Contents

Feature: Working with key pair roles

	Background:
		Given admin user
		And I create a key pair
		And I create a new user

	Scenario: Random users cannot encrypt data
		And I log in as the new user
		And I anticipate a request failure
		And I encrypt with the key pair
		Then the request fails

	Scenario: Random users cannot decrypt data
		When I encrypt with the key pair
		And I log in as the new user
		And I anticipate a request failure
		And I decrypt with the key pair
		Then the request fails

	Scenario: Encrypt role does not grant permission to decrypt
		When I encrypt with the key pair
		And I grant "key_pair" role "encrypt" to "user" "@new_user.username"
		And I log in as the new user
		And I anticipate a request failure
		And I decrypt with the key pair
		Then the request fails

	Scenario: Decrypt role does not grant permission to encrypt
		And I grant "key_pair" role "decrypt" to "user" "@new_user.username"
		And I log in as the new user
		And I anticipate a request failure
		And I encrypt with the key pair
		Then the request fails

	Scenario: I can encrypt data when granted the role
		And I grant "key_pair" role "encrypt" to "user" "@new_user.username"
		And I log in as the new user
		Then I can encrypt with the key pair
		
	Scenario: I can decrypt data when granted the role
		When I encrypt with the key pair
		And I grant "key_pair" role "decrypt" to "user" "@new_user.username"
		And I log in as the new user
		Then I can decrypt with the key pair
		

Version data entries

1 entries across 1 versions & 1 rubygems

Version	Path
conjur-asset-key-pair-0.2.1	features/key_pair_roles.feature