Metacat

		suite.addTest(new CrudServiceTest("testAccessControl"));

	 * make sure that only valid sessions can update/delete

	 */

	public void testAccessControl()

	{

        try

        {

            CrudService cs = CrudService.getInstance();

            AuthToken token = getToken();

            //create a doc

            Identifier id = createDoc(token, getTestDoc());

            //get the doc and sysmetadata

            String gotDoc = getDoc(token, id);

            SystemMetadata sm = getSystemMetadata(token, id);

            //break the session id

            String sessionid = "somefakesessionid";

            token = new AuthToken(sessionid);

            //update the doc

            gotDoc = gotDoc.replaceAll("XXX", "YYY");

            Identifier newid = new Identifier();

            newid.setValue(generateDocumentId());

            StringBufferInputStream sbis = new StringBufferInputStream(gotDoc);

            SystemMetadata newsm = createSystemMetadata(newid, gotDoc);

            Identifier updatedid = cs.update(token, newid, sbis, id, newsm);

            fail("exception should have been thrown.");

        }

        catch(Exception e)

        {

            //System.out.println("Exception in testCreateAndGet (this *should* happen): " + e.getMessage());

        }

	}

	/**