Sha256: c80020de18ff73f148f20a5808a5ba7d78685983e7a4c826798938f35bb86c14
Contents?: true
Size: 1.47 KB
Versions: 5
Compression:
Stored size: 1.47 KB
Contents
Feature: Loading a policy can specify the policy's admin
Background:
Given I successfully run `conjur group create $ns/admin`
And a file named "policy.rb" with:
"""
policy 'test-policy-1.0' do
user "test_user"
end
"""
And I reset the command list
Scenario: --as-group works
When I run `conjur policy load --as-group $ns/admin --collection $ns` interactively
And I pipe in the file "policy.rb"
And the command completes successfully
And I reset the command list
When I run `conjur role members policy:$ns/test-policy-1.0`
Then the JSON should be:
"""
[
"cucumber:group:%{NAMESPACE}/admin"
]
"""
Scenario: --as-role works
When I run `conjur policy load --as-role group:$ns/admin --collection $ns` interactively
And I pipe in the file "policy.rb"
And the command completes successfully
And I reset the command list
When I run `conjur role members policy:$ns/test-policy-1.0`
Then the JSON should be:
"""
[
"cucumber:group:%{NAMESPACE}/admin"
]
"""
Scenario: --as-group doesn't interfere with policy ownership of other resources
When I run `conjur policy load --as-group $ns/admin --collection $ns` interactively
And I pipe in the file "policy.rb"
And the command completes successfully
And I reset the command list
When I run `conjur resource show user:test_user@$ns-test-policy-1-0`
Then the JSON at "owner" should be "cucumber:policy:%{NAMESPACE}/test-policy-1.0"
Version data entries
5 entries across 5 versions & 1 rubygems