summaryrefslogtreecommitdiffstats
path: root/authz-test/TestSuite/TC_Perm1/99_cleanup
blob: 222e2a4c5320d24e4b3042904843abd86aa403af (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
as XX@NS:<pass>
expect 200,404

# TC_Perm1.99.1.POS Namespace Admin can delete Namepace defined Roles
set force=true perm delete com.test.TC_Perm1.@[user.name].p.A myInstance myAction
set force=true perm delete com.test.TC_Perm1.@[user.name].p.B myInstance myAction
set force=true perm delete com.test.TC_Perm1.@[user.name].p.C myInstance myAction
set force=true perm delete com.test.TC_Perm1.@[user.name].p.unknown myInstance myAction
set force=true perm delete com.test.TC_Perm1.@[user.name].p.unknown2 myInstance myAction
role delete com.test.TC_Perm1.@[user.name].r.A
role delete com.test.TC_Perm1.@[user.name].r.B
role delete com.test.TC_Perm1.@[user.name].r.C
role delete com.test.TC_Perm1.@[user.name].r.unknown
role delete com.test.TC_Perm1.@[user.name].r.unknown2
role delete com.test2.TC_Perm1.@[user.name].r.C
role delete com.test.TC_Perm1.@[user.name]_2.r.C
role delete com.test2.TC_Perm1.@[user.name]_2.r.C

# TC_Perm1.99.2.POS Remove ability to create creds
user role del XX@NS com.test.TC_Perm1.@[user.name].cred_admin

as XX@NS:<pass>
perm ungrant com.att.aaf.mechid com.att create com.test.TC_Perm1.@[user.name].cred_admin

as testid@aaf.att.com:<pass>
role delete com.test.TC_Perm1.@[user.name].cred_admin

sleep @[NFR]
as XX@NS:<pass>
# TC_Perm1.99.98.POS Namespace Admin can delete Namespace
set force=true ns delete com.test2.TC_Perm1.@[user.name]
as testid:<pass>
force ns delete com.test.TC_Perm1.@[user.name].r
force ns delete com.test.TC_Perm1.@[user.name]_2
force ns delete com.test.TC_Perm1.@[user.name]
force ns delete com.test2.TC_Perm1.@[user.name]

# TC_Perm1.99.99.POS List to prove removed
ns list name com.test.TC_Perm1.@[user.name]
ns list name com.test.TC_Perm1.@[user.name].r
ns list name com.test.TC_Perm1.@[user.name]_2
ns list name com.test2.TC_Perm1.@[user.name]