diff -r e3c228b4510d -r ff4bc0ab6740 tests/test-http-permissions.t
--- a/tests/test-http-permissions.t	Tue Feb 20 18:54:27 2018 -0800
+++ b/tests/test-http-permissions.t	Tue Feb 20 18:55:58 2018 -0800
@@ -83,13 +83,12 @@
   read not authorized
   [1]
 
-TODO batch command doesn't check permissions
-
   $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=batch' --requestheader 'x-hgarg-1=cmds=listkeys+namespace%3Dphases'
-  200 Script output follows
+  401 read not authorized
   
-  cb9a9f314b8b07ba71012fcdbc544b5a4d82ff5b	1
-  publishing	True (no-eol)
+  0
+  read not authorized
+  [1]
 
 TODO custom commands don't check permissions
 
@@ -143,13 +142,12 @@
   read not authorized
   [1]
 
-TODO batch command doesn't check permissions
-
   $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=batch' --requestheader 'x-hgarg-1=cmds=listkeys+namespace%3Dphases'
-  200 Script output follows
+  401 read not authorized
   
-  cb9a9f314b8b07ba71012fcdbc544b5a4d82ff5b	1
-  publishing	True (no-eol)
+  0
+  read not authorized
+  [1]
 
 TODO custom commands don't check permissions
 
@@ -201,13 +199,12 @@
   read not authorized
   [1]
 
-TODO batch command doesn't check permissions
-
   $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=batch' --requestheader 'x-hgarg-1=cmds=listkeys+namespace%3Dphases'
-  200 Script output follows
+  401 read not authorized
   
-  cb9a9f314b8b07ba71012fcdbc544b5a4d82ff5b	1
-  publishing	True (no-eol)
+  0
+  read not authorized
+  [1]
 
 TODO custom commands don't check permissions
 
@@ -254,13 +251,12 @@
   read not authorized
   [1]
 
-TODO batch command doesn't check permissions
-
   $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=batch' --requestheader 'x-hgarg-1=cmds=listkeys+namespace%3Dphases'
-  200 Script output follows
+  401 read not authorized
   
-  cb9a9f314b8b07ba71012fcdbc544b5a4d82ff5b	1
-  publishing	True (no-eol)
+  0
+  read not authorized
+  [1]
 
 TODO custom commands don't check permissions
 
@@ -461,13 +457,12 @@
   read not authorized
   [1]
 
-TODO batch command doesn't check permissions
-
   $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=batch' --requestheader 'x-hgarg-1=cmds=listkeys+namespace%3Dphases'
-  200 Script output follows
+  401 read not authorized
   
-  cb9a9f314b8b07ba71012fcdbc544b5a4d82ff5b	1
-  publishing	True (no-eol)
+  0
+  read not authorized
+  [1]
 
 TODO custom commands don't check permissions
 
@@ -514,13 +509,12 @@
   read not authorized
   [1]
 
-TODO batch command doesn't check permissions
-
   $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=batch' --requestheader 'x-hgarg-1=cmds=listkeys+namespace%3Dphases'
-  200 Script output follows
+  401 read not authorized
   
-  cb9a9f314b8b07ba71012fcdbc544b5a4d82ff5b	1
-  publishing	True (no-eol)
+  0
+  read not authorized
+  [1]
 
 TODO custom commands don't check permissions
 
@@ -621,13 +615,12 @@
   read not authorized
   [1]
 
-TODO batch command doesn't check permissions
-
   $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=batch' --requestheader 'x-hgarg-1=cmds=listkeys+namespace%3Dphases'
-  200 Script output follows
+  401 read not authorized
   
-  cb9a9f314b8b07ba71012fcdbc544b5a4d82ff5b	1
-  publishing	True (no-eol)
+  0
+  read not authorized
+  [1]
 
 TODO custom commands don't check permissions
 
@@ -686,13 +679,12 @@
   pull not authorized
   [1]
 
-TODO batch command doesn't check permissions
-
   $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=batch' --requestheader 'x-hgarg-1=cmds=listkeys+namespace%3Dphases'
-  200 Script output follows
+  401 pull not authorized
   
-  cb9a9f314b8b07ba71012fcdbc544b5a4d82ff5b	1
-  publishing	True (no-eol)
+  0
+  pull not authorized
+  [1]
 
 TODO custom commands don't check permissions
 
@@ -742,16 +734,18 @@
   push requires POST request
   [1]
 
-TODO batch command doesn't check permissions
-
   $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=batch' --requestheader 'x-hgarg-1=cmds=pushkey+namespace%3Dbookmarks%2Ckey%3Dbm%2Cold%3D%2Cnew%3Dcb9a9f314b8b07ba71012fcdbc544b5a4d82ff5b'
-  200 Script output follows
+  405 push requires POST request
   
-  1
+  0
+  push requires POST request
+  [1]
 
   $ hg bookmarks
-     bm                        0:cb9a9f314b8b
+  no bookmarks set
   $ hg bookmark -d bm
+  abort: bookmark 'bm' does not exist
+  [255]
 
 TODO custom commands don't check permissions
 
@@ -781,16 +775,18 @@
   push requires POST request
   [1]
 
-TODO batch command doesn't check permissions
-
   $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=batch' --requestheader 'x-hgarg-1=cmds=pushkey+namespace%3Dbookmarks%2Ckey%3Dbm%2Cold%3D%2Cnew%3Dcb9a9f314b8b07ba71012fcdbc544b5a4d82ff5b'
-  200 Script output follows
+  405 push requires POST request
   
-  1
+  0
+  push requires POST request
+  [1]
 
   $ hg bookmarks
-     bm                        0:cb9a9f314b8b
+  no bookmarks set
   $ hg bookmark -d bm
+  abort: bookmark 'bm' does not exist
+  [255]
 
 TODO custom commands don't check permissions
 
@@ -823,16 +819,15 @@
   ssl required
   [1]
 
-TODO batch command doesn't check permissions
-
   $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=batch' --requestheader 'x-hgarg-1=cmds=pushkey+namespace%3Dbookmarks%2Ckey%3Dbm%2Cold%3D%2Cnew%3Dcb9a9f314b8b07ba71012fcdbc544b5a4d82ff5b'
-  200 Script output follows
+  403 ssl required
   
-  1
+  0
+  ssl required
+  [1]
 
   $ hg bookmarks
-     bm                        0:cb9a9f314b8b
-  $ hg book -d bm
+  no bookmarks set
 
 TODO custom commands don't check permissions
 
@@ -887,16 +882,15 @@
   push not authorized
   [1]
 
-TODO batch command doesn't check permissions
-
   $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=batch' --requestheader 'x-hgarg-1=cmds=pushkey+namespace%3Dbookmarks%2Ckey%3Dbm%2Cold%3D%2Cnew%3Dcb9a9f314b8b07ba71012fcdbc544b5a4d82ff5b'
-  200 Script output follows
+  401 push not authorized
   
-  1
+  0
+  push not authorized
+  [1]
 
   $ hg bookmarks
-     bm                        0:cb9a9f314b8b
-  $ hg book -d bm
+  no bookmarks set
 
 TODO custom commands don't check permissions
 
@@ -945,16 +939,15 @@
   push not authorized
   [1]
 
-TODO batch command doesn't check permissions
-
   $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=batch' --requestheader 'x-hgarg-1=cmds=pushkey+namespace%3Dbookmarks%2Ckey%3Dbm%2Cold%3D%2Cnew%3Dcb9a9f314b8b07ba71012fcdbc544b5a4d82ff5b'
-  200 Script output follows
+  401 push not authorized
   
-  1
+  0
+  push not authorized
+  [1]
 
   $ hg bookmarks
-     bm                        0:cb9a9f314b8b
-  $ hg book -d bm
+  no bookmarks set
 
 TODO custom commands don't check permissions
 
@@ -1009,16 +1002,15 @@
   push not authorized
   [1]
 
-TODO batch command doesn't check permissions
-
   $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=batch' --requestheader 'x-hgarg-1=cmds=pushkey+namespace%3Dbookmarks%2Ckey%3Dbm%2Cold%3D%2Cnew%3Dcb9a9f314b8b07ba71012fcdbc544b5a4d82ff5b'
-  200 Script output follows
+  401 push not authorized
   
-  1
+  0
+  push not authorized
+  [1]
 
   $ hg bookmarks
-     bm                        0:cb9a9f314b8b
-  $ hg book -d bm
+  no bookmarks set
 
 TODO custom commands don't check permissions
 
@@ -1067,16 +1059,15 @@
   push not authorized
   [1]
 
-TODO batch command doesn't check permissions
-
   $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=batch' --requestheader 'x-hgarg-1=cmds=pushkey+namespace%3Dbookmarks%2Ckey%3Dbm%2Cold%3D%2Cnew%3Dcb9a9f314b8b07ba71012fcdbc544b5a4d82ff5b'
-  200 Script output follows
+  401 push not authorized
   
-  1
+  0
+  push not authorized
+  [1]
 
   $ hg bookmarks
-     bm                        0:cb9a9f314b8b
-  $ hg book -d bm
+  no bookmarks set
 
 TODO custom commands don't check permissions
 
@@ -1241,16 +1232,15 @@
   push not authorized
   [1]
 
-TODO batch command doesn't check permissions
-
   $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=batch' --requestheader 'x-hgarg-1=cmds=pushkey+namespace%3Dbookmarks%2Ckey%3Dbm%2Cold%3D%2Cnew%3Dcb9a9f314b8b07ba71012fcdbc544b5a4d82ff5b'
-  200 Script output follows
+  401 push not authorized
   
-  1
+  0
+  push not authorized
+  [1]
 
   $ hg bookmarks
-     bm                        0:cb9a9f314b8b
-  $ hg book -d bm
+  no bookmarks set
 
 TODO custom commands don't check permissions
 
@@ -1367,16 +1357,15 @@
   push not authorized
   [1]
 
-TODO batch command doesn't check permissions
-
   $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=batch' --requestheader 'x-hgarg-1=cmds=pushkey+namespace%3Dbookmarks%2Ckey%3Dbm%2Cold%3D%2Cnew%3Dcb9a9f314b8b07ba71012fcdbc544b5a4d82ff5b'
-  200 Script output follows
+  401 push not authorized
   
-  1
+  0
+  push not authorized
+  [1]
 
   $ hg bookmarks
-     bm                        0:cb9a9f314b8b
-  $ hg book -d bm
+  no bookmarks set
 
 TODO custom commands don't check permissions
 
@@ -1432,16 +1421,15 @@
   read not authorized
   [1]
 
-TODO batch command doesn't check permissions
-
   $ get-with-headers.py $LOCALIP:$HGPORT '?cmd=batch' --requestheader 'x-hgarg-1=cmds=pushkey+namespace%3Dbookmarks%2Ckey%3Dbm%2Cold%3D%2Cnew%3Dcb9a9f314b8b07ba71012fcdbc544b5a4d82ff5b'
-  200 Script output follows
+  401 read not authorized
   
-  1
+  0
+  read not authorized
+  [1]
 
   $ hg bookmarks
-     bm                        0:cb9a9f314b8b
-  $ hg book -d bm
+  no bookmarks set
 
 TODO custom commands don't check permissions