anchor.diff:             none % not passing auth data
             ]).
   
  +g_qs () ->
  +    ?LET(Filter,g_filter(),
  +         ?LET(Page,g_page(),
  +              Filter ++ Page)).
  +
   g_filter () ->
  -    oneof([{node,[{q,node()}]},
  -           {handoffs,[]},
  -           {fallbacks,[]},
  -           none]).
  +    oneof([oneof([[{filter,node}],
  +                  [{filter,node},{q,g_node()}],
  +                  [{q,g_node()}]
  +                 ]),
  +           [{filter,handoffs}],
  +           [{filter,fallbacks}],
  +           []
  +          ]).
  +
  +g_page () ->
  +    oneof([[{n,int()},{p,int()}],
  +           [{n,int()}],
  +           [{p,int()}],
  +           []
  +          ]).
  +
  +g_node () ->
  +    oneof([node(),'dummy@nohost']).
   
   
   %% ---------------------------------------------------------------------------
  
positive.code: %% ---------------------------------------------------------------------------
  %% negative testing common post-conditions
  
  http_validate (#state{auth=userlist},{C,_,_},{user,pass}) ->
      C < 300;
  http_validate (#state{auth=userlist},{C,_,_},_) ->
      C >= 300;
  http_validate (#state{auth=none},{C,_,_},_) ->
      C < 300.
  
  
  %% ---------------------------------------------------------------------------
  
negative.code:     {ok,_V,Ring}=riak_control_session:get_ring(),
      Ring.
  
  http_cluster_list (User) ->
      http_request(User,"/admin/cluster/list",[]).
  
  http_partition_list (User,Filter) ->
      http_request(User,"/admin/ring/partitions",Filter).
  
  http_request (User,Route,Query) ->
      Url=request_url(User,Route,Query),
  