mongodb/jstests/serverless/native_tenant_data_isolation_stop_restart.js

// Test that the collection catalog is restored correctly after a restart in a multitenant
// environment.

import {arrayEq} from "jstests/aggregation/extras/utils.js";
import {ReplSetTest} from "jstests/libs/replsettest.js";

const rst =
    new ReplSetTest({nodes: 3, nodeOptions: {auth: '', setParameter: {multitenancySupport: true}}});
rst.startSet({keyFile: 'jstests/libs/key1'});
rst.initiate();

let primary = rst.getPrimary();
let adminDb = primary.getDB('admin');

// Create a user for testing
assert.commandWorked(adminDb.runCommand({createUser: 'admin', pwd: 'pwd', roles: ['root']}));
assert(adminDb.auth('admin', 'pwd'));

{
    const kTenant = ObjectId();
    let testDb = primary.getDB('myDb0');
    let token = _createTenantToken({tenant: kTenant});
    primary._setSecurityToken(token);

    // Create a collection by inserting a document to it.
    assert.commandWorked(testDb.runCommand({insert: 'myColl0', documents: [{_id: 0, a: 1, b: 1}]}));

    // Run findAndModify on the document.
    let fad = assert.commandWorked(
        testDb.runCommand({findAndModify: "myColl0", query: {a: 1}, update: {$inc: {a: 10}}}));
    assert.eq({_id: 0, a: 1, b: 1}, fad.value, tojson(fad));

    // Create a view on the collection.
    assert.commandWorked(testDb.runCommand({"create": "view1", "viewOn": "myColl0", pipeline: []}));

    // Reset token before reseting the rs
    primary._setSecurityToken(undefined);

    // Stop the rs and restart it.
    rst.stopSet(null /* signal */, true /* forRestart */, {noCleanData: true});
    rst.startSet({restart: true});
    primary = rst.getPrimary();
    primary._setSecurityToken(token);

    adminDb = primary.getDB('admin');
    assert(adminDb.auth('admin', 'pwd'));
    testDb = primary.getDB('myDb0');

    // Assert we see 3 collections in the tenant's db 'myDb0' - the original collection we
    // created, the view on it, and the system.views collection.
    const colls = assert.commandWorked(testDb.runCommand({listCollections: 1, nameOnly: true}));
    assert.eq(3, colls.cursor.firstBatch.length, tojson(colls.cursor.firstBatch));
    const expectedColls = [
        {"name": "myColl0", "type": "collection"},
        {"name": "system.views", "type": "collection"},
        {"name": "view1", "type": "view"}
    ];
    assert(arrayEq(expectedColls, colls.cursor.firstBatch), tojson(colls.cursor.firstBatch));

    // Assert we can still run findAndModify on the doc.
    fad = assert.commandWorked(
        testDb.runCommand({findAndModify: "myColl0", query: {a: 11}, update: {$inc: {a: 10}}}));
    assert.eq({_id: 0, a: 11, b: 1}, fad.value, tojson(fad));
    primary._setSecurityToken(undefined);
}

rst.stopSet();