summaryrefslogtreecommitdiffstats
path: root/authz-test/TestSuite/expected/MTC_Appr1.expected
blob: 269f731739a69cb0bef1310b61df6072b26fabc6 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
set testid@aaf.att.com <pass>
set XX@NS <pass>
set testunused@aaf.att.com <pass>
set bogus boguspass
#delay 10
set NFR 0
as testid@aaf.att.com
# TC_Appr1.10.0.POS List NS to prove ok
ns list name com.test.appr
** Expect 200 **

List Namespaces by Name[com.test.appr]
--------------------------------------------------------------------------------

ns list name com.test.appr.@[user.name]
** Expect 200 **

List Namespaces by Name[com.test.appr.@[THE_USER]]
--------------------------------------------------------------------------------

# TC_Appr1.10.1.POS Create Personalized Namespace to add Approvals
ns create com.test.appr.@[user.name] @[user.name] testid@aaf.att.com
** Expect 201 **
Created Namespace

# TC_Appr1.10.2.POS Create General Namespace to add Approvals
ns create com.test.appr @[user.name] testid@aaf.att.com
** Expect 201 **
Created Namespace

# TC_Appr1.10.10.POS Create Roles in Namespace
role create com.test.appr.@[user.name].addToUserRole
** Expect 201 **
Created Role

role create com.test.appr.@[user.name].grantToPerm
** Expect 201 **
Created Role

role create com.test.appr.@[user.name].ungrantFromPerm
** Expect 201 **
Created Role

role create com.test.appr.@[user.name].grantFirstPerm
** Expect 201 **
Created Role

role create com.test.appr.@[user.name].grantSecondPerm
** Expect 201 **
Created Role

# TC_Appr1.10.12.POS Create Permissions in Namespace
perm create com.test.appr.@[user.name].ungrantFromRole myInstance myAction com.test.appr.@[user.name].ungrantFromPerm
** Expect 201 **
Created Permission
Granted Permission [com.test.appr.@[THE_USER].ungrantFromRole|myInstance|myAction] to Role [com.test.appr.@[THE_USER].ungrantFromPerm]

perm create com.test.appr.@[user.name].grantToRole myInstance myAction
** Expect 201 **
Created Permission

force perm create com.test.appr.@[user.name].deleteThisPerm myInstance myAction com.test.appr.@[user.name].grantedRole
** Expect 201 **
Created Permission
Granted Permission [com.test.appr.@[THE_USER].deleteThisPerm|myInstance|myAction] to Role [com.test.appr.@[THE_USER].grantedRole] (Created)

perm create com.test.appr.@[user.name].grantTwoRoles myInstance myAction
** Expect 201 **
Created Permission

perm create com.test.appr.@[user.name].ungrantTwoRoles myInstance myAction com.test.appr.@[user.name].grantFirstPerm,com.test.appr.@[user.name].grantSecondPerm
** Expect 201 **
Created Permission
Granted Permission [com.test.appr.@[THE_USER].ungrantTwoRoles|myInstance|myAction] to Role [com.test.appr.@[THE_USER].grantFirstPerm]
Granted Permission [com.test.appr.@[THE_USER].ungrantTwoRoles|myInstance|myAction] to Role [com.test.appr.@[THE_USER].grantSecondPerm]

as testunused@aaf.att.com
# TC_Appr1.15.01.NEG Create Future and Approvals with non-admin request
user role add @[user.name]@@[user.name].appr.test.com com.test.appr.@[user.name].addToUserRole
** Expect 403 **
Failed [SVC2403]: Approvals required, but not requested by Client

# TC_Appr1.15.02.NEG Create Approval for NS create
ns create com.test.appr.@[user.name].myProject @[user.name]
** Expect 403 **
Failed [SVC2403]: Approvals required, but not requested by Client

# TC_Appr1.15.03.NEG Generate Approval for granting permission to role
perm grant com.test.appr.@[user.name].grantToRole myInstance myAction com.test.appr.@[user.name].grantToPerm
** Expect 403 **
Failed [SVC2403]: Approvals required, but not requested by Client

# TC_Appr1.15.04.NEG Generate Approval for ungranting permission from role
perm ungrant com.test.appr.@[user.name].ungrantFromRole myInstance myAction com.test.appr.@[user.name].ungrantFromPerm
** Expect 403 **
Failed [SVC2403]: Approvals required, but not requested by Client

# TC_Appr1.15.05.NEG Generate Approval for granting permission to role
perm grant com.test.appr.@[user.name].grantTwoRoles myInstance myAction com.test.appr.@[user.name].grantFirstPerm,com.test.appr.@[user.name].grantSecondPerm
** Expect 403 **
Failed [SVC2403]: Approvals required, but not requested by Client
Failed [SVC2403]: Approvals required, but not requested by Client

# TC_Appr1.15.06.NEG Generate Approval for ungranting permission from role
perm ungrant com.test.appr.@[user.name].ungrantTwoRoles myInstance myAction com.test.appr.@[user.name].grantFirstPerm,com.test.appr.@[user.name].grantSecondPerm
** Expect 403 **
Failed [SVC2403]: Approvals required, but not requested by Client
Failed [SVC2403]: Approvals required, but not requested by Client

# TC_Appr1.15.51.POS Create Future and Approvals with non-admin request
set request true
set request=true user role add @[user.name]@@[user.name].appr.test.com com.test.appr.@[user.name].addToUserRole
** Expect 202 **
UserRole Creation Accepted, but requires Approvals before actualizing

# TC_Appr1.15.52.POS Create Approval for NS create
set request true
set request=true ns create com.test.appr.@[user.name].myProject @[user.name]
** Expect 202 **
Namespace Creation Accepted, but requires Approvals before actualizing

# TC_Appr1.15.53.POS Generate Approval for granting permission to role
set request true
set request=true perm grant com.test.appr.@[user.name].grantToRole myInstance myAction com.test.appr.@[user.name].grantToPerm
** Expect 202 **
Permission Role Granted Accepted, but requires Approvals before actualizing

# TC_Appr1.15.54.POS Generate Approval for ungranting permission from role
request perm ungrant com.test.appr.@[user.name].ungrantFromRole myInstance myAction com.test.appr.@[user.name].ungrantFromPerm
** Expect 202 **
Permission Role Ungranted Accepted, but requires Approvals before actualizing

# TC_Appr1.15.55.POS Generate Approval for granting permission to role
request perm grant com.test.appr.@[user.name].grantTwoRoles myInstance myAction com.test.appr.@[user.name].grantFirstPerm,com.test.appr.@[user.name].grantSecondPerm
** Expect 202 **
Permission Role Granted Accepted, but requires Approvals before actualizing
Permission Role Granted Accepted, but requires Approvals before actualizing

# TC_Appr1.15.56.POS Generate Approval for ungranting permission from role
request perm ungrant com.test.appr.@[user.name].ungrantTwoRoles myInstance myAction com.test.appr.@[user.name].grantFirstPerm,com.test.appr.@[user.name].grantSecondPerm
** Expect 202 **
Permission Role Ungranted Accepted, but requires Approvals before actualizing
Permission Role Ungranted Accepted, but requires Approvals before actualizing