diff --git a/duniter4j-es-assembly/src/test/es-home/config/elasticsearch.yml b/duniter4j-es-assembly/src/test/es-home/config/elasticsearch.yml
index 9f6a6d72475d825809e40a5d2275112f4101bef4..57a0be9d912b15d36f9069703a6c519eb1cecfa0 100644
--- a/duniter4j-es-assembly/src/test/es-home/config/elasticsearch.yml
+++ b/duniter4j-es-assembly/src/test/es-home/config/elasticsearch.yml
@@ -19,6 +19,7 @@ cluster.name: duniter4j-elasticsearch-TEST
 #
 # ------------------------------------ Node ------------------------------------
 #
+#
 # Use a descriptive name for the node:
 #
 # node.name: node-1
@@ -139,8 +140,8 @@ duniter.keyring.password: def
 
 # Enable security, to disable HTTP access to the default ES admin API
 #
-#duniter.security.enable: true
-duniter.security.enable: false
+duniter.security.enable: true
+#duniter.security.enable: false
 #
 # Security token prefix (default: 'duniter-')
 #
diff --git a/duniter4j-es-user/src/main/misc/curl_test.sh b/duniter4j-es-user/src/main/misc/curl_test.sh
index 6a8ba33ecdee671cddbc60785124fce404969128..1c88ff485fa714301462c7224e5b3da1e4c0d5c0 100755
--- a/duniter4j-es-user/src/main/misc/curl_test.sh
+++ b/duniter4j-es-user/src/main/misc/curl_test.sh
@@ -87,3 +87,21 @@ curl -XPOST "http://127.0.0.1:9200/user/event/_search?pretty" -d'
 }'
 
 
+echo "--- GET market pictures content_type--- "
+curl -XPOST "http://127.0.0.1:9200/market/record/_search?pretty" -d'
+{
+  query: {
+    constant_score: {
+        filter: [
+          {term: { issuer: "5ocqzyDMMWf1V8bsoNhWb1iNwax1e9M7VTUN6navs8of"}}
+        ]
+      }
+  },
+  sort : [
+    { "time" : {"order" : "desc"}}
+  ],
+  from: 0,
+  size: 3,
+  _source: ["avatar._content_type"]
+}'
+