#require killdaemons

  $ cat > fakeremoteuser.py << EOF

  > import os

  > from mercurial.hgweb import hgweb_mod

  > from mercurial import wireproto

  > class testenvhgweb(hgweb_mod.hgweb):

  >     def __call__(self, env, respond):

  >         # Allow REMOTE_USER to define authenticated user.

  >         if r'REMOTE_USER' in os.environ:

  >             env[r'REMOTE_USER'] = os.environ[r'REMOTE_USER']

  >         # Allow REQUEST_METHOD to override HTTP method

  >         if r'REQUEST_METHOD' in os.environ:

  >             env[r'REQUEST_METHOD'] = os.environ[r'REQUEST_METHOD']

  >         return super(testenvhgweb, self).__call__(env, respond)

  > hgweb_mod.hgweb = testenvhgweb

  > 

  > @wireproto.wireprotocommand('customreadnoperm')

  > def customread(repo, proto):

  >     return b'read-only command no defined permissions\n'

  > @wireproto.wireprotocommand('customwritenoperm')

  > def customwritenoperm(repo, proto):

  >     return b'write command no defined permissions\n'

  > @wireproto.wireprotocommand('customreadwithperm')

  > def customreadwithperm(repo, proto):

  >     return b'read-only command w/ defined permissions\n'

  > @wireproto.wireprotocommand('customwritewithperm')

  > def customwritewithperm(repo, proto):

  >     return b'write command w/ defined permissions\n'

  > EOF

  $ cat >> $HGRCPATH << EOF

  > [extensions]

  > fakeremoteuser = $TESTTMP/fakeremoteuser.py

  > strip =

  > EOF

  $ hg init test

  $ cd test

  $ echo a > a

  $ hg ci -Ama

  adding a

  $ cd ..

  $ hg clone test test2

  updating to branch default

  1 files updated, 0 files merged, 0 files removed, 0 files unresolved

  $ cd test2

  $ echo a >> a

  $ hg ci -mb

  $ hg book bm -r 0

  $ cd ../test

web.deny_read=* prevents access to wire protocol for all users

  $ cat > .hg/hgrc <<EOF

  > [web]

  > deny_read = *

  > EOF

  $ hg serve -p $HGPORT -d --pid-file hg.pid

  $ cat hg.pid > $DAEMON_PIDS

  $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=capabilities'

  200 Script output follows

  lookup changegroupsubset branchmap pushkey known getbundle unbundlehash batch streamreqs=generaldelta,revlogv1 $USUAL_BUNDLE2_CAPS_SERVER$ unbundle=HG10GZ,HG10BZ,HG10UN httpheader=1024 httpmediatype=0.1rx,0.1tx,0.2tx compression=$BUNDLE2_COMPRESSIONS$ (no-eol)

  $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=stream_out'

  401 read not authorized

  0

  read not authorized

  [1]

  $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=listkeys' --requestheader 'x-hgarg-1=namespace=phases'

  401 read not authorized

  0

  read not authorized

  [1]

TODO batch command doesn't check permissions

  $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=batch' --requestheader 'x-hgarg-1=cmds=listkeys+namespace%3Dphases'

  200 Script output follows

  cb9a9f314b8b07ba71012fcdbc544b5a4d82ff5b	1

  publishing	True (no-eol)

TODO custom commands don't check permissions

  $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customreadnoperm'

  200 Script output follows

  read-only command no defined permissions

  $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customreadwithperm'

  401 read not authorized

  0

  read not authorized

  [1]

  $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritenoperm'

  200 Script output follows

  write command no defined permissions

  $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritewithperm'

  401 read not authorized

  0

  read not authorized

  [1]

  $ hg --cwd ../test2 pull http://localhost:$HGPORT/

  pulling from http://localhost:$HGPORT/

  searching for changes

  no changes found

  abort: authorization failed

  [255]

  $ killdaemons.py

web.deny_read=* with REMOTE_USER set still locks out clients

  $ REMOTE_USER=authed_user hg serve -p $HGPORT -d --pid-file hg.pid

  $ cat hg.pid > $DAEMON_PIDS

  $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=capabilities'

  200 Script output follows

  lookup changegroupsubset branchmap pushkey known getbundle unbundlehash batch streamreqs=generaldelta,revlogv1 $USUAL_BUNDLE2_CAPS_SERVER$ unbundle=HG10GZ,HG10BZ,HG10UN httpheader=1024 httpmediatype=0.1rx,0.1tx,0.2tx compression=$BUNDLE2_COMPRESSIONS$ (no-eol)

  $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=stream_out'

  401 read not authorized

  0

  read not authorized

  [1]

TODO batch command doesn't check permissions

  $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=batch' --requestheader 'x-hgarg-1=cmds=listkeys+namespace%3Dphases'

  200 Script output follows

  cb9a9f314b8b07ba71012fcdbc544b5a4d82ff5b	1

  publishing	True (no-eol)

TODO custom commands don't check permissions

  $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customreadnoperm'

  200 Script output follows

  read-only command no defined permissions

  $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customreadwithperm'

  401 read not authorized

  0

  read not authorized

  [1]

  $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritenoperm'

  200 Script output follows

  write command no defined permissions

  $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritewithperm'

  401 read not authorized

  0

  read not authorized

  [1]

  $ hg --cwd ../test2 pull http://localhost:$HGPORT/

  pulling from http://localhost:$HGPORT/

  searching for changes

  no changes found

  abort: authorization failed

  [255]

  $ killdaemons.py

web.deny_read=<user> denies access to unauthenticated user

  $ cat > .hg/hgrc <<EOF

  > [web]

  > deny_read = baduser1,baduser2

  > EOF

  $ hg serve -p $HGPORT -d --pid-file hg.pid

  $ cat hg.pid > $DAEMON_PIDS

  $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=listkeys' --requestheader 'x-hgarg-1=namespace=phases'

  401 read not authorized

  0

  read not authorized

  [1]

TODO batch command doesn't check permissions

  $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=batch' --requestheader 'x-hgarg-1=cmds=listkeys+namespace%3Dphases'

  200 Script output follows

  cb9a9f314b8b07ba71012fcdbc544b5a4d82ff5b	1

  publishing	True (no-eol)

TODO custom commands don't check permissions

  $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customreadnoperm'

  200 Script output follows

  read-only command no defined permissions

  $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customreadwithperm'

  401 read not authorized

  0

  read not authorized

  [1]

  $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritenoperm'

  200 Script output follows

  write command no defined permissions

  $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritewithperm'

  401 read not authorized

  0

  read not authorized

  [1]

  $ hg --cwd ../test2 pull http://localhost:$HGPORT/

  pulling from http://localhost:$HGPORT/

  searching for changes

  no changes found

  abort: authorization failed

  [255]

  $ killdaemons.py

web.deny_read=<user> denies access to users in deny list

  $ REMOTE_USER=baduser2 hg serve -p $HGPORT -d --pid-file hg.pid

  $ cat hg.pid > $DAEMON_PIDS

  $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=listkeys' --requestheader 'x-hgarg-1=namespace=phases'

  401 read not authorized

  0

  read not authorized

  [1]

TODO batch command doesn't check permissions

  $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=batch' --requestheader 'x-hgarg-1=cmds=listkeys+namespace%3Dphases'

  200 Script output follows

  cb9a9f314b8b07ba71012fcdbc544b5a4d82ff5b	1

  publishing	True (no-eol)

TODO custom commands don't check permissions

  $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customreadnoperm'

  200 Script output follows

  read-only command no defined permissions

  $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customreadwithperm'

  401 read not authorized

  0

  read not authorized

  [1]

  $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritenoperm'

  200 Script output follows

  write command no defined permissions

  $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritewithperm'

  401 read not authorized

  0

  read not authorized

  [1]

  $ hg --cwd ../test2 pull http://localhost:$HGPORT/

  pulling from http://localhost:$HGPORT/

  searching for changes

  no changes found

  abort: authorization failed

  [255]

  $ killdaemons.py

web.deny_read=<user> allows access to authenticated users not in list

  $ REMOTE_USER=gooduser hg serve -p $HGPORT -d --pid-file hg.pid

  $ cat hg.pid > $DAEMON_PIDS

  $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=listkeys' --requestheader 'x-hgarg-1=namespace=phases'

  200 Script output follows

  cb9a9f314b8b07ba71012fcdbc544b5a4d82ff5b	1

  publishing	True (no-eol)

  $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=batch' --requestheader 'x-hgarg-1=cmds=listkeys+namespace%3Dphases'

  200 Script output follows

  cb9a9f314b8b07ba71012fcdbc544b5a4d82ff5b	1

  publishing	True (no-eol)

  $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customreadnoperm'

  200 Script output follows

  read-only command no defined permissions

  $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customreadwithperm'

  200 Script output follows

  read-only command w/ defined permissions

TODO custom commands don't check permissions

  $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritenoperm'

  200 Script output follows

  write command no defined permissions

  $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritewithperm'

  405 push requires POST request

  0

  push requires POST request

  [1]

  $ hg --cwd ../test2 pull http://localhost:$HGPORT/

  pulling from http://localhost:$HGPORT/

  searching for changes

  no changes found

  $ killdaemons.py

web.allow_read=* allows reads for unauthenticated users

  $ cat > .hg/hgrc <<EOF

  > [web]

  > allow_read = *

  > EOF

  $ hg serve -p $HGPORT -d --pid-file hg.pid

  $ cat hg.pid > $DAEMON_PIDS

  $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=listkeys' --requestheader 'x-hgarg-1=namespace=phases'

  200 Script output follows

  cb9a9f314b8b07ba71012fcdbc544b5a4d82ff5b	1

  publishing	True (no-eol)

  $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=batch' --requestheader 'x-hgarg-1=cmds=listkeys+namespace%3Dphases'

  200 Script output follows

  cb9a9f314b8b07ba71012fcdbc544b5a4d82ff5b	1

  publishing	True (no-eol)

  $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customreadnoperm'

  200 Script output follows

  read-only command no defined permissions

  $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customreadwithperm'

  200 Script output follows

  read-only command w/ defined permissions

TODO custom commands don't check permissions

  $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=customwritenoperm'