@Test
  public void getRegionKeys() {
    // Test an authorized user
    assertResponse(restClient.doGet("/" + REGION_NAME + "/keys", "data", "data"))
        .hasStatusCode(200).hasContentType(APPLICATION_JSON_UTF8_VALUE);
    // Test an unauthorized user
    assertResponse(restClient.doGet("/" + REGION_NAME + "/keys", "dataWrite", "dataWrite"))
        .hasStatusCode(403);
  }
Test permissions on getting a region's keys
geode-assembly/src/integrationTest/java/org/apache/geode/rest/internal/web/RestSecurityIntegrationTest.java