ING-1187: Return appropriate status for bad credentials

Westwooo · Westwooo · commit 319016e090ce · 2025-11-03T09:51:48.000Z
diff --git a/gateway/dataimpl/server_v1/errorhandler.go b/gateway/dataimpl/server_v1/errorhandler.go
@@ -529,6 +529,29 @@ func (e ErrorHandler) NewSearchSourceNotFoundStatus(baseErr error, indexName str
 	return st
 }
 
+func (e ErrorHandler) NewSearchIndexAuthenticationFailureStatus(baseErr error, bucketName, scopeName *string) *status.Status {
+	var path string
+	var resource string
+	if bucketName != nil {
+		path = *bucketName
+		resource = "bucket"
+		if scopeName != nil {
+			path = path + "/" + *scopeName
+			resource = "scope"
+		}
+	}
+
+	msg := fmt.Sprintf("Insufficient permissions to perform search index operation against %s.", path)
+	st := status.New(codes.PermissionDenied, msg)
+	st = e.tryAttachStatusDetails(st, &epb.ResourceInfo{
+		ResourceType: resource,
+		ResourceName: path,
+		Description:  "",
+	})
+	st = e.tryAttachExtraContext(st, baseErr)
+	return st
+}
+
 func (e ErrorHandler) NewDocMissingStatus(baseErr error, bucketName, scopeName, collectionName, docId string) *status.Status {
 	st := status.New(codes.NotFound,
 		fmt.Sprintf("Document '%s' not found in '%s/%s/%s'.",
diff --git a/gateway/dataimpl/server_v1/searchadminserver.go b/gateway/dataimpl/server_v1/searchadminserver.go
@@ -111,6 +111,8 @@ func (s *SearchIndexAdminServer) CreateIndex(ctx context.Context, in *admin_sear
 			return nil, s.errorHandler.NewIncorrectSearchSourceTypeStatus(err, in.Name, in.SourceType).Err()
 		} else if errors.Is(err, cbsearchx.ErrSourceNotFound) {
 			return nil, s.errorHandler.NewSearchSourceNotFoundStatus(err, in.Name, in.SourceName).Err()
+		} else if errors.Is(err, cbsearchx.ErrAuthenticationFailure) {
+			return nil, s.errorHandler.NewSearchIndexAuthenticationFailureStatus(err, in.BucketName, in.ScopeName).Err()
 		}
 		return nil, s.errorHandler.NewGenericStatus(err).Err()
 	}
@@ -217,6 +219,8 @@ func (s *SearchIndexAdminServer) UpdateIndex(ctx context.Context, in *admin_sear
 			return nil, s.errorHandler.NewIncorrectSearchSourceTypeStatus(err, in.Index.Name, in.Index.SourceType).Err()
 		} else if errors.Is(err, cbsearchx.ErrSourceNotFound) {
 			return nil, s.errorHandler.NewSearchSourceNotFoundStatus(err, in.Index.Name, in.Index.SourceName).Err()
+		} else if errors.Is(err, cbsearchx.ErrAuthenticationFailure) {
+			return nil, s.errorHandler.NewSearchIndexAuthenticationFailureStatus(err, in.BucketName, in.ScopeName).Err()
 		}
 		return nil, s.errorHandler.NewGenericStatus(err).Err()
 	}
@@ -264,6 +268,8 @@ func (s *SearchIndexAdminServer) DeleteIndex(ctx context.Context, in *admin_sear
 			return nil, s.errorHandler.NewSearchIndexNameEmptyStatus(err).Err()
 		} else if errors.Is(err, cbsearchx.ErrOnlyBucketOrScopeSet) {
 			return nil, s.errorHandler.NewOnlyBucketOrScopeSetStatus(err, in.Name).Err()
+		} else if errors.Is(err, cbsearchx.ErrAuthenticationFailure) {
+			return nil, s.errorHandler.NewSearchIndexAuthenticationFailureStatus(err, in.BucketName, in.ScopeName).Err()
 		}
 		return nil, s.errorHandler.NewGenericStatus(err).Err()
 	}
@@ -311,6 +317,8 @@ func (s *SearchIndexAdminServer) GetIndex(ctx context.Context, in *admin_search_
 			return nil, s.errorHandler.NewSearchIndexNameEmptyStatus(err).Err()
 		} else if errors.Is(err, cbsearchx.ErrOnlyBucketOrScopeSet) {
 			return nil, s.errorHandler.NewOnlyBucketOrScopeSetStatus(err, in.Name).Err()
+		} else if errors.Is(err, cbsearchx.ErrAuthenticationFailure) {
+			return nil, s.errorHandler.NewSearchIndexAuthenticationFailureStatus(err, in.BucketName, in.ScopeName).Err()
 		}
 		return nil, s.errorHandler.NewGenericStatus(err).Err()
 	}
@@ -346,6 +354,8 @@ func (s *SearchIndexAdminServer) ListIndexes(ctx context.Context, in *admin_sear
 			return nil, s.errorHandler.NewSearchServiceNotAvailableStatus(err, "").Err()
 		} else if errors.Is(err, cbsearchx.ErrOnlyBucketOrScopeSet) {
 			return nil, s.errorHandler.NewOnlyBucketOrScopeSetStatus(err, "").Err()
+		} else if errors.Is(err, cbsearchx.ErrAuthenticationFailure) {
+			return nil, s.errorHandler.NewSearchIndexAuthenticationFailureStatus(err, in.BucketName, in.ScopeName).Err()
 		}
 		return nil, s.errorHandler.NewGenericStatus(err).Err()
 	}
@@ -393,6 +403,8 @@ func (s *SearchIndexAdminServer) AnalyzeDocument(ctx context.Context, in *admin_
 			return nil, s.errorHandler.NewOnlyBucketOrScopeSetStatus(err, in.Name).Err()
 		} else if errors.Is(err, cbsearchx.ErrNoIndexPartitionsFound) {
 			return nil, s.errorHandler.NewSearchIndexNotReadyStatus(err, in.Name).Err()
+		} else if errors.Is(err, cbsearchx.ErrAuthenticationFailure) {
+			return nil, s.errorHandler.NewSearchIndexAuthenticationFailureStatus(err, in.BucketName, in.ScopeName).Err()
 		}
 		return nil, s.errorHandler.NewGenericStatus(err).Err()
 	}
@@ -432,6 +444,8 @@ func (s *SearchIndexAdminServer) GetIndexedDocumentsCount(ctx context.Context, i
 			return nil, s.errorHandler.NewSearchIndexNameEmptyStatus(err).Err()
 		} else if errors.Is(err, cbsearchx.ErrOnlyBucketOrScopeSet) {
 			return nil, s.errorHandler.NewOnlyBucketOrScopeSetStatus(err, in.Name).Err()
+		} else if errors.Is(err, cbsearchx.ErrAuthenticationFailure) {
+			return nil, s.errorHandler.NewSearchIndexAuthenticationFailureStatus(err, in.BucketName, in.ScopeName).Err()
 		}
 		return nil, s.errorHandler.NewGenericStatus(err).Err()
 	}
@@ -470,6 +484,8 @@ func (s *SearchIndexAdminServer) PauseIndexIngest(ctx context.Context, in *admin
 			return nil, s.errorHandler.NewSearchIndexNameEmptyStatus(err).Err()
 		} else if errors.Is(err, cbsearchx.ErrOnlyBucketOrScopeSet) {
 			return nil, s.errorHandler.NewOnlyBucketOrScopeSetStatus(err, in.Name).Err()
+		} else if errors.Is(err, cbsearchx.ErrAuthenticationFailure) {
+			return nil, s.errorHandler.NewSearchIndexAuthenticationFailureStatus(err, in.BucketName, in.ScopeName).Err()
 		}
 		return nil, s.errorHandler.NewGenericStatus(err).Err()
 	}
@@ -506,6 +522,8 @@ func (s *SearchIndexAdminServer) ResumeIndexIngest(ctx context.Context, in *admi
 			return nil, s.errorHandler.NewSearchIndexNameEmptyStatus(err).Err()
 		} else if errors.Is(err, cbsearchx.ErrOnlyBucketOrScopeSet) {
 			return nil, s.errorHandler.NewOnlyBucketOrScopeSetStatus(err, in.Name).Err()
+		} else if errors.Is(err, cbsearchx.ErrAuthenticationFailure) {
+			return nil, s.errorHandler.NewSearchIndexAuthenticationFailureStatus(err, in.BucketName, in.ScopeName).Err()
 		}
 		return nil, s.errorHandler.NewGenericStatus(err).Err()
 	}
@@ -542,6 +560,8 @@ func (s *SearchIndexAdminServer) AllowIndexQuerying(ctx context.Context, in *adm
 			return nil, s.errorHandler.NewSearchIndexNameEmptyStatus(err).Err()
 		} else if errors.Is(err, cbsearchx.ErrOnlyBucketOrScopeSet) {
 			return nil, s.errorHandler.NewOnlyBucketOrScopeSetStatus(err, in.Name).Err()
+		} else if errors.Is(err, cbsearchx.ErrAuthenticationFailure) {
+			return nil, s.errorHandler.NewSearchIndexAuthenticationFailureStatus(err, in.BucketName, in.ScopeName).Err()
 		}
 		return nil, s.errorHandler.NewGenericStatus(err).Err()
 	}
@@ -578,6 +598,8 @@ func (s *SearchIndexAdminServer) DisallowIndexQuerying(ctx context.Context, in *
 			return nil, s.errorHandler.NewSearchIndexNameEmptyStatus(err).Err()
 		} else if errors.Is(err, cbsearchx.ErrOnlyBucketOrScopeSet) {
 			return nil, s.errorHandler.NewOnlyBucketOrScopeSetStatus(err, in.Name).Err()
+		} else if errors.Is(err, cbsearchx.ErrAuthenticationFailure) {
+			return nil, s.errorHandler.NewSearchIndexAuthenticationFailureStatus(err, in.BucketName, in.ScopeName).Err()
 		}
 		return nil, s.errorHandler.NewGenericStatus(err).Err()
 	}
@@ -614,6 +636,8 @@ func (s *SearchIndexAdminServer) FreezeIndexPlan(ctx context.Context, in *admin_
 			return nil, s.errorHandler.NewSearchIndexNameEmptyStatus(err).Err()
 		} else if errors.Is(err, cbsearchx.ErrOnlyBucketOrScopeSet) {
 			return nil, s.errorHandler.NewOnlyBucketOrScopeSetStatus(err, in.Name).Err()
+		} else if errors.Is(err, cbsearchx.ErrAuthenticationFailure) {
+			return nil, s.errorHandler.NewSearchIndexAuthenticationFailureStatus(err, in.BucketName, in.ScopeName).Err()
 		}
 		return nil, s.errorHandler.NewGenericStatus(err).Err()
 	}
@@ -650,6 +674,8 @@ func (s *SearchIndexAdminServer) UnfreezeIndexPlan(ctx context.Context, in *admi
 			return nil, s.errorHandler.NewSearchIndexNameEmptyStatus(err).Err()
 		} else if errors.Is(err, cbsearchx.ErrOnlyBucketOrScopeSet) {
 			return nil, s.errorHandler.NewOnlyBucketOrScopeSetStatus(err, in.Name).Err()
+		} else if errors.Is(err, cbsearchx.ErrAuthenticationFailure) {
+			return nil, s.errorHandler.NewSearchIndexAuthenticationFailureStatus(err, in.BucketName, in.ScopeName).Err()
 		}
 		return nil, s.errorHandler.NewGenericStatus(err).Err()
 	}
diff --git a/gateway/test/search_mgmt_test.go b/gateway/test/search_mgmt_test.go
@@ -29,7 +29,7 @@ func (s *GatewayOpsTestSuite) RunCommonIndexErrorCases(
 	indexName string,
 	fn func(ctx context.Context, opts *commonIndexErrorTestData) (interface{}, error),
 ) {
-	_, scope := s.initialiseBucketAndScope()
+	bucket, scope := s.initialiseBucketAndScope()
 
 	s.Run("BucketNotFound", func() {
 		_, err := fn(ctx, &commonIndexErrorTestData{
@@ -57,19 +57,18 @@ func (s *GatewayOpsTestSuite) RunCommonIndexErrorCases(
 		})
 	})
 
-	// TODO - ING-1187
-	// s.Run("BadCredentials", func() {
-	// 	_, err := fn(ctx, &commonIndexErrorTestData{
-	// 		IndexName:  indexName,
-	// 		BucketName: bucket,
-	// 		ScopeName:  scope,
-	// 		Creds:      s.badRpcCreds,
-	// 	})
-	// 	assertRpcStatus(s.T(), err, codes.Unauthenticated)
-	// 	assertRpcErrorDetails(s.T(), err, func(d *epb.ResourceInfo) {
-	// 		assert.Equal(s.T(), "searchindex", d.ResourceType)
-	// 	})
-	// })
+	s.Run("BadCredentials", func() {
+		_, err := fn(ctx, &commonIndexErrorTestData{
+			IndexName:  indexName,
+			BucketName: bucket,
+			ScopeName:  scope,
+			Creds:      s.badRpcCreds,
+		})
+		assertRpcStatus(s.T(), err, codes.PermissionDenied)
+		assertRpcErrorDetails(s.T(), err, func(d *epb.ResourceInfo) {
+			assert.Equal(s.T(), "", d.ResourceType)
+		})
+	})
 }
 
 func (s *GatewayOpsTestSuite) TestGetIndex() {
diff --git a/go.mod b/go.mod
@@ -10,7 +10,7 @@ require (
 	github.com/Azure/azure-sdk-for-go/sdk/keyvault/azsecrets v0.12.0
 	github.com/aws/aws-sdk-go-v2/config v1.28.8
 	github.com/aws/aws-sdk-go-v2/service/secretsmanager v1.34.9
-	github.com/couchbase/gocbcorex v0.0.0-20251022095750-491da08faa75
+	github.com/couchbase/gocbcorex v0.0.0-20251103090415-9c1017f074ad
 	github.com/couchbase/goprotostellar v1.0.3-0.20250811181441-159acea69746
 	github.com/couchbaselabs/gocbconnstr v1.0.5
 	github.com/couchbaselabs/gocbconnstr/v2 v2.0.0-20240607131231-fb385523de28
diff --git a/go.sum b/go.sum
@@ -67,8 +67,8 @@ github.com/cespare/xxhash/v2 v2.3.0/go.mod h1:VGX0DQ3Q6kWi7AoAeZDth3/j3BFtOZR5XL
 github.com/chzyer/logex v1.1.10/go.mod h1:+Ywpsq7O8HXn0nuIou7OrIPyXbp3wmkHB+jjWRnGsAI=
 github.com/chzyer/readline v0.0.0-20180603132655-2972be24d48e/go.mod h1:nSuG5e5PlCu98SY8svDHJxuZscDgtXS6KTTbou5AhLI=
 github.com/chzyer/test v0.0.0-20180213035817-a1ea475d72b1/go.mod h1:Q3SI9o4m/ZMnBNeIyt5eFwwo7qiLfzFZmjNmxjkiQlU=
-github.com/couchbase/gocbcorex v0.0.0-20251022095750-491da08faa75 h1:H53znXKq5qgA0SLMgF5XuV0sHGQQ0wrmjJ1Cz7vxgEU=
-github.com/couchbase/gocbcorex v0.0.0-20251022095750-491da08faa75/go.mod h1:6dno13KSKXpYALSx1KkYNHCwIQiuZdfL1xc3dDcYl1o=
+github.com/couchbase/gocbcorex v0.0.0-20251103090415-9c1017f074ad h1:73Mp0a/Psf3CMKllTBXpXA6XMkLrwXy20EkNBqWL1uo=
+github.com/couchbase/gocbcorex v0.0.0-20251103090415-9c1017f074ad/go.mod h1:6dno13KSKXpYALSx1KkYNHCwIQiuZdfL1xc3dDcYl1o=
 github.com/couchbase/goprotostellar v1.0.3-0.20250811181441-159acea69746 h1:kibnwIhBQ50egj2wCX3cd+MtwPXKre4DTDnXuoXQCGQ=
 github.com/couchbase/goprotostellar v1.0.3-0.20250811181441-159acea69746/go.mod h1:x/he3raYF/EspPXAfuVsBdLFNEYUxgFhlicJTRduPZ4=
 github.com/couchbaselabs/gocbconnstr v1.0.5 h1:e0JokB5qbcz7rfnxEhNRTKz8q1svoRvDoZihsiwNigA=

Original file line number	Diff line number	Diff line change
`@@ -111,6 +111,8 @@ func (s SearchIndexAdminServer) CreateIndex(ctx context.Context, in admin_sear`
`111`	`111`	`return nil, s.errorHandler.NewIncorrectSearchSourceTypeStatus(err, in.Name, in.SourceType).Err()`
`112`	`112`	`} else if errors.Is(err, cbsearchx.ErrSourceNotFound) {`
`113`	`113`	`return nil, s.errorHandler.NewSearchSourceNotFoundStatus(err, in.Name, in.SourceName).Err()`
	`114`	`+ } else if errors.Is(err, cbsearchx.ErrAuthenticationFailure) {`
	`115`	`+ return nil, s.errorHandler.NewSearchIndexAuthenticationFailureStatus(err, in.BucketName, in.ScopeName).Err()`
`114`	`116`	`}`
`115`	`117`	`return nil, s.errorHandler.NewGenericStatus(err).Err()`
`116`	`118`	`}`
`@@ -217,6 +219,8 @@ func (s SearchIndexAdminServer) UpdateIndex(ctx context.Context, in admin_sear`
`217`	`219`	`return nil, s.errorHandler.NewIncorrectSearchSourceTypeStatus(err, in.Index.Name, in.Index.SourceType).Err()`
`218`	`220`	`} else if errors.Is(err, cbsearchx.ErrSourceNotFound) {`
`219`	`221`	`return nil, s.errorHandler.NewSearchSourceNotFoundStatus(err, in.Index.Name, in.Index.SourceName).Err()`
	`222`	`+ } else if errors.Is(err, cbsearchx.ErrAuthenticationFailure) {`
	`223`	`+ return nil, s.errorHandler.NewSearchIndexAuthenticationFailureStatus(err, in.BucketName, in.ScopeName).Err()`
`220`	`224`	`}`
`221`	`225`	`return nil, s.errorHandler.NewGenericStatus(err).Err()`
`222`	`226`	`}`
`@@ -264,6 +268,8 @@ func (s SearchIndexAdminServer) DeleteIndex(ctx context.Context, in admin_sear`
`264`	`268`	`return nil, s.errorHandler.NewSearchIndexNameEmptyStatus(err).Err()`
`265`	`269`	`} else if errors.Is(err, cbsearchx.ErrOnlyBucketOrScopeSet) {`
`266`	`270`	`return nil, s.errorHandler.NewOnlyBucketOrScopeSetStatus(err, in.Name).Err()`
	`271`	`+ } else if errors.Is(err, cbsearchx.ErrAuthenticationFailure) {`
	`272`	`+ return nil, s.errorHandler.NewSearchIndexAuthenticationFailureStatus(err, in.BucketName, in.ScopeName).Err()`
`267`	`273`	`}`
`268`	`274`	`return nil, s.errorHandler.NewGenericStatus(err).Err()`
`269`	`275`	`}`
`@@ -311,6 +317,8 @@ func (s SearchIndexAdminServer) GetIndex(ctx context.Context, in admin_search_`
`311`	`317`	`return nil, s.errorHandler.NewSearchIndexNameEmptyStatus(err).Err()`
`312`	`318`	`} else if errors.Is(err, cbsearchx.ErrOnlyBucketOrScopeSet) {`
`313`	`319`	`return nil, s.errorHandler.NewOnlyBucketOrScopeSetStatus(err, in.Name).Err()`
	`320`	`+ } else if errors.Is(err, cbsearchx.ErrAuthenticationFailure) {`
	`321`	`+ return nil, s.errorHandler.NewSearchIndexAuthenticationFailureStatus(err, in.BucketName, in.ScopeName).Err()`
`314`	`322`	`}`
`315`	`323`	`return nil, s.errorHandler.NewGenericStatus(err).Err()`
`316`	`324`	`}`
`@@ -346,6 +354,8 @@ func (s SearchIndexAdminServer) ListIndexes(ctx context.Context, in admin_sear`
`346`	`354`	`return nil, s.errorHandler.NewSearchServiceNotAvailableStatus(err, "").Err()`
`347`	`355`	`} else if errors.Is(err, cbsearchx.ErrOnlyBucketOrScopeSet) {`
`348`	`356`	`return nil, s.errorHandler.NewOnlyBucketOrScopeSetStatus(err, "").Err()`
	`357`	`+ } else if errors.Is(err, cbsearchx.ErrAuthenticationFailure) {`
	`358`	`+ return nil, s.errorHandler.NewSearchIndexAuthenticationFailureStatus(err, in.BucketName, in.ScopeName).Err()`
`349`	`359`	`}`
`350`	`360`	`return nil, s.errorHandler.NewGenericStatus(err).Err()`
`351`	`361`	`}`
`@@ -393,6 +403,8 @@ func (s SearchIndexAdminServer) AnalyzeDocument(ctx context.Context, in admin_`
`393`	`403`	`return nil, s.errorHandler.NewOnlyBucketOrScopeSetStatus(err, in.Name).Err()`
`394`	`404`	`} else if errors.Is(err, cbsearchx.ErrNoIndexPartitionsFound) {`
`395`	`405`	`return nil, s.errorHandler.NewSearchIndexNotReadyStatus(err, in.Name).Err()`
	`406`	`+ } else if errors.Is(err, cbsearchx.ErrAuthenticationFailure) {`
	`407`	`+ return nil, s.errorHandler.NewSearchIndexAuthenticationFailureStatus(err, in.BucketName, in.ScopeName).Err()`
`396`	`408`	`}`
`397`	`409`	`return nil, s.errorHandler.NewGenericStatus(err).Err()`
`398`	`410`	`}`
`@@ -432,6 +444,8 @@ func (s *SearchIndexAdminServer) GetIndexedDocumentsCount(ctx context.Context, i`
`432`	`444`	`return nil, s.errorHandler.NewSearchIndexNameEmptyStatus(err).Err()`
`433`	`445`	`} else if errors.Is(err, cbsearchx.ErrOnlyBucketOrScopeSet) {`
`434`	`446`	`return nil, s.errorHandler.NewOnlyBucketOrScopeSetStatus(err, in.Name).Err()`
	`447`	`+ } else if errors.Is(err, cbsearchx.ErrAuthenticationFailure) {`
	`448`	`+ return nil, s.errorHandler.NewSearchIndexAuthenticationFailureStatus(err, in.BucketName, in.ScopeName).Err()`
`435`	`449`	`}`
`436`	`450`	`return nil, s.errorHandler.NewGenericStatus(err).Err()`
`437`	`451`	`}`
`@@ -470,6 +484,8 @@ func (s SearchIndexAdminServer) PauseIndexIngest(ctx context.Context, in admin`
`470`	`484`	`return nil, s.errorHandler.NewSearchIndexNameEmptyStatus(err).Err()`
`471`	`485`	`} else if errors.Is(err, cbsearchx.ErrOnlyBucketOrScopeSet) {`
`472`	`486`	`return nil, s.errorHandler.NewOnlyBucketOrScopeSetStatus(err, in.Name).Err()`
	`487`	`+ } else if errors.Is(err, cbsearchx.ErrAuthenticationFailure) {`
	`488`	`+ return nil, s.errorHandler.NewSearchIndexAuthenticationFailureStatus(err, in.BucketName, in.ScopeName).Err()`
`473`	`489`	`}`
`474`	`490`	`return nil, s.errorHandler.NewGenericStatus(err).Err()`
`475`	`491`	`}`
`@@ -506,6 +522,8 @@ func (s SearchIndexAdminServer) ResumeIndexIngest(ctx context.Context, in admi`
`506`	`522`	`return nil, s.errorHandler.NewSearchIndexNameEmptyStatus(err).Err()`
`507`	`523`	`} else if errors.Is(err, cbsearchx.ErrOnlyBucketOrScopeSet) {`
`508`	`524`	`return nil, s.errorHandler.NewOnlyBucketOrScopeSetStatus(err, in.Name).Err()`
	`525`	`+ } else if errors.Is(err, cbsearchx.ErrAuthenticationFailure) {`
	`526`	`+ return nil, s.errorHandler.NewSearchIndexAuthenticationFailureStatus(err, in.BucketName, in.ScopeName).Err()`
`509`	`527`	`}`
`510`	`528`	`return nil, s.errorHandler.NewGenericStatus(err).Err()`
`511`	`529`	`}`
`@@ -542,6 +560,8 @@ func (s SearchIndexAdminServer) AllowIndexQuerying(ctx context.Context, in adm`
`542`	`560`	`return nil, s.errorHandler.NewSearchIndexNameEmptyStatus(err).Err()`
`543`	`561`	`} else if errors.Is(err, cbsearchx.ErrOnlyBucketOrScopeSet) {`
`544`	`562`	`return nil, s.errorHandler.NewOnlyBucketOrScopeSetStatus(err, in.Name).Err()`
	`563`	`+ } else if errors.Is(err, cbsearchx.ErrAuthenticationFailure) {`
	`564`	`+ return nil, s.errorHandler.NewSearchIndexAuthenticationFailureStatus(err, in.BucketName, in.ScopeName).Err()`
`545`	`565`	`}`
`546`	`566`	`return nil, s.errorHandler.NewGenericStatus(err).Err()`
`547`	`567`	`}`
`@@ -578,6 +598,8 @@ func (s SearchIndexAdminServer) DisallowIndexQuerying(ctx context.Context, in `
`578`	`598`	`return nil, s.errorHandler.NewSearchIndexNameEmptyStatus(err).Err()`
`579`	`599`	`} else if errors.Is(err, cbsearchx.ErrOnlyBucketOrScopeSet) {`
`580`	`600`	`return nil, s.errorHandler.NewOnlyBucketOrScopeSetStatus(err, in.Name).Err()`
	`601`	`+ } else if errors.Is(err, cbsearchx.ErrAuthenticationFailure) {`
	`602`	`+ return nil, s.errorHandler.NewSearchIndexAuthenticationFailureStatus(err, in.BucketName, in.ScopeName).Err()`
`581`	`603`	`}`
`582`	`604`	`return nil, s.errorHandler.NewGenericStatus(err).Err()`
`583`	`605`	`}`
`@@ -614,6 +636,8 @@ func (s SearchIndexAdminServer) FreezeIndexPlan(ctx context.Context, in admin_`
`614`	`636`	`return nil, s.errorHandler.NewSearchIndexNameEmptyStatus(err).Err()`
`615`	`637`	`} else if errors.Is(err, cbsearchx.ErrOnlyBucketOrScopeSet) {`
`616`	`638`	`return nil, s.errorHandler.NewOnlyBucketOrScopeSetStatus(err, in.Name).Err()`
	`639`	`+ } else if errors.Is(err, cbsearchx.ErrAuthenticationFailure) {`
	`640`	`+ return nil, s.errorHandler.NewSearchIndexAuthenticationFailureStatus(err, in.BucketName, in.ScopeName).Err()`
`617`	`641`	`}`
`618`	`642`	`return nil, s.errorHandler.NewGenericStatus(err).Err()`
`619`	`643`	`}`
`@@ -650,6 +674,8 @@ func (s SearchIndexAdminServer) UnfreezeIndexPlan(ctx context.Context, in admi`
`650`	`674`	`return nil, s.errorHandler.NewSearchIndexNameEmptyStatus(err).Err()`
`651`	`675`	`} else if errors.Is(err, cbsearchx.ErrOnlyBucketOrScopeSet) {`
`652`	`676`	`return nil, s.errorHandler.NewOnlyBucketOrScopeSetStatus(err, in.Name).Err()`
	`677`	`+ } else if errors.Is(err, cbsearchx.ErrAuthenticationFailure) {`
	`678`	`+ return nil, s.errorHandler.NewSearchIndexAuthenticationFailureStatus(err, in.BucketName, in.ScopeName).Err()`
`653`	`679`	`}`
`654`	`680`	`return nil, s.errorHandler.NewGenericStatus(err).Err()`
`655`	`681`	`}`