|
947 |
2c647da851ed
tests: extract HTTP permissions tests to own test file
Gregory Szorc <gregory.szorc@gmail.com>
parents:
diff
changeset
|
948 $ killdaemons.py |
2c647da851ed
tests: extract HTTP permissions tests to own test file
Gregory Szorc <gregory.szorc@gmail.com>
parents:
diff
changeset
|
949 |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
950 web.deny_push=* denies pushing to authenticated users |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
951 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
952 $ REMOTE_USER=someuser REQUEST_METHOD=POST hg serve -p $HGPORT -d --pid-file hg.pid |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
953 $ cat hg.pid > $DAEMON_PIDS |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
954 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
955 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=pushkey' --requestheader 'x-hgarg-1=namespace=bookmarks&key=bm&old=&new=cb9a9f314b8b07ba71012fcdbc544b5a4d82ff5b' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
956 401 push not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
957 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
958 0 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
959 push not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
960 [1] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
961 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
962 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=batch' --requestheader 'x-hgarg-1=cmds=pushkey+namespace%3Dbookmarks%2Ckey%3Dbm%2Cold%3D%2Cnew%3Dcb9a9f314b8b07ba71012fcdbc544b5a4d82ff5b' |
36755
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
963 401 push not authorized |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
964 |
36755
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
965 0 |
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
966 push not authorized |
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
967 [1] |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
968 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
969 $ hg bookmarks |
36755
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
970 no bookmarks set |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
971 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
972 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritenoperm' |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
973 401 push not authorized |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
974 |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
975 0 |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
976 push not authorized |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
977 [1] |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
978 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
979 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritewithperm' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
980 401 push not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
981 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
982 0 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
983 push not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
984 [1] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
985 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
986 Reset server to remove REQUEST_METHOD hack to test hg client |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
987 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
988 $ killdaemons.py |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
989 $ REMOTE_USER=someuser hg serve -p $HGPORT -d --pid-file hg.pid |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
990 $ cat hg.pid > $DAEMON_PIDS |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
991 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
992 $ hg --cwd ../test2 push -B bm http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
993 pushing to http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
994 searching for changes |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
995 no changes found |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
996 abort: authorization failed |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
997 [255] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
998 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
999 $ hg --cwd ../test2 push http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1000 pushing to http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1001 searching for changes |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1002 abort: authorization failed |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1003 [255] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1004 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1005 $ killdaemons.py |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1006 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1007 web.deny_push=<user> denies pushing to user in list |
36751
2c647da851ed
tests: extract HTTP permissions tests to own test file
Gregory Szorc <gregory.szorc@gmail.com>
parents:
diff
changeset
|
1008 |
2c647da851ed
tests: extract HTTP permissions tests to own test file
Gregory Szorc <gregory.szorc@gmail.com>
parents:
diff
changeset
|
1009 $ cat > .hg/hgrc <<EOF |
2c647da851ed
tests: extract HTTP permissions tests to own test file
Gregory Szorc <gregory.szorc@gmail.com>
parents:
diff
changeset
|
1010 > [web] |
2c647da851ed
tests: extract HTTP permissions tests to own test file
Gregory Szorc <gregory.szorc@gmail.com>
parents:
diff
changeset
|
1011 > push_ssl = false |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1012 > deny_push = baduser |
36751
2c647da851ed
tests: extract HTTP permissions tests to own test file
Gregory Szorc <gregory.szorc@gmail.com>
parents:
diff
changeset
|
1013 > EOF |
2c647da851ed
tests: extract HTTP permissions tests to own test file
Gregory Szorc <gregory.szorc@gmail.com>
parents:
diff
changeset
|
1014 |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1015 $ REMOTE_USER=baduser REQUEST_METHOD=POST hg serve -p $HGPORT -d --pid-file hg.pid |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1016 $ cat hg.pid > $DAEMON_PIDS |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1017 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1018 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=pushkey' --requestheader 'x-hgarg-1=namespace=bookmarks&key=bm&old=&new=cb9a9f314b8b07ba71012fcdbc544b5a4d82ff5b' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1019 401 push not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1020 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1021 0 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1022 push not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1023 [1] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1024 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1025 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=batch' --requestheader 'x-hgarg-1=cmds=pushkey+namespace%3Dbookmarks%2Ckey%3Dbm%2Cold%3D%2Cnew%3Dcb9a9f314b8b07ba71012fcdbc544b5a4d82ff5b' |
36755
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
1026 401 push not authorized |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1027 |
36755
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
1028 0 |
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
1029 push not authorized |
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
1030 [1] |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1031 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1032 $ hg bookmarks |
36755
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
1033 no bookmarks set |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1034 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1035 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritenoperm' |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
1036 401 push not authorized |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1037 |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
1038 0 |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
1039 push not authorized |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
1040 [1] |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1041 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1042 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritewithperm' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1043 401 push not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1044 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1045 0 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1046 push not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1047 [1] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1048 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1049 Reset server to remove REQUEST_METHOD hack to test hg client |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1050 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1051 $ killdaemons.py |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1052 $ REMOTE_USER=baduser hg serve -p $HGPORT -d --pid-file hg.pid |
36751
2c647da851ed
tests: extract HTTP permissions tests to own test file
Gregory Szorc <gregory.szorc@gmail.com>
parents:
diff
changeset
|
1053 $ cat hg.pid > $DAEMON_PIDS |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1054 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1055 $ hg --cwd ../test2 push -B bm http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1056 pushing to http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1057 searching for changes |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1058 no changes found |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1059 abort: authorization failed |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1060 [255] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1061 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1062 $ hg --cwd ../test2 push http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1063 pushing to http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1064 searching for changes |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1065 abort: authorization failed |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1066 [255] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1067 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1068 $ killdaemons.py |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1069 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1070 web.deny_push=<user> denies pushing to user not in list because allow-push isn't set |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1071 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1072 $ REMOTE_USER=gooduser REQUEST_METHOD=POST hg serve -p $HGPORT -d --pid-file hg.pid |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1073 $ cat hg.pid > $DAEMON_PIDS |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1074 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1075 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=pushkey' --requestheader 'x-hgarg-1=namespace=bookmarks&key=bm&old=&new=cb9a9f314b8b07ba71012fcdbc544b5a4d82ff5b' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1076 401 push not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1077 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1078 0 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1079 push not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1080 [1] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1081 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1082 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=batch' --requestheader 'x-hgarg-1=cmds=pushkey+namespace%3Dbookmarks%2Ckey%3Dbm%2Cold%3D%2Cnew%3Dcb9a9f314b8b07ba71012fcdbc544b5a4d82ff5b' |
36755
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
1083 401 push not authorized |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1084 |
36755
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
1085 0 |
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
1086 push not authorized |
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
1087 [1] |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1088 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1089 $ hg bookmarks |
36755
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
1090 no bookmarks set |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1091 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1092 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritenoperm' |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
1093 401 push not authorized |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1094 |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
1095 0 |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
1096 push not authorized |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
1097 [1] |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1098 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1099 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritewithperm' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1100 401 push not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1101 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1102 0 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1103 push not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1104 [1] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1105 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1106 Reset server to remove REQUEST_METHOD hack to test hg client |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1107 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1108 $ killdaemons.py |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1109 $ REMOTE_USER=gooduser hg serve -p $HGPORT -d --pid-file hg.pid |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1110 $ cat hg.pid > $DAEMON_PIDS |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1111 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1112 $ hg --cwd ../test2 push -B bm http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1113 pushing to http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1114 searching for changes |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1115 no changes found |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1116 abort: authorization failed |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1117 [255] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1118 |
36751
2c647da851ed
tests: extract HTTP permissions tests to own test file
Gregory Szorc <gregory.szorc@gmail.com>
parents:
diff
changeset
|
1119 $ hg --cwd ../test2 push http://localhost:$HGPORT/ |
2c647da851ed
tests: extract HTTP permissions tests to own test file
Gregory Szorc <gregory.szorc@gmail.com>
parents:
diff
changeset
|
1120 pushing to http://localhost:$HGPORT/ |
2c647da851ed
tests: extract HTTP permissions tests to own test file
Gregory Szorc <gregory.szorc@gmail.com>
parents:
diff
changeset
|
1121 searching for changes |
2c647da851ed
tests: extract HTTP permissions tests to own test file
Gregory Szorc <gregory.szorc@gmail.com>
parents:
diff
changeset
|
1122 abort: authorization failed |
2c647da851ed
tests: extract HTTP permissions tests to own test file
Gregory Szorc <gregory.szorc@gmail.com>
parents:
diff
changeset
|
1123 [255] |
2c647da851ed
tests: extract HTTP permissions tests to own test file
Gregory Szorc <gregory.szorc@gmail.com>
parents:
diff
changeset
|
1124 |
2c647da851ed
tests: extract HTTP permissions tests to own test file
Gregory Szorc <gregory.szorc@gmail.com>
parents:
diff
changeset
|
1125 $ killdaemons.py |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1126 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1127 web.allow-push=* allows pushes from unauthenticated users |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1128 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1129 $ cat > .hg/hgrc <<EOF |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1130 > [web] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1131 > push_ssl = false |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1132 > allow-push = * |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1133 > EOF |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1134 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1135 $ REQUEST_METHOD=POST hg serve -p $HGPORT -d --pid-file hg.pid |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1136 $ cat hg.pid > $DAEMON_PIDS |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1137 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1138 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=pushkey' --requestheader 'x-hgarg-1=namespace=bookmarks&key=bm&old=&new=cb9a9f314b8b07ba71012fcdbc544b5a4d82ff5b' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1139 200 Script output follows |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1140 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1141 1 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1142 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1143 $ hg bookmarks |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1144 bm 0:cb9a9f314b8b |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1145 $ hg book -d bm |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1146 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1147 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritenoperm' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1148 200 Script output follows |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1149 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1150 write command no defined permissions |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1151 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1152 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritewithperm' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1153 200 Script output follows |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1154 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1155 write command w/ defined permissions |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1156 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1157 Reset server to remove REQUEST_METHOD hack to test hg client |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1158 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1159 $ killdaemons.py |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1160 $ hg serve -p $HGPORT -d --pid-file hg.pid |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1161 $ cat hg.pid > $DAEMON_PIDS |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1162 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1163 $ hg --cwd ../test2 push -B bm http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1164 pushing to http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1165 searching for changes |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1166 no changes found |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1167 exporting bookmark bm |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1168 [1] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1169 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1170 $ hg book -d bm |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1171 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1172 $ hg --cwd ../test2 push http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1173 pushing to http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1174 searching for changes |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1175 remote: adding changesets |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1176 remote: adding manifests |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1177 remote: adding file changes |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1178 remote: added 1 changesets with 1 changes to 1 files |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1179 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1180 $ hg strip -r 1: |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1181 saved backup bundle to $TESTTMP/test/.hg/strip-backup/ba677d0156c1-eea704d7-backup.hg |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1182 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1183 $ killdaemons.py |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1184 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1185 web.allow-push=* allows pushes from authenticated users |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1186 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1187 $ REMOTE_USER=someuser REQUEST_METHOD=POST hg serve -p $HGPORT -d --pid-file hg.pid |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1188 $ cat hg.pid > $DAEMON_PIDS |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1189 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1190 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=pushkey' --requestheader 'x-hgarg-1=namespace=bookmarks&key=bm&old=&new=cb9a9f314b8b07ba71012fcdbc544b5a4d82ff5b' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1191 200 Script output follows |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1192 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1193 1 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1194 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1195 $ hg bookmarks |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1196 bm 0:cb9a9f314b8b |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1197 $ hg book -d bm |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1198 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1199 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritenoperm' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1200 200 Script output follows |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1201 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1202 write command no defined permissions |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1203 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1204 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritewithperm' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1205 200 Script output follows |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1206 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1207 write command w/ defined permissions |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1208 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1209 Reset server to remove REQUEST_METHOD hack to test hg client |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1210 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1211 $ killdaemons.py |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1212 $ REMOTE_USER=someuser hg serve -p $HGPORT -d --pid-file hg.pid |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1213 $ cat hg.pid > $DAEMON_PIDS |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1214 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1215 $ hg --cwd ../test2 push -B bm http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1216 pushing to http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1217 searching for changes |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1218 no changes found |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1219 exporting bookmark bm |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1220 [1] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1221 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1222 $ hg book -d bm |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1223 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1224 $ hg --cwd ../test2 push http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1225 pushing to http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1226 searching for changes |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1227 remote: adding changesets |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1228 remote: adding manifests |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1229 remote: adding file changes |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1230 remote: added 1 changesets with 1 changes to 1 files |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1231 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1232 $ hg strip -r 1: |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1233 saved backup bundle to $TESTTMP/test/.hg/strip-backup/ba677d0156c1-eea704d7-backup.hg |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1234 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1235 $ killdaemons.py |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1236 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1237 web.allow-push=<user> denies push to user not in list |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1238 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1239 $ cat > .hg/hgrc <<EOF |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1240 > [web] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1241 > push_ssl = false |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1242 > allow-push = gooduser |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1243 > EOF |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1244 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1245 $ REMOTE_USER=baduser REQUEST_METHOD=POST hg serve -p $HGPORT -d --pid-file hg.pid |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1246 $ cat hg.pid > $DAEMON_PIDS |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1247 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1248 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=pushkey' --requestheader 'x-hgarg-1=namespace=bookmarks&key=bm&old=&new=cb9a9f314b8b07ba71012fcdbc544b5a4d82ff5b' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1249 401 push not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1250 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1251 0 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1252 push not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1253 [1] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1254 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1255 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=batch' --requestheader 'x-hgarg-1=cmds=pushkey+namespace%3Dbookmarks%2Ckey%3Dbm%2Cold%3D%2Cnew%3Dcb9a9f314b8b07ba71012fcdbc544b5a4d82ff5b' |
36755
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
1256 401 push not authorized |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1257 |
36755
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
1258 0 |
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
1259 push not authorized |
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
1260 [1] |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1261 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1262 $ hg bookmarks |
36755
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
1263 no bookmarks set |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1264 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1265 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritenoperm' |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
1266 401 push not authorized |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1267 |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
1268 0 |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
1269 push not authorized |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
1270 [1] |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1271 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1272 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritewithperm' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1273 401 push not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1274 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1275 0 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1276 push not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1277 [1] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1278 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1279 Reset server to remove REQUEST_METHOD hack to test hg client |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1280 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1281 $ killdaemons.py |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1282 $ REMOTE_USER=baduser hg serve -p $HGPORT -d --pid-file hg.pid |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1283 $ cat hg.pid > $DAEMON_PIDS |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1284 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1285 $ hg --cwd ../test2 push -B bm http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1286 pushing to http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1287 searching for changes |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1288 no changes found |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1289 abort: authorization failed |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1290 [255] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1291 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1292 $ hg --cwd ../test2 push http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1293 pushing to http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1294 searching for changes |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1295 abort: authorization failed |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1296 [255] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1297 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1298 $ killdaemons.py |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1299 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1300 web.allow-push=<user> allows push from user in list |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1301 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1302 $ REMOTE_USER=gooduser REQUEST_METHOD=POST hg serve -p $HGPORT -d --pid-file hg.pid |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1303 $ cat hg.pid > $DAEMON_PIDS |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1304 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1305 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=pushkey' --requestheader 'x-hgarg-1=namespace=bookmarks&key=bm&old=&new=cb9a9f314b8b07ba71012fcdbc544b5a4d82ff5b' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1306 200 Script output follows |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1307 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1308 1 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1309 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1310 $ hg bookmarks |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1311 bm 0:cb9a9f314b8b |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1312 $ hg book -d bm |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1313 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1314 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=batch' --requestheader 'x-hgarg-1=cmds=pushkey+namespace%3Dbookmarks%2Ckey%3Dbm%2Cold%3D%2Cnew%3Dcb9a9f314b8b07ba71012fcdbc544b5a4d82ff5b' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1315 200 Script output follows |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1316 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1317 1 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1318 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1319 $ hg bookmarks |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1320 bm 0:cb9a9f314b8b |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1321 $ hg book -d bm |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1322 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1323 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritenoperm' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1324 200 Script output follows |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1325 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1326 write command no defined permissions |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1327 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1328 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritewithperm' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1329 200 Script output follows |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1330 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1331 write command w/ defined permissions |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1332 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1333 Reset server to remove REQUEST_METHOD hack to test hg client |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1334 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1335 $ killdaemons.py |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1336 $ REMOTE_USER=gooduser hg serve -p $HGPORT -d --pid-file hg.pid |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1337 $ cat hg.pid > $DAEMON_PIDS |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1338 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1339 $ hg --cwd ../test2 push -B bm http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1340 pushing to http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1341 searching for changes |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1342 no changes found |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1343 exporting bookmark bm |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1344 [1] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1345 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1346 $ hg book -d bm |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1347 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1348 $ hg --cwd ../test2 push http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1349 pushing to http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1350 searching for changes |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1351 remote: adding changesets |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1352 remote: adding manifests |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1353 remote: adding file changes |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1354 remote: added 1 changesets with 1 changes to 1 files |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1355 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1356 $ hg strip -r 1: |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1357 saved backup bundle to $TESTTMP/test/.hg/strip-backup/ba677d0156c1-eea704d7-backup.hg |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1358 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1359 $ killdaemons.py |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1360 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1361 web.deny_push takes precedence over web.allow_push |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1362 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1363 $ cat > .hg/hgrc <<EOF |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1364 > [web] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1365 > push_ssl = false |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1366 > allow-push = someuser |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1367 > deny_push = someuser |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1368 > EOF |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1369 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1370 $ REMOTE_USER=someuser REQUEST_METHOD=POST hg serve -p $HGPORT -d --pid-file hg.pid |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1371 $ cat hg.pid > $DAEMON_PIDS |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1372 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1373 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=pushkey' --requestheader 'x-hgarg-1=namespace=bookmarks&key=bm&old=&new=cb9a9f314b8b07ba71012fcdbc544b5a4d82ff5b' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1374 401 push not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1375 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1376 0 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1377 push not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1378 [1] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1379 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1380 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=batch' --requestheader 'x-hgarg-1=cmds=pushkey+namespace%3Dbookmarks%2Ckey%3Dbm%2Cold%3D%2Cnew%3Dcb9a9f314b8b07ba71012fcdbc544b5a4d82ff5b' |
36755
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
1381 401 push not authorized |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1382 |
36755
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
1383 0 |
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
1384 push not authorized |
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
1385 [1] |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1386 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1387 $ hg bookmarks |
36755
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
1388 no bookmarks set |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1389 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1390 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritenoperm' |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
1391 401 push not authorized |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1392 |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
1393 0 |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
1394 push not authorized |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
1395 [1] |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1396 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1397 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritewithperm' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1398 401 push not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1399 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1400 0 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1401 push not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1402 [1] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1403 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1404 Reset server to remove REQUEST_METHOD hack to test hg client |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1405 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1406 $ killdaemons.py |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1407 $ REMOTE_USER=someuser hg serve -p $HGPORT -d --pid-file hg.pid |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1408 $ cat hg.pid > $DAEMON_PIDS |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1409 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1410 $ hg --cwd ../test2 push -B bm http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1411 pushing to http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1412 searching for changes |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1413 no changes found |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1414 abort: authorization failed |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1415 [255] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1416 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1417 $ hg --cwd ../test2 push http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1418 pushing to http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1419 searching for changes |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1420 abort: authorization failed |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1421 [255] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1422 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1423 $ killdaemons.py |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1424 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1425 web.allow-push has no effect if web.deny_read is set |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1426 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1427 $ cat > .hg/hgrc <<EOF |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1428 > [web] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1429 > push_ssl = false |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1430 > allow-push = * |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1431 > deny_read = * |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1432 > EOF |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1433 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1434 $ REQUEST_METHOD=POST REMOTE_USER=someuser hg serve -p $HGPORT -d --pid-file hg.pid |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1435 $ cat hg.pid > $DAEMON_PIDS |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1436 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1437 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=pushkey' --requestheader 'x-hgarg-1=namespace=bookmarks&key=bm&old=&new=cb9a9f314b8b07ba71012fcdbc544b5a4d82ff5b' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1438 401 read not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1439 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1440 0 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1441 read not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1442 [1] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1443 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1444 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=batch' --requestheader 'x-hgarg-1=cmds=pushkey+namespace%3Dbookmarks%2Ckey%3Dbm%2Cold%3D%2Cnew%3Dcb9a9f314b8b07ba71012fcdbc544b5a4d82ff5b' |
36755
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
1445 401 read not authorized |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1446 |
36755
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
1447 0 |
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
1448 read not authorized |
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
1449 [1] |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1450 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1451 $ hg bookmarks |
36755
ff4bc0ab6740
wireproto: check permissions when executing "batch" command (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36754
diff
changeset
|
1452 no bookmarks set |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1453 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1454 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customreadnoperm' |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
1455 401 read not authorized |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1456 |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
1457 0 |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
1458 read not authorized |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
1459 [1] |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1460 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1461 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customreadwithperm' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1462 401 read not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1463 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1464 0 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1465 read not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1466 [1] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1467 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1468 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritenoperm' |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
1469 401 read not authorized |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1470 |
36756
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
1471 0 |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
1472 read not authorized |
2ecb0fc535b1
hgweb: always perform permissions checks on protocol commands (BC) (SEC)
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36755
diff
changeset
|
1473 [1] |
36752
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1474 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1475 $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritewithperm' |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1476 401 read not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1477 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1478 0 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1479 read not authorized |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1480 [1] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1481 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1482 Reset server to remove REQUEST_METHOD hack to test hg client |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1483 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1484 $ killdaemons.py |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1485 $ REMOTE_USER=someuser hg serve -p $HGPORT -d --pid-file hg.pid |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1486 $ cat hg.pid > $DAEMON_PIDS |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1487 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1488 $ hg --cwd ../test2 push -B bm http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1489 pushing to http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1490 abort: authorization failed |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1491 [255] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1492 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1493 $ hg --cwd ../test2 push http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1494 pushing to http://localhost:$HGPORT/ |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1495 abort: authorization failed |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1496 [255] |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1497 |
bbd4027b019b
tests: comprehensively test HTTP server permissions checking
Gregory Szorc <gregory.szorc@gmail.com>
parents:
36751
diff
changeset
|
1498 $ killdaemons.py |