rabbitmq.conf schema and tests for #13698

(cherry picked from commit 20188a7)

Author: michaelklishin

deps/rabbitmq_management/Makefile

@@ -15,7 +15,7 @@ define PROJECT_ENV
 	    {content_security_policy, "script-src 'self' 'unsafe-eval' 'unsafe-inline'; object-src 'self'"},
 	    {max_http_body_size, 10000000},
 	    {delegate_count, 5},
-	    {require_auth_for_api_desc_page, false}
+	    {require_auth_for_api_reference, false}
 	  ]
 endef
 

deps/rabbitmq_management/priv/schema/rabbitmq_management.schema

@@ -654,3 +654,10 @@ end}.
     {datatype, {enum, [true, false]}},
     {include_default, false}
 ]}.
+
+%% Require authentication for the HTTP API reference page.
+
+{mapping, "management.require_auth_for_api_reference", "rabbitmq_management.require_auth_for_api_reference", [
+    {datatype, {enum, [true, false]}},
+    {include_default, false}
+]}.

deps/rabbitmq_management/src/rabbit_mgmt_wm_static.erl

@@ -50,7 +50,7 @@ malformed_request(Req, State) ->
 
 is_authorized(Req0=#{path := Path}, State)
         when Path =:= <<"/api/index.html">>; Path =:= <<"/cli/index.html">> ->
-    case application:get_env(rabbitmq_management, require_auth_for_api_desc_page) of
+    case application:get_env(rabbitmq_management, require_auth_for_api_reference) of
         {ok, true} ->
             %% We temporarily use #context{} here to make authorization work,
             %% and discard it immediately after since we only want to check

deps/rabbitmq_management/test/config_schema_SUITE_data/rabbitmq_management.snippets

@@ -497,6 +497,48 @@
   ], [rabbitmq_management]
  },
 
+ %%
+ %% Restrictions
+ %%
+
+  {restrictions_quorum_queue_replica_operations_disabled_case1,
+   "management.restrictions.quorum_queue_replica_operations.disabled = true",
+   [
+    {rabbitmq_management, [
+                           {restrictions, [
+                                {quorum_queue_replica_operations, [
+                                    {disabled, true}
+                                ]}
+                           ]}
+                          ]}
+   ], [rabbitmq_management]
+  },
+
+  {restrictions_operator_policy_changes_disabled_case1,
+   "management.restrictions.operator_policy_changes.disabled = true",
+   [
+    {rabbitmq_management, [
+                           {restrictions, [
+                                {operator_policy_changes, [
+                                    {disabled, true}
+                                ]}
+                           ]}
+                          ]}
+   ], [rabbitmq_management]
+  },
+
+ %%
+ %% Exotic options
+ %%
+
+  {auth_for_http_api_reference_case1,
+   "management.require_auth_for_api_reference = true",
+   [
+    {rabbitmq_management, [
+                           {require_auth_for_api_reference, true}
+                          ]}
+   ], [rabbitmq_management]
+  },
 
  %%
  %% Legacy listener configuration