Feature: Loading a policy can specify the policy's admin

  Background:
    Given I successfully run `conjur group create $ns/admin`
    And a file named "policy.rb" with:
    """
policy 'test-policy-1.0' do
  user "test_user"
end
    """
    And I reset the command list

  Scenario: --as-group works
    When I run `conjur rubydsl load --as-group $ns/admin --collection $ns` interactively
    And I pipe in the file "policy.rb"
    And the command completes successfully
    And I reset the command list
    When I run `conjur role members policy:$ns/test-policy-1.0`
    Then the JSON should be:
    """
    [
	    "cucumber:group:%{NAMESPACE}/admin"
	  ]
	  """

  Scenario: --as-role works
    When I run `conjur rubydsl load --as-role group:$ns/admin --collection $ns` interactively
    And I pipe in the file "policy.rb"
    And the command completes successfully
    And I reset the command list
    When I run `conjur role members policy:$ns/test-policy-1.0`
    Then the JSON should be:
    """
    [
	    "cucumber:group:%{NAMESPACE}/admin"
	  ]
	  """

  Scenario: --as-group doesn't interfere with policy ownership of other resources
    When I run `conjur rubydsl load --as-group $ns/admin --collection $ns` interactively
    And I pipe in the file "policy.rb"
    And the command completes successfully
    And I reset the command list
    When I run `conjur resource show user:test_user@$ns-test-policy-1-0`
    Then the JSON at "owner" should be "cucumber:policy:%{NAMESPACE}/test-policy-1.0"