include("common/netsync.lua")
mtn_setup()
netsync.setup()

addfile("testfile", "1")
commit("branch1")
B1=base_revision()

writefile("testfile", "2")
commit("branch2")
B2=base_revision()

addfile("testfile", "3")
commit("branch3")
B3=base_revision()

writefile("testfile", "4")
commit("branch4")
B4=base_revision()

-- Allow permission to branch1 and branch3 only
-- pulling more than that should error out
-- pulling exactly that should give revs B1, B2, B3; and only give
-- branch certs on B1, B3.
mkdir("perm")
check(get("read-permissions", "perm/read-permissions"))

srv = netsync.start({"--confdir=perm"}, nil, true)

srv:pull("branch*", nil, 1)
check(mtn2("automate", "get_revision", B1), 1, false, false)
check(mtn2("automate", "get_revision", B2), 1, false, false)
check(mtn2("automate", "get_revision", B3), 1, false, false)
check(mtn2("automate", "get_revision", B4), 1, false, false)

srv:pull({"branch1", "branch3"})
check(mtn2("automate", "get_revision", B1), 0, false, false)
check(mtn2("automate", "get_revision", B2), 0, false, false)
check(mtn2("automate", "get_revision", B3), 0, false, false)
check(mtn2("automate", "get_revision", B4), 1, false, false)

check(mtn2("ls", "certs", B2), 0, true)
check(not qgrep("branch2", "stdout"))

srv:stop()