as XX@NS
# TC_Role2.40.1.POS List Data on Role
expect 200
role list role com.test.TC_Role2.@[user.name].r.animals
role list role com.test.TC_Role2.@[user.name].r.dogs
role list role com.test.TC_Role2.@[user.name].r.pigs

# TC_Role2.40.10.POS Add testunused to animals
expect 201
as testid@aaf.att.com
user role add testunused@aaf.att.com com.test.TC_Role2.@[user.name].r.animals

# TC_Role2.40.11.POS List by Name when part of role
as testunused@aaf.att.com
expect 200
role list role com.test.TC_Role2.@[user.name].r.animals

# TC_Role2.40.12.NEG List by Name when not part of Role
expect 403
role list role com.test.TC_Role2.@[user.name].r.dogs
role list role com.test.TC_Role2.@[user.name].r.pigs


# TC_Role2.40.30.POS Read various Roles based on being Admin in Namespace
as testid@aaf.att.com
expect 200
role list role com.test.TC_Role2.@[user.name].r.animals
role list role com.test.TC_Role2.@[user.name].r.dogs
role list role com.test.TC_Role2.@[user.name].r.pigs

# TC_Role2.40.50.POS Change testunused to Pigs
as testid@aaf.att.com
expect 200
user role del testunused@aaf.att.com com.test.TC_Role2.@[user.name].r.animals
expect 201
user role add testunused@aaf.att.com com.test.TC_Role2.@[user.name].r.pigs

# TC_Role2.40.51.POS Read various Roles based on having Explicit Permissions
as testunused@aaf.att.com
expect 403
role list role com.test.TC_Role2.@[user.name].r.animals
role list role com.test.TC_Role2.@[user.name].r.dogs
expect 200
role list role com.test.TC_Role2.@[user.name].r.pigs