Story #2727
need to test multi-rule access policy
Status:
Closed
Priority:
Normal
Assignee:
Category:
d1_integration
Target version:
Start date:
2012-05-09
Due date:
% Done:
100%
Story Points:
Sprint:
Description
All current authorization tests are against objects with a single-rule access policy. This does not adequately test that the authorization algorithms:
check all of the access rules, or just the first one¶
look for the greatest access allowed for their set of subjects, or simply the first one encountered¶
look within all of the subjects in an access rule, or just the first one¶
look within all of the permissions in an access rule, or just the first one¶
Subtasks
History
#1 Updated by Rob Nahf almost 12 years ago
- Category set to d1_integration
- Assignee set to Rob Nahf
#2 Updated by Rob Nahf almost 12 years ago
- Status changed from New to Closed
wrote and committed the test to d1_integration as per the task. (tests all four scenarios).
