meadow-endpoints 2.0.14 → 3.0.2

package/test/MeadowEndpoints_trustedSession_tests.js

@@ -0,0 +1,1731 @@
+/**
+* Unit tests for the MeadowEndpoints Server in trusted session data mode.
+*
+* @license     MIT
+*
+* @author      Alex Decker <alex.decker@headlght.com>
+*/
+
+const Chai = require('chai');
+const Expect = Chai.expect;
+const Assert = Chai.assert;
+
+const libSuperTest = require('supertest');
+
+const libMySQL = require('mysql2');
+const libAsync = require('async');
+
+let tmpFableSettings = 	(
+{
+	Product: 'MockOratorAlternate',
+	ProductVersion: '0.0.0',
+
+	UnauthorizedRequestDelay: 10,
+	MeadowEndpointsSessionDataSource: 'Header',
+
+	MeadowAuthenticationMode: 'LoggedIn',
+	MeadowAuthorizationMode: 'SimpleOwnership',
+
+	APIServerPort: 9081,
+
+	MySQL:
+	{
+		// This is queued up for Travis defaults.
+		Server: 'localhost',
+		Port: 3306,
+		User: process.env.DEV_MYSQL_USER || 'root',
+		Password: process.env.DEV_MYSQL_PASS || '123456789',
+		Database: 'FableTest',
+		ConnectionPoolLimit: 20
+	},
+	ConfigFile: + `${__dirname}/../MeadowTest-Settings.json`,
+});
+
+const libFable = require('fable').new(tmpFableSettings);
+tmpFableSettings = libFable.settings;
+
+libFable.MeadowMySQLConnectionPool = libMySQL.createPool
+	(
+		{
+			connectionLimit: libFable.settings.MySQL.ConnectionPoolLimit,
+			host: libFable.settings.MySQL.Server,
+			port: libFable.settings.MySQL.Port,
+			user: libFable.settings.MySQL.User,
+			password: libFable.settings.MySQL.Password,
+			database: libFable.settings.MySQL.Database,
+			namedPlaceholders: true
+		}
+	);
+
+const _MockSessionValidUser = (
+	{
+		SessionID: '0000-VALID',
+		UserID: 37,
+		UserRole: 'User',
+		UserRoleIndex: 1,
+		LoggedIn: true,
+		DeviceID: 'TEST-HARNESS',
+		CustomerID: 1
+	});
+
+let _Meadow;
+let _MeadowEndpoints;
+
+const _AnimalSchema = require('./Animal.json');
+
+// Now that we have some test data, wire up the endpoints!
+
+// Load up a Meadow (pointing at the Animal database)
+_Meadow = require('meadow')
+				.new(libFable, 'FableTest')
+				.setProvider('MySQL')
+				.setSchema(_AnimalSchema.Schema)
+				.setJsonSchema(_AnimalSchema.JsonSchema)
+				.setDefaultIdentifier(_AnimalSchema.DefaultIdentifier)
+				.setDefault(_AnimalSchema.DefaultObject)
+				.setAuthorizer(_AnimalSchema.Authorization);
+// Instantiate the endpoints
+_MeadowEndpoints = require('../source/Meadow-Endpoints.js').new(_Meadow);
+
+suite
+(
+	'Meadow-Endpoints with Trusted Header Auth',
+	function()
+	{
+		// TODO: Abstract this so it can be run again and again.
+		let _SpooledUp = false;
+		let _Orator;
+
+		const getAnimalInsert = function(pName, pType)
+		{
+			return "INSERT INTO `FableTest` (`IDAnimal`, `GUIDAnimal`, `CreateDate`, `CreatingIDUser`, `UpdateDate`, `UpdatingIDUser`, `Deleted`, `DeleteDate`, `DeletingIDUser`, `Name`, `Type`, `IDCustomer`) VALUES (NULL, '00000000-0000-0000-0000-000000000000', NOW(), 1, NOW(), 1, 0, NULL, 0, '"+pName+"', '"+pType+"', 1); ";
+		};
+
+		setup
+		(
+			function(fDone)
+			{
+				// Only do this for the first test, so we persiste database state across suites
+				if (!_SpooledUp)
+				{
+					_Orator = require('orator').new(tmpFableSettings);
+					_Orator.enabledModules.CORS = true;
+					_Orator.enabledModules.FullResponse = true;
+					_Orator.enabledModules.Body = false;
+
+
+					const _SQLConnectionPool = libMySQL.createPool
+					(
+						{
+							connectionLimit: tmpFableSettings.MySQL.ConnectionPoolLimit,
+							host: tmpFableSettings.MySQL.Server,
+							port: tmpFableSettings.MySQL.Port,
+							user: tmpFableSettings.MySQL.User,
+							password: tmpFableSettings.MySQL.Password,
+							database: tmpFableSettings.MySQL.Database
+						}
+					);
+
+					// Tear down previous test data, rebuild records
+					libAsync.waterfall(
+					[
+						function(fCallBack)
+						{
+							_SQLConnectionPool.query('DROP TABLE IF EXISTS FableTest',
+							function(pErrorUpdate, pResponse) { fCallBack(null); });
+						},
+						function(fCallBack)
+						{
+							_SQLConnectionPool.query("CREATE TABLE IF NOT EXISTS FableTest (IDAnimal INT UNSIGNED NOT NULL AUTO_INCREMENT, GUIDAnimal CHAR(36) NOT NULL DEFAULT '00000000-0000-0000-0000-000000000000', CreateDate DATETIME, CreatingIDUser INT NOT NULL DEFAULT '0', UpdateDate DATETIME, UpdatingIDUser INT NOT NULL DEFAULT '0', Deleted TINYINT NOT NULL DEFAULT '0', DeleteDate DATETIME, DeletingIDUser INT NOT NULL DEFAULT '0', Name CHAR(128) NOT NULL DEFAULT '', Type CHAR(128) NOT NULL DEFAULT '', IDCustomer INT NOT NULL DEFAULT '0', PRIMARY KEY (IDAnimal) );",
+							function(pErrorUpdate, pResponse) { fCallBack(null); });
+						},
+						function(fCallBack)
+						{
+							_SQLConnectionPool.query(getAnimalInsert('Foo Foo', 'Bunny'),
+							function(pErrorUpdate, pResponse) { fCallBack(null); });
+						},
+						function(fCallBack)
+						{
+							_SQLConnectionPool.query(getAnimalInsert('Red Riding Hood', 'Girl'),
+							function(pErrorUpdate, pResponse) { fCallBack(null); });
+						},
+						function(fCallBack)
+						{
+							_SQLConnectionPool.query(getAnimalInsert('Red', 'Dog'),
+							function(pErrorUpdate, pResponse) { fCallBack(null); });
+						},
+						function(fCallBack)
+						{
+							_SQLConnectionPool.query(getAnimalInsert('Spot', 'Dog'),
+							function(pErrorUpdate, pResponse) { fCallBack(null); });
+						},
+						function(fCallBack)
+						{
+							_SQLConnectionPool.query(getAnimalInsert('Gertrude', 'Frog'),
+							function(pErrorUpdate, pResponse) { fCallBack(null); });
+						},
+						function(fCallBack)
+						{
+							// Start the web server
+							_MeadowEndpoints.setEndpointAuthorization
+							(
+								'Create',
+								2
+							);
+							_MeadowEndpoints.setEndpointAuthenticator ('Reads');
+							_MeadowEndpoints.setEndpointAuthenticator
+							(
+								'Reads',
+								function(pRequest, pResponse, fNext)
+								{
+									pRequest.EndpointAuthenticated = true;
+									fNext();
+								}
+							);
+							_MeadowEndpoints.setEndpoint('Randomize');
+							_MeadowEndpoints.setEndpoint('Randomize', function() {});
+
+							_MeadowEndpoints.behaviorModifications.setTemplate('ListQuery', '<%= MyData %>');
+							//_MeadowEndpoints.behaviorModifications.setTemplate('SelectList', '<%= Name %>|<%= Type %>');
+
+							// Wire the endpoints up
+							_MeadowEndpoints.connectRoutes(_Orator.webServer);
+							_Orator.startWebServer (function() { fCallBack(null); });
+						}
+					],
+						function(pError, pResult)
+						{
+							// Now continue the tests.
+							_SpooledUp = true;
+							fDone();
+						}
+					);
+				}
+				else
+				{
+					fDone();
+				}
+			}
+		);
+
+		setup
+		(
+			function()
+			{
+			}
+		);
+
+		suite
+		(
+			'Object Sanity',
+			function()
+			{
+				test
+				(
+					'initialize should build a happy little object',
+					function()
+					{
+						Expect(_MeadowEndpoints).to.be.an('object', 'MeadowEndpoints should initialize as an object directly from the require statement.');
+					}
+				);
+			}
+		);
+		suite
+		(
+			'Behavior Modifications',
+			function()
+			{
+				test
+				(
+					'instantiate a behavior modification object',
+					function()
+					{
+						const tmpBehaviorMods = require('../source/Meadow-BehaviorModifications.js').new(libFable);
+						Expect(tmpBehaviorMods).to.be.an('object');
+					}
+				);
+				test
+				(
+					'exercise the templates api',
+					function()
+					{
+						const tmpBehaviorMods = require('../source/Meadow-BehaviorModifications.js').new(libFable);
+
+						let tmpCrossBehaviorState = 0;
+
+						Expect(tmpBehaviorMods.runBehavior('NoBehaviorsHere', {}, function() {})).to.equal(undefined, 'nonexistant behaviors should just execute');
+						tmpBehaviorMods.setBehavior('BigBehavior', function() { tmpCrossBehaviorState++ });
+						Expect(tmpCrossBehaviorState).to.equal(0);
+						Expect(tmpBehaviorMods.runBehavior('BigBehavior', {}, function() {})).to.equal(undefined, 'existant behaviors should just execute');
+						Expect(tmpCrossBehaviorState).to.equal(1);
+					}
+				);
+				test
+				(
+					'exercise the behavior modification api',
+					function()
+					{
+						const tmpBehaviorMods = require('../source/Meadow-BehaviorModifications.js').new(libFable);
+						Expect(tmpBehaviorMods.getTemplateFunction('NoTemplatesHere')).to.equal(false, 'empty template hashes on empty sets should return false');
+						Expect(tmpBehaviorMods.getTemplate('NoTemplatesHere')).to.equal(false,'emtpy template sets should be false');
+						tmpBehaviorMods.setTemplate('AnimalFormatter', '<p>An animal (id <%= Number %> is here</p>');
+						Expect(tmpBehaviorMods.getTemplate('AnimalFormatter')).to.contain('An animal');
+						Expect(tmpBehaviorMods.processTemplate('AnimalFormatter', {Number:5})).to.contain('id 5');
+						Expect(tmpBehaviorMods.processTemplate('FriendFormatter', {Number:5}, 'blit <%= Number %>')).to.contain('blit 5');
+						Expect(tmpBehaviorMods.processTemplate('Blank', {Number:5})).to.equal('');
+						tmpBehaviorMods.setTemplate('SimpleTemplate', 'Not so simple.');
+						Expect(tmpBehaviorMods.processTemplate('SimpleTemplate')).to.equal('Not so simple.');
+					}
+				);
+				test
+				(
+					'exercise the security modification api',
+					function()
+					{
+						const tmpAuthorizers = require('../source/Meadow-Authorizers.js').new(libFable);
+						tmpAuthorizers.setAuthorizer('AlwaysAuthorize',
+							function(pRequest, fComplete)
+							{
+								pRequest.MeadowAuthorization = true;
+							});
+						const tmpMockRequest = {MeadowAuthorization: 'Green'};
+						tmpAuthorizers.authorize('BadHash', tmpMockRequest,
+							function()
+							{
+								Expect(tmpMockRequest.MeadowAuthorization).to.equal('Green');
+							});
+						tmpAuthorizers.authorize('AlwaysAuthorize', tmpMockRequest,
+							function()
+							{
+								Expect(tmpMockRequest.MeadowAuthorization).to.equal(true);
+							});
+						tmpAuthorizers.authorize('Allow', tmpMockRequest,
+							function()
+							{
+								Expect(tmpMockRequest.MeadowAuthorization).to.equal(true);
+							});
+						tmpAuthorizers.authorize('Deny', tmpMockRequest,
+							function()
+							{
+								Expect(tmpMockRequest.MeadowAuthorization).to.equal(false);
+							});
+					}
+				);
+				test
+				(
+					'exercise the security modification authenticators',
+					function()
+					{
+						const tmpAuthorizers = require('../source/Meadow-Authorizers.js').new(libFable);
+						const tmpMockFullRequest =
+						{
+							UserSession:
+							{
+								CustomerID: 10,
+								UserID: 1
+							},
+							Record:
+							{
+								IDCustomer: 10,
+								CreatingIDUser: 1
+							}
+						};
+						// Mine and MyCustomer should both work
+						tmpAuthorizers.authorize('Mine', tmpMockFullRequest,
+							function()
+							{
+								Expect(tmpMockFullRequest.MeadowAuthorization).to.equal(true);
+							});
+						tmpAuthorizers.authorize('MyCustomer', tmpMockFullRequest,
+							function()
+							{
+								Expect(tmpMockFullRequest.MeadowAuthorization).to.equal(true);
+							});
+						tmpMockFullRequest.UserSession.CustomerID = 100;
+						tmpMockFullRequest.UserSession.UserID = 100;
+						// Now they should both fail
+						tmpAuthorizers.authorize('Mine', tmpMockFullRequest,
+							function()
+							{
+								//If record does not have matching CreatingIDUser, then it should fail
+								Expect(tmpMockFullRequest.MeadowAuthorization).to.equal(false);
+							});
+						tmpAuthorizers.authorize('MyCustomer', tmpMockFullRequest,
+							function()
+							{
+								//If record does not have matching CustomerID, then it should fail
+								Expect(tmpMockFullRequest.MeadowAuthorization).to.equal(false);
+							});
+					}
+				);
+			}
+		);
+		suite
+		(
+			'Basic Server Routes',
+			function()
+			{
+				test
+				(
+					'create: create a record',
+					function(fDone)
+					{
+						const tmpRecord = {Name:'BatBrains', Type:'Mammoth'};
+						_MockSessionValidUser.UserRoleIndex = 2;
+						libSuperTest('http://localhost:9081/')
+						.post('1.0/FableTest')
+						.set('x-trusted-session', JSON.stringify(_MockSessionValidUser))
+						.send(tmpRecord)
+						.end(
+							function(pError, pResponse)
+							{
+								// Expect response to be the record we just created.
+								const tmpResult = JSON.parse(pResponse.text);
+								Expect(tmpResult.Type).to.equal('Mammoth');
+								Expect(tmpResult.CreatingIDUser).to.equal(37);
+								fDone();
+							}
+						);
+					}
+				);
+				test
+				(
+					'create: create a record',
+					function(fDone)
+					{
+						const tmpRecord = {Name:'BatBrains', Type:'Mammoth'};
+						_MockSessionValidUser.UserRoleIndex = 1;
+						libSuperTest('http://localhost:9081/')
+						.post('1.0/FableTest')
+						.set('x-trusted-session', JSON.stringify(_MockSessionValidUser))
+						.send(tmpRecord)
+						.end(
+							function(pError, pResponse)
+							{
+								// Expect response to be the record we just created.
+								const tmpResult = JSON.parse(pResponse.text);
+								Expect(tmpResult.Error).to.contain('authenticated');
+								fDone();
+							}
+						);
+					}
+				);
+				test
+				(
+					'create: create a record with a bad record passed in',
+					function(fDone)
+					{
+						const tmpRecord = ' ';
+						_MockSessionValidUser.UserRoleIndex = 2;
+						libSuperTest('http://localhost:9081/')
+						.post('1.0/FableTest')
+						.set('x-trusted-session', JSON.stringify(_MockSessionValidUser))
+						.send(tmpRecord)
+						.end(
+							function(pError, pResponse)
+							{
+								// Expect response to be the record we just created.
+								const tmpResult = JSON.parse(pResponse.text);
+								Expect(tmpResult.Error).to.not.be.null;
+								fDone();
+							}
+						);
+					}
+				);
+				test
+				(
+					'read: get a specific record',
+					function(fDone)
+					{
+						libSuperTest('http://localhost:9081/')
+						.get('1.0/FableTest/2')
+						.set('x-trusted-session', JSON.stringify(_MockSessionValidUser))
+						.end(
+							function (pError, pResponse)
+							{
+								const tmpResult = JSON.parse(pResponse.text);
+								Expect(tmpResult.Type).to.equal('Girl');
+								fDone();
+							}
+						);
+					}
+				);
+				test
+				(
+					'read: define a custom route and get a record with it',
+					function(fDone)
+					{
+						_Orator.webServer.get('/CustomHotRodRoute/:IDRecord', _MeadowEndpoints.endpointAuthenticators.Read, _MeadowEndpoints.wireState, _MeadowEndpoints.endpoints.Read);
+						libSuperTest('http://localhost:9081/')
+						.get('CustomHotRodRoute/2')
+						.set('x-trusted-session', JSON.stringify(_MockSessionValidUser))
+						.end(
+							function (pError, pResponse)
+							{
+								const tmpResult = JSON.parse(pResponse.text);
+								Expect(tmpResult.Type).to.equal('Girl');
+								fDone();
+							}
+						);
+					}
+				);
+				test
+				(
+					'read: get a specific record but be denied by security',
+					function(fDone)
+					{
+						_Meadow.schemaFull.authorizer.Manager = {};
+						_Meadow.schemaFull.authorizer.Manager.Read = 'Deny';
+
+						libSuperTest('http://localhost:9081/')
+						.get('1.0/FableTest/2')
+						.set('x-trusted-session', JSON.stringify(_MockSessionValidUser))
+						.end(
+							function (pError, pResponse)
+							{
+								Expect(pResponse.text).to.contain('UNAUTHORIZED ACCESS IS NOT ALLOWED');
+								// Reset authorization
+								_Meadow.schemaFull.authorizer.Manager.Read = 'Allow';
+								fDone();
+							}
+						);
+					}
+				);
+				test
+				(
+					'read: get a specific record with a bad parameter',
+					function(fDone)
+					{
+						libSuperTest('http://localhost:9081/')
+						.get('1.0/FableTest/')
+						.set('x-trusted-session', JSON.stringify(_MockSessionValidUser))
+						.end(
+							function (pError, pResponse)
+							{
+								const tmpResult = JSON.parse(pResponse.text);
+								Expect(tmpResult.Error).to.equal('Error retreiving a record. Record not found');
+								fDone();
+							}
+						);
+					}
+				);
+				test
+				(
+					'reads: get all records',
+					function(fDone)
+					{
+						libSuperTest('http://localhost:9081/')
+						.get('1.0/FableTests')
+						.set('x-trusted-session', JSON.stringify(_MockSessionValidUser))
+						.end(
+							function (pError, pResponse)
+							{
+								const tmpResults = JSON.parse(pResponse.text);
+								Expect(tmpResults.length).to.equal(6);
+								Expect(tmpResults[0].Type).to.equal('Bunny');
+								Expect(tmpResults[4].Name).to.equal('Gertrude');
+								fDone();
+							}
+						);
+					}
+				);
+				test
+				(
+					'readsLiteExtended: get all records',
+					function(fDone)
+					{
+						libSuperTest('http://localhost:9081/')
+						.get('1.0/FableTests/LiteExtended/Type,Name')
+						.set('x-trusted-session', JSON.stringify(_MockSessionValidUser))
+						.end(
+							function (pError, pResponse)
+							{
+								const tmpResults = JSON.parse(pResponse.text);
+								Expect(tmpResults.length).to.equal(6);
+								Expect(tmpResults[0].IDAnimal).to.equal(1);
+								Expect(tmpResults[4].IDAnimal).to.equal(5);
+								Expect(tmpResults[4].Type).to.equal('Frog');
+								fDone();
+							}
+						);
+					}
+				);
+				test
+				(
+					'readsby: get all records by Type',
+					function(fDone)
+					{
+						libSuperTest('http://localhost:9081/')
+						.get('1.0/FableTests/By/Type/Dog')
+						.set('x-trusted-session', JSON.stringify(_MockSessionValidUser))
+						.end(
+							function (pError, pResponse)
+							{
+								const tmpResults = JSON.parse(pResponse.text);
+								Expect(tmpResults.length).to.equal(2);
+								Expect(tmpResults[0].Type).to.equal('Dog');
+								fDone();
+							}
+						);
+					}
+				);
+				test
+				(
+					'readsby: get all records by Type IN LIST',
+					function(fDone)
+					{
+						libSuperTest('http://localhost:9081/')
+						.get('1.0/FableTests/By/Type/Mammoth%2C%20WithComma,Dog')
+						.set('x-trusted-session', JSON.stringify(_MockSessionValidUser))
+						.end(
+							function (pError, pResponse)
+							{
+								const tmpResults = JSON.parse(pResponse.text);
+								Expect(tmpResults.length).to.equal(2);
+								Expect(tmpResults[0].Type).to.equal('Dog');
+								fDone();
+							}
+						);
+					}
+				);
+				test
+				(
+					'countby: get count of records by Type',
+					function(fDone)
+					{
+						libSuperTest('http://localhost:9081/')
+						.get('1.0/FableTests/Count/By/Type/Dog')
+						.set('x-trusted-session', JSON.stringify(_MockSessionValidUser))
+						.end(
+							function (pError, pResponse)
+							{
+								const tmpResults = JSON.parse(pResponse.text);
+								Expect(tmpResults.Count).to.equal(2);
+								fDone();
+							}
+						);
+					}
+				);
+				test
+				(
+					'countby: get count of records by multiple Types',
+					function(fDone)
+					{
+						libSuperTest('http://localhost:9081/')
+						.get('1.0/FableTests/Count/By/Type/Dog,Mammoth')
+						.set('x-trusted-session', JSON.stringify(_MockSessionValidUser))
+						.end(
+							function (pError, pResponse)
+							{
+								const tmpResults = JSON.parse(pResponse.text);
+								Expect(tmpResults.Count).to.equal(3);
+								fDone();
+							}
+						);
+					}
+				);
+				test
+				(
+					'readsby: get paged records by Type',
+					function(fDone)
+					{
+						libSuperTest('http://localhost:9081/')
+						.get('1.0/FableTests/By/Type/Dog/1/1')
+						.set('x-trusted-session', JSON.stringify(_MockSessionValidUser))
+						.end(
+							function (pError, pResponse)
+							{
+								const tmpResults = JSON.parse(pResponse.text);
+								Expect(tmpResults.length).to.equal(1);
+								Expect(tmpResults[0].Name).to.equal('Spot');
+								fDone();
+							}
+						);
+					}
+				);
+				test
+				(
+					'readselect: get a page of filtered records by date',
+					function(fDone)
+					{
+						let today = new Date();
+						today = today.toISOString().substring(0, 10);
+
+						libSuperTest('http://localhost:9081/')
+						.get(`1.0/FableTestSelect/FilteredTo/FBD~UpdateDate~EQ~${today}/0/1`)
+						.set('x-trusted-session', JSON.stringify(_MockSessionValidUser))
+						.end(
+							function (pError, pResponse)
+							{
+								console.log(pResponse.text)
+								const tmpResults = JSON.parse(pResponse.text);
+								Expect(tmpResults.length).to.equal(1);
+								Expect(tmpResults[0].Value).to.equal('FableTest #1');
+								fDone();
+							}
+						);
+					}
+				);
+				test
+				(
+					'readselect: get all records',
+					function(fDone)
+					{
+						libSuperTest('http://localhost:9081/')
+						.get('1.0/FableTestSelect')
+						.set('x-trusted-session', JSON.stringify(_MockSessionValidUser))
+						.end(
+							function (pError, pResponse)
+							{
+								console.log(pResponse.text)
+								const tmpResults = JSON.parse(pResponse.text);
+								Expect(tmpResults.length).to.equal(6);
+								Expect(tmpResults[4].Value).to.equal('FableTest #5');
+								fDone();
+							}
+						);
+					}
+				);
+				test
+				(
+					'readselect: get a page of records',
+					function(fDone)
+					{
+						libSuperTest('http://localhost:9081/')
+						.get('1.0/FableTestSelect/2/2')
+						.set('x-trusted-session', JSON.stringify(_MockSessionValidUser))
+						.end(
+							function (pError, pResponse)
+							{
+								console.log(pResponse.text)
+								const tmpResults = JSON.parse(pResponse.text);
+								Expect(tmpResults.length).to.equal(2);
+								Expect(tmpResults[1].Value).to.equal('FableTest #4');
+								fDone();
+							}
+						);
+					}
+				);
+				test
+				(
+					'readselect: get a page of records',
+					function(fDone)
+					{
+						libSuperTest('http://localhost:9081/')
+						.get('1.0/FableTestSelect/2/2')
+						.set('x-trusted-session', JSON.stringify(_MockSessionValidUser))
+						.end(
+							function (pError, pResponse)
+							{
+								console.log(pResponse.text)
+								const tmpResults = JSON.parse(pResponse.text);
+								Expect(tmpResults.length).to.equal(2);
+								Expect(tmpResults[1].Value).to.equal('FableTest #4');
+								fDone();
+							}
+						);
+					}
+				);
+				test
+				(
+					'readselect: get filtered records',
+					function(fDone)
+					{
+						libSuperTest('http://localhost:9081/')
+						.get('1.0/FableTestSelect/FilteredTo/FBV~Type~EQ~Dog')
+						.set('x-trusted-session', JSON.stringify(_MockSessionValidUser))
+						.end(
+							function (pError, pResponse)
+							{
+								const tmpResults = JSON.parse(pResponse.text);
+								Expect(tmpResults.length).to.equal(2);
+								Expect(tmpResults[0].Value).to.equal('FableTest #3');
+								fDone();
+							}
+						);
+					}
+				);
+				test
+				(
+					'readselect: get a page of filtered records',
+					function(fDone)
+					{
+						libSuperTest('http://localhost:9081/')
+						.get('1.0/FableTestSelect/FilteredTo/FBV~Type~EQ~Dog/1/1')
+						.set('x-trusted-session', JSON.stringify(_MockSessionValidUser))
+						.end(
+							function (pError, pResponse)
+							{
+								console.log(pResponse.text)
+								const tmpResults = JSON.parse(pResponse.text);
+								Expect(tmpResults.length).to.equal(1);
+								Expect(tmpResults[0].Value).to.equal('FableTest #4');
+								fDone();
+							}
+						);
+					}
+				);
+				test
+				(
+					'readselect: get an empty page of records',
+					function(fDone)
+					{
+						libSuperTest('http://localhost:9081/')
+						.get('1.0/FableTestSelect/200/200')
+						.set('x-trusted-session', JSON.stringify(_MockSessionValidUser))
+						.end(
+							function (pError, pResponse)
+							{
+								console.log(pResponse.text)
+								const tmpResults = JSON.parse(pResponse.text);
+								Expect(tmpResults.length).to.equal(0);
+								fDone();
+							}
+						);
+					}
+				);
+				test
+				(
+					'reads: get a page of records',
+					function(fDone)
+					{
+						libSuperTest('http://localhost:9081/')
+						// Get page 2, 2 records per page.
+						.get('1.0/FableTests/2/2')
+						.set('x-trusted-session', JSON.stringify(_MockSessionValidUser))
+						.end(
+							function (pError, pResponse)
+							{
+								const tmpResults = JSON.parse(pResponse.text);
+								Expect(tmpResults.length).to.equal(2);
+								Expect(tmpResults[0].Type).to.equal('Dog');
+								Expect(tmpResults[1].Name).to.equal('Spot');
+								fDone();
+							}
+						);
+					}
+				);
+				test
+				(
+					'reads: get a filtered set of records',
+					function(fDone)
+					{
+						libSuperTest('http://localhost:9081/')
+						.get('1.0/FableTests/FilteredTo/FBV~Type~EQ~Frog')
+						.set('x-trusted-session', JSON.stringify(_MockSessionValidUser))
+						.end(
+							function (pError, pResponse)
+							{
+								const tmpResults = JSON.parse(pResponse.text);
+								Expect(tmpResults.length).to.equal(1);
+								Expect(tmpResults[0].Type).to.equal('Frog');
+								fDone();
+							}
+						);
+					}
+				);
+				test
+				(
+					'reads: get distinct values for a column',
+					function(fDone)
+					{
+						libSuperTest('http://localhost:9081/')
+						.get('1.0/FableTests/Distinct/Type')
+						.set('x-trusted-session', JSON.stringify(_MockSessionValidUser))
+						.end(
+							function (pError, pResponse)
+							{
+								const tmpResults = JSON.parse(pResponse.text);
+								Expect(tmpResults.length).to.equal(5);
+								const types = tmpResults.map((r) => r.Type);
+								Expect(types).to.have.members(['Bunny', 'Girl', 'Dog', 'Frog', 'Mammoth']);
+								fDone();
+							}
+						);
+					}
+				);
+				test
+				(
+					'reads: get distinct values for a column with filter',
+					function(fDone)
+					{
+						libSuperTest('http://localhost:9081/')
+						.get('1.0/FableTests/Distinct/Type/FilteredTo/FBV~IDAnimal~LT~3')
+						.set('x-trusted-session', JSON.stringify(_MockSessionValidUser))
+						.end(
+							function (pError, pResponse)
+							{
+								const tmpResults = JSON.parse(pResponse.text);
+								Expect(tmpResults.length).to.equal(2);
+								const types = new Set(tmpResults.map((r) => r.Type));
+								Expect(types.size).to.equal(2);
+								fDone();
+							}
+						);
+					}
+				);
+				test
+				(
+					'reads: get distinct values for a column with filter and pagination',
+					function(fDone)
+					{
+						libSuperTest('http://localhost:9081/')
+						.get('1.0/FableTests/Distinct/Type/FilteredTo/FBV~IDAnimal~LT~3/0/1')
+						.set('x-trusted-session', JSON.stringify(_MockSessionValidUser))
+						.end(
+							function (pError, pResponse)
+							{
+								const tmpResults = JSON.parse(pResponse.text);
+								Expect(tmpResults.length).to.equal(1);
+								fDone();
+							}
+						);
+					}
+				);
+				test
+				(
+					'reads: get distinct values for a column with pagination',
+					function(fDone)
+					{
+						libSuperTest('http://localhost:9081/')
+						.get('1.0/FableTests/Distinct/Type/2/2')
+						.set('x-trusted-session', JSON.stringify(_MockSessionValidUser))
+						.end(
+							function (pError, pResponse)
+							{
+								const tmpResults = JSON.parse(pResponse.text);
+								Expect(tmpResults.length).to.equal(2);
+								const types = new Set(tmpResults.map((r) => r.Type));
+								Expect(types.size).to.equal(2);
+								fDone();
+							}
+						);
+					}
+				);
+				test
+				(
+					'reads: get a filtered paged set of records',
+					function(fDone)
+					{
+						libSuperTest('http://localhost:9081/')
+						// Skip one record, 2 records per page.
+						.get('1.0/FableTests/FilteredTo/FBV~Type~EQ~Dog/1/2')
+						.set('x-trusted-session', JSON.stringify(_MockSessionValidUser))
+						.end(
+							function (pError, pResponse)
+							{
+								const tmpResults = JSON.parse(pResponse.text);
+								Expect(tmpResults.length).to.equal(1);
+								Expect(tmpResults[0].Type).to.equal('Dog');
+								fDone();
+							}
+						);
+					}
+				);
+				test
+				(
+					'update: update a record',
+					function(fDone)
+					{
+						// Change animal 4 ("Spot") to a Corgi
+						const tmpRecord = {IDAnimal:4, Type:'Corgi'};
+						libSuperTest('http://localhost:9081/')
+						.put('1.0/FableTest')
+						.set('x-trusted-session', JSON.stringify(_MockSessionValidUser))
+						.send(tmpRecord)
+						.end(
+							function(pError, pResponse)
+							{
+								// Expect response to be the record we just created.
+								const tmpResult = JSON.parse(pResponse.text);
+								Expect(tmpResult.Type).to.equal('Corgi');
+								Expect(tmpResult.CreatingIDUser).to.equal(1);
+								Expect(tmpResult.UpdatingIDUser).to.equal(37);
+								fDone();
+							}
+						);
+					}
+				);
+				test
+				(
+					'delete: delete a record',
+					function(fDone)
+					{
+						// Delete animal 3 ("Red")
+						const tmpRecord = {IDAnimal:3};
+						libSuperTest('http://localhost:9081/')
+						.del('1.0/FableTest')
+						.set('x-trusted-session', JSON.stringify(_MockSessionValidUser))
+						.send(tmpRecord)
+						.end(
+							function(pError, pResponse)
+							{
+								// Expect response to be the count of deleted records.
+								const tmpResult = JSON.parse(pResponse.text);
+								Expect(tmpResult.Count).to.equal(1);
+								fDone();
+							}
+						);
+					}
+				);
+				test
+				(
+					'delete: delete a record with a bad parameter',
+					function(fDone)
+					{
+						// Delete animal 3 ("Red")
+						const tmpRecord = {IDAnimal:{MyStuff:4}};
+						libSuperTest('http://localhost:9081/')
+						.del('1.0/FableTest')
+						.set('x-trusted-session', JSON.stringify(_MockSessionValidUser))
+						.send(tmpRecord)
+						.end(
+							function(pError, pResponse)
+							{
+								// Expect response to be the count of deleted records.
+								const tmpResult = JSON.parse(pResponse.text);
+								Expect(tmpResult.Error).to.contain('a valid record ID is required');
+								fDone();
+							}
+						);
+					}
+				);
+				test
+				(
+					'count: get the count of records',
+					function(fDone)
+					{
+						libSuperTest('http://localhost:9081/')
+						.get('1.0/FableTests/Count')
+						.set('x-trusted-session', JSON.stringify(_MockSessionValidUser))
+						.end(
+							function (pError, pResponse)
+							{
+								const tmpResults = JSON.parse(pResponse.text);
+								Expect(tmpResults.Count).to.equal(5);
+								fDone();
+							}
+						);
+					}
+				);
+				test
+				(
+					'count: get the count of filtered records',
+					function(fDone)
+					{
+						libSuperTest('http://localhost:9081/')
+						.get('1.0/FableTests/Count/FilteredTo/FBV~Type~EQ~Girl')
+						.set('x-trusted-session', JSON.stringify(_MockSessionValidUser))
+						.end(
+							function (pError, pResponse)
+							{
+								const tmpResults = JSON.parse(pResponse.text);
+								Expect(tmpResults.Count).to.equal(1);
+								fDone();
+							}
+						);
+					}
+				);
+				test
+				(
+					'schema: get the schema of a record',
+					function(fDone)
+					{
+						libSuperTest('http://localhost:9081/')
+						.get('1.0/FableTest/Schema')
+						.set('x-trusted-session', JSON.stringify(_MockSessionValidUser))
+						.end(
+							function (pError, pResponse)
+							{
+								const tmpResults = JSON.parse(pResponse.text);
+								//console.log('SCHEMA --> '+JSON.stringify(tmpResults, null, 4))
+								Expect(tmpResults.title).to.equal('Animal');
+								Expect(tmpResults.description).to.contain('creature that lives in');
+								fDone();
+							}
+						);
+					}
+				);
+				test
+				(
+					'new: get a new empty record',
+					function(fDone)
+					{
+						libSuperTest('http://localhost:9081/')
+						.get('1.0/FableTest/Schema/New')
+						.set('x-trusted-session', JSON.stringify(_MockSessionValidUser))
+						.end(
+							function (pError, pResponse)
+							{
+								const tmpResults = JSON.parse(pResponse.text);
+								//console.log(JSON.stringify(tmpResults, null, 4))
+								Expect(tmpResults.IDAnimal).to.equal(null);
+								Expect(tmpResults.Name).to.equal('Unknown');
+								Expect(tmpResults.Type).to.equal('Unclassified');
+								fDone();
+							}
+						);
+					}
+				);
+				test
+				(
+					'validate: validate an invalid record',
+					function(fDone)
+					{
+						const tmpRecord = {IDAnimal:4, Type:'Corgi'};
+						libSuperTest('http://localhost:9081/')
+						.post('1.0/FableTest/Schema/Validate')
+						.set('x-trusted-session', JSON.stringify(_MockSessionValidUser))
+						.send(tmpRecord)
+						.end(
+							function(pError, pResponse)
+							{
+								// Expect response to be the record we just created.
+								const tmpResult = JSON.parse(pResponse.text);
+								//console.log(JSON.stringify(tmpResult, null, 4))
+								Expect(tmpResult.Valid).to.equal(false);
+								Expect(tmpResult.Errors[0].field).to.equal('data.Name');
+								Expect(tmpResult.Errors[0].message).to.equal('is required');
+								fDone();
+							}
+						);
+					}
+				);
+				test
+				(
+					'validate: validate a valid record',
+					function(fDone)
+					{
+						const tmpRecord = {IDAnimal:4, Type:'Corgi', Name:'Doofer', CreatingIDUser:10};
+						libSuperTest('http://localhost:9081/')
+						.post('1.0/FableTest/Schema/Validate')
+						.set('x-trusted-session', JSON.stringify(_MockSessionValidUser))
+						.send(tmpRecord)
+						.end(
+							function(pError, pResponse)
+							{
+								// Expect response to be the record we just created.
+								const tmpResult = JSON.parse(pResponse.text);
+								//console.log(JSON.stringify(tmpResult, null, 4))
+								Expect(tmpResult.Valid).to.equal(true);
+								fDone();
+							}
+						);
+					}
+				);
+				test
+				(
+					'validate: validate bad data',
+					function(fDone)
+					{
+						const tmpRecord = 'IAMBAD';
+						libSuperTest('http://localhost:9081/')
+						.post('1.0/FableTest/Schema/Validate')
+						.set('x-trusted-session', JSON.stringify(_MockSessionValidUser))
+						.send(tmpRecord)
+						.end(
+							function(pError, pResponse)
+							{
+								// Expect response to be the record we just created.
+								const tmpResult = JSON.parse(pResponse.text);
+								//console.log(JSON.stringify(tmpResult, null, 4))
+								Expect(tmpResult.Valid).to.be.false;
+								fDone();
+							}
+						);
+					}
+				);
+			}
+		);
+		suite
+		(
+			'Unauthorized server routes',
+			function()
+			{
+				test
+				(
+					'read: get a specific record',
+					function(fDone)
+					{
+						_MockSessionValidUser.UserRoleIndex = -1;
+						libSuperTest('http://localhost:9081/')
+						.get('1.0/FableTest/2')
+						.set('x-trusted-session', JSON.stringify(_MockSessionValidUser))
+						.end(
+							function (pError, pResponse)
+							{
+								const tmpResult = JSON.parse(pResponse.text);
+								Expect(tmpResult.Error).to.contain('You must be appropriately authenticated');
+								_MockSessionValidUser.UserRoleIndex = 1;
+								fDone();
+							}
+						);
+					}
+				);
+			}
+		);
+		suite
+		(
+			'Bad user server routes',
+			function()
+			{
+				test
+				(
+					'create: create a record',
+					function(fDone)
+					{
+						_MockSessionValidUser.UserID = 0;
+						const tmpRecord = {Name:'BatBrains', Type:'Mammoth'};
+						libSuperTest('http://localhost:9081/')
+						.post('1.0/FableTest')
+						.set('x-trusted-session', JSON.stringify(_MockSessionValidUser))
+						.send(tmpRecord)
+						.end(
+							function(pError, pResponse)
+							{
+								// Expect response to be the record we just created.
+								const tmpResult = JSON.parse(pResponse.text);
+								Expect(tmpResult.Error).to.contain('authenticated');
+								fDone();
+							}
+						);
+					}
+				);
+				test
+				(
+					'read: get a specific record',
+					function(fDone)
+					{
+						libSuperTest('http://localhost:9081/')
+						.get('1.0/FableTest/2')
+						.set('x-trusted-session', JSON.stringify(_MockSessionValidUser))
+						.end(
+							function (pError, pResponse)
+							{
+								const tmpResult = JSON.parse(pResponse.text);
+								Expect(tmpResult.Error).to.contain('authenticated');
+								fDone();
+							}
+						);
+					}
+				);
+				test
+				(
+					'readselect: get all records',
+					function(fDone)
+					{
+						libSuperTest('http://localhost:9081/')
+						.get('1.0/FableTestSelect')
+						.set('x-trusted-session', JSON.stringify(_MockSessionValidUser))
+						.end(
+							function (pError, pResponse)
+							{
+								console.log(pResponse.text)
+								const tmpResults = JSON.parse(pResponse.text);
+								Expect(tmpResults.Error).to.contain('authenticated');
+								fDone();
+							}
+						);
+					}
+				);
+				test
+				(
+					'update: update a record',
+					function(fDone)
+					{
+						// Change animal 4 ("Spot") to a Corgi
+						const tmpRecord = {IDAnimal:4, Type:'Corgi'};
+						libSuperTest('http://localhost:9081/')
+						.put('1.0/FableTest')
+						.set('x-trusted-session', JSON.stringify(_MockSessionValidUser))
+						.send(tmpRecord)
+						.end(
+							function(pError, pResponse)
+							{
+								// Expect response to be the record we just created.
+								const tmpResult = JSON.parse(pResponse.text);
+								Expect(tmpResult.Error).to.contain('authenticated');
+								fDone();
+							}
+						);
+					}
+				);
+				test
+				(
+					'schema: get the schema of a record',
+					function(fDone)
+					{
+						libSuperTest('http://localhost:9081/')
+						.get('1.0/FableTest/Schema')
+						.set('x-trusted-session', JSON.stringify(_MockSessionValidUser))
+						.end(
+							function (pError, pResponse)
+							{
+								const tmpResults = JSON.parse(pResponse.text);
+								//console.log('SCHEMA --> '+JSON.stringify(tmpResults, null, 4))
+								Expect(tmpResults.Error).to.contain('authenticated');
+								fDone();
+							}
+						);
+					}
+				);
+				test
+				(
+					'new: get a new empty record',
+					function(fDone)
+					{
+						libSuperTest('http://localhost:9081/')
+						.get('1.0/FableTest/Schema/New')
+						.set('x-trusted-session', JSON.stringify(_MockSessionValidUser))
+						.end(
+							function (pError, pResponse)
+							{
+								const tmpResults = JSON.parse(pResponse.text);
+								//console.log(JSON.stringify(tmpResults, null, 4))
+								Expect(tmpResults.Error).to.contain('authenticated');
+								fDone();
+							}
+						);
+					}
+				);
+				test
+				(
+					'validate: validate an invalid record',
+					function(fDone)
+					{
+						const tmpRecord = {IDAnimal:4, Type:'Corgi'};
+						libSuperTest('http://localhost:9081/')
+						.post('1.0/FableTest/Schema/Validate')
+						.set('x-trusted-session', JSON.stringify(_MockSessionValidUser))
+						.send(tmpRecord)
+						.end(
+							function(pError, pResponse)
+							{
+								// Expect response to be the record we just created.
+								const tmpResult = JSON.parse(pResponse.text);
+								//console.log(JSON.stringify(tmpResult, null, 4))
+								Expect(tmpResult.Error).to.contain('authenticated');
+								fDone();
+
+							}
+						);
+					}
+				);
+				test
+				(
+					'count: get the count of records',
+					function(fDone)
+					{
+						libSuperTest('http://localhost:9081/')
+						.get('1.0/FableTests/Count')
+						.set('x-trusted-session', JSON.stringify(_MockSessionValidUser))
+						.end(
+							function (pError, pResponse)
+							{
+								const tmpResult = JSON.parse(pResponse.text);
+								Expect(tmpResult.Error).to.contain('authenticated');
+								fDone();
+							}
+						);
+					}
+				);
+				test
+				(
+					'delete: delete a record',
+					function(fDone)
+					{
+						// Delete animal 3 ("Red")
+						const tmpRecord = {IDAnimal:3};
+						libSuperTest('http://localhost:9081/')
+						.del('1.0/FableTest')
+						.set('x-trusted-session', JSON.stringify(_MockSessionValidUser))
+						.send(tmpRecord)
+						.end(
+							function(pError, pResponse)
+							{
+								// Expect response to be the count of deleted records.
+								const tmpResult = JSON.parse(pResponse.text);
+								Expect(tmpResult.Error).to.contain('authenticated');
+								_MockSessionValidUser.UserID = 10;
+								fDone();
+							}
+						);
+					}
+				);
+			}
+		);
+		suite
+		(
+			'Not logged in server routes',
+			function()
+			{
+				test
+				(
+					'read: get a specific record',
+					function(fDone)
+					{
+						_MockSessionValidUser.LoggedIn = false;
+						libSuperTest('http://localhost:9081/')
+						.get('1.0/FableTest/2')
+						.set('x-trusted-session', JSON.stringify(_MockSessionValidUser))
+						.end(
+							function (pError, pResponse)
+							{
+								const tmpResult = JSON.parse(pResponse.text);
+								Expect(tmpResult.Error).to.contain('You must be authenticated');
+								_MockSessionValidUser.LoggedIn = true;
+								fDone();
+							}
+						);
+					}
+				);
+			}
+		);
+		suite
+		(
+			'Filter parser',
+			function()
+			{
+				test
+				(
+					'Filter parse',
+					function(fDone)
+					{
+						const tmpQuery = _MeadowEndpoints.DAL.query;
+						_MeadowEndpoints.parseFilter('FBV~UUIDAnimal~EQ~1000000', tmpQuery);
+						Expect(tmpQuery.parameters.filter[0].Column).to.equal('UUIDAnimal');
+						fDone();
+					}
+				);
+			}
+		);
+		suite
+		(
+			'Changing route requirement',
+			function()
+			{
+				test
+				(
+					'read: get a specific record',
+					function(fDone)
+					{
+						Expect(_MeadowEndpoints.endpointAuthorizationLevels.Read).to.equal(0);
+						fDone();
+					}
+				);
+			}
+		);
+		suite
+		(
+			'Behavior modifications',
+			function()
+			{
+				test
+				(
+					'read: modified get of a specific record',
+					function(fDone)
+					{
+						// Override the query configuration
+						_MeadowEndpoints.behaviorModifications.setBehavior('Read-QueryConfiguration', [
+							function(pRequest, fComplete)
+							{
+								//implicitly test behvaior-cascade
+								return fComplete(false);
+							},
+							function(pRequest, fComplete)
+							{
+								// Turn up logging on the request.
+								pRequest.Query.setLogLevel(5);
+								fComplete(false);
+							} ]);
+						libSuperTest('http://localhost:9081/')
+						.get('1.0/FableTest/2')
+						.set('x-trusted-session', JSON.stringify(_MockSessionValidUser))
+						.end(
+							function (pError, pResponse)
+							{
+								const tmpResult = JSON.parse(pResponse.text);
+								//console.log(JSON.stringify(tmpResult, null, 4))
+								Expect(tmpResult.Name).to.equal('Red Riding Hood');
+								fDone();
+							}
+						);
+					}
+				);
+				test
+				(
+					'read: inject data into the record',
+					function(fDone)
+					{
+						// Override the query configuration
+						_MeadowEndpoints.behaviorModifications.setBehavior('Read-PostOperation',
+							function(pRequest, fComplete)
+							{
+								// Create a custom property on the record.
+								pRequest.Record.CustomProperty = 'Custom '+pRequest.Record.Type+' ID '+pRequest.Record.IDAnimal;
+								fComplete(false);
+							});
+						_MockSessionValidUser.LoggedIn = true;
+						libSuperTest('http://localhost:9081/')
+						.get('1.0/FableTest/2')
+						.set('x-trusted-session', JSON.stringify(_MockSessionValidUser))
+						.end(
+							function (pError, pResponse)
+							{
+								const tmpResult = JSON.parse(pResponse.text);
+								//console.log(JSON.stringify(tmpResult, null, 4))
+								Expect(tmpResult.CustomProperty).to.equal('Custom Girl ID 2');
+								fDone();
+							}
+						);
+					}
+				);
+				test
+				(
+					'read-max: get the max record ID',
+					function(fDone)
+					{
+						libSuperTest('http://localhost:9081/')
+						.get('1.0/FableTest/Max/IDAnimal')
+						.set('x-trusted-session', JSON.stringify(_MockSessionValidUser))
+						.end(
+							function (pError, pResponse)
+							{
+								const tmpResult = JSON.parse(pResponse.text);
+								Expect(tmpResult.IDAnimal).to.equal(6);
+								fDone();
+							}
+						);
+					}
+				);
+				test
+				(
+					'read-max: get the max name',
+					function(fDone)
+					{
+						libSuperTest('http://localhost:9081/')
+						.get('1.0/FableTest/Max/Name')
+						.set('x-trusted-session', JSON.stringify(_MockSessionValidUser))
+						.end(
+							function (pError, pResponse)
+							{
+								const tmpResult = JSON.parse(pResponse.text);
+								Expect(tmpResult.Name).to.equal('Spot');
+								fDone();
+							}
+						);
+					}
+				);
+			}
+		);
+
+		suite
+		(
+			'Endpoint Security - Deny',
+			function()
+			{
+				test
+				(
+					'bulk creates',
+					function(fDone)
+					{
+						const tmpRecords = [
+							{Name:'Billy', Type:'Cat'},
+							{Name:'Jim', Type:'Cat'},
+							{Name:'Janet', Type:'Cat'},
+							{Name:'Sweeps', Type:'Cat'},
+							{Name:'Stakes', Type:'Dog'},
+							{Name:'Sally', Type:'Dog'},
+							{Name:'Bill', Type:'Dog'},
+							{Name:'Chris', Type:'Dog'},
+							{Name:'Haji', Type:'Snake'}
+						];
+						_MockSessionValidUser.UserRoleIndex = 2;
+						libSuperTest('http://localhost:9081/')
+						.post('1.0/FableTests')
+						.set('x-trusted-session', JSON.stringify(_MockSessionValidUser))
+						.send(tmpRecords)
+						.end(
+							function(pError, pResponse)
+							{
+								// Expect response to be the record we just created.
+								const tmpResult = JSON.parse(pResponse.text);
+								//console.log(JSON.stringify(tmpResult,null,4));
+								Expect(tmpResult[0].Name).to.equal('Billy');
+								Expect(tmpResult[5].Type).to.equal('Dog');
+								fDone();
+							}
+						);
+					}
+				);
+				test
+				(
+					'bulk create with a bad record',
+					function(fDone)
+					{
+						const tmpRecords = [
+							{Name:'Astro', Type:'Cartoon'},
+							{Name:'Boy', Type:'Cartoon'},
+							{License:'Whoops', Type:'Cat'},
+							{Name:'Froggy', Type:'Cartoon'}
+						];
+						_MockSessionValidUser.UserRoleIndex = 2;
+						libSuperTest('http://localhost:9081/')
+						.post('1.0/FableTests')
+						.set('x-trusted-session', JSON.stringify(_MockSessionValidUser))
+						.send(tmpRecords)
+						.end(
+							function(pError, pResponse)
+							{
+								// Expect response to be the record we just created.
+								const tmpResult = JSON.parse(pResponse.text);
+								Expect(tmpResult[0].Type).to.equal('Cartoon');
+								fDone();
+							}
+						);
+					}
+				);
+				test
+				(
+					'bulk updates',
+					function(fDone)
+					{
+						const tmpRecords = [
+							{IDAnimal: 11, Type:'Hoss'},
+							{IDAnimal: 12, Type:'Hoss'},
+							{IDAnimal: 14, Type:'Hoss'},
+							{IDAnimal: 15, Type:'Hoss'}
+						];
+						_MockSessionValidUser.UserRoleIndex = 2;
+						libSuperTest('http://localhost:9081/')
+						.put('1.0/FableTests')
+						.set('x-trusted-session', JSON.stringify(_MockSessionValidUser))
+						.send(tmpRecords)
+						.end(
+							function(pError, pResponse)
+							{
+								// Expect response to be the record we just created.
+								const tmpResult = JSON.parse(pResponse.text);
+								//console.log(JSON.stringify(tmpResult,null,4));
+								Expect(tmpResult[0].IDAnimal).to.equal(11);
+								Expect(tmpResult[0].Type).to.equal('Hoss');
+								Expect(tmpResult[1].Type).to.equal('Hoss');
+								Expect(tmpResult[2].Type).to.equal('Hoss');
+								Expect(tmpResult[3].Type).to.equal('Hoss');
+								fDone();
+							}
+						);
+					}
+				);
+				test
+				(
+					'bulk updates with bad record',
+					function(fDone)
+					{
+						const tmpRecords = [
+							{IDAnimal: 11, Type:'Horsse'},
+							{IDAnimal: 12, Type:'Horsse'},
+							{IDAnimal: 14, Genus:'Hosse'},
+							{IDAnimal: 15, Type:'Hosses'}
+						];
+						_MockSessionValidUser.UserRoleIndex = 2;
+						libSuperTest('http://localhost:9081/')
+						.put('1.0/FableTests')
+						.set('x-trusted-session', JSON.stringify(_MockSessionValidUser))
+						.send(tmpRecords)
+						.end(
+							function(pError, pResponse)
+							{
+								// Expect response to be the record we just created.
+								const tmpResult = JSON.parse(pResponse.text);
+								//console.log(JSON.stringify(tmpResult,null,4));
+								Expect(tmpResult[3].Type).to.equal('Hosses');
+								fDone();
+							}
+						);
+					}
+				);
+				test
+				(
+					'upsert: create a record',
+					function(fDone)
+					{
+						const tmpRecord = {GUIDAnimal:'0xHAXXXX', Name:'Jason', Type:'Tyranosaurus'};
+						_MockSessionValidUser.UserRoleIndex = 2;
+						libSuperTest('http://localhost:9081/')
+						.put('1.0/FableTest/Upsert')
+						.set('x-trusted-session', JSON.stringify(_MockSessionValidUser))
+						.send(tmpRecord)
+						.end(
+							function(pError, pResponse)
+							{
+								// Expect response to be the record we just created.
+								//console.log(pResponse.text)
+								const tmpResult = JSON.parse(pResponse.text);
+								Expect(tmpResult.Type).to.equal('Tyranosaurus');
+								Expect(tmpResult.CreatingIDUser).to.equal(10);
+								fDone();
+							}
+						);
+					}
+				);
+				test
+				(
+					'upsert: Update a record',
+					function(fDone)
+					{
+						const tmpRecord = {GUIDAnimal:'0xHAXXXX', Type:'Stegosaurus'};
+						_MockSessionValidUser.UserRoleIndex = 2;
+						libSuperTest('http://localhost:9081/')
+						.put('1.0/FableTest/Upsert')
+						.set('x-trusted-session', JSON.stringify(_MockSessionValidUser))
+						.send(tmpRecord)
+						.end(
+							function(pError, pResponse)
+							{
+								// Expect response to be the record we just created.
+								console.log(pResponse.text)
+								const tmpResult = JSON.parse(pResponse.text);
+								Expect(tmpResult.Type).to.equal('Stegosaurus');
+								Expect(tmpResult.Name).to.equal('Jason');
+								fDone();
+							}
+						);
+					}
+				);
+				test
+				(
+					'bulk upserts',
+					function(fDone)
+					{
+						_MeadowEndpoints.behaviorModifications.setTemplate('SelectList', '<%= Record.Name %>|<%=Record.Type%>');
+						const tmpRecords = [
+							{GUIDAnimal:'0xHAXXXX', Type:'Triceratops'},
+							{GUIDAnimal:'0xDavison', Name:'Davison', Type:'Dog'},
+							{GUIDAnimal:'0xMartino', Name:'Martin', Type:'Dog'},
+							{Name:'Chino', Type:'Cat'}
+						];
+						_MockSessionValidUser.UserRoleIndex = 2;
+						libSuperTest('http://localhost:9081/')
+						.put('1.0/FableTest/Upserts')
+						.set('x-trusted-session', JSON.stringify(_MockSessionValidUser))
+						.send(tmpRecords)
+						.end(
+							function(pError, pResponse)
+							{
+								// Expect response to be the record we just created.
+								const tmpResult = JSON.parse(pResponse.text);
+								console.log(JSON.stringify(tmpResult,null,4));
+								Expect(tmpResult[0].Value).to.equal('Jason|Triceratops');
+								Expect(tmpResult[1].Value).to.equal('Davison|Dog');
+								Expect(tmpResult[2].Value).to.equal('Martin|Dog');
+								Expect(tmpResult[3].Value).to.equal('Chino|Cat');
+								fDone();
+							}
+						);
+					}
+				);
+			}
+		);
+	}
+);