[tests] tests for ensure_security

As the other tests does. Make sure that a fresh database gets proper
security doc after calling ensure_security method.

1 files changed, 14 insertions, 0 deletions

diff --git a/common/src/leap/soledad/common/tests/test_couch.py b/common/src/leap/soledad/common/tests/test_couch.py
index a56cea21..3622bb56 100644
--- a/common/src/leap/soledad/common/tests/test_couch.py
+++ b/common/src/leap/soledad/common/tests/test_couch.py
@@ -1501,6 +1501,20 @@ class CouchDatabaseExceptionsTests(CouchDBTestCase):
         self.create_db(ensure=True, dbname=self.db._dbname)
         self.db._get_transaction_log()
 
+    def test_ensure_security_doc(self):
+        """
+        Ensure_security creates a _security ddoc to ensure that only soledad
+        will have member access to a db.
+        """
+        self.create_db(ensure=False)
+        self.assertFalse(self.db._database.security)
+        self.db.ensure_security()
+        security_ddoc = self.db._database.security
+        self.assertIn('admins', security_ddoc)
+        self.assertFalse(security_ddoc['admins']['names'])
+        self.assertIn('members', security_ddoc)
+        self.assertIn('soledad', security_ddoc['members']['names'])
+
 
 class DatabaseNameValidationTest(unittest.TestCase):