acceptance-features/dsl/policy_owner.feature in conjur-cli-4.28.2 vs acceptance-features/dsl/policy_owner.feature in conjur-cli-4.29.0
- old
+ new
@@ -6,26 +6,40 @@
"""
policy 'test-policy-1.0' do
user "test_user"
end
"""
+ And I reset the command list
Scenario: --as-group works
When I run `conjur policy load --as-group $ns/admin --collection $ns` interactively
And I pipe in the file "policy.rb"
- And the exit status should be 0
+ And the command completes successfully
+ And I reset the command list
When I run `conjur role members policy:$ns/test-policy-1.0`
- Then the output from "conjur role members policy:$ns/test-policy-1.0" should match /group:.*$ns.admin/
+ Then the JSON should be:
+ """
+ [
+ "cucumber:group:%{NAMESPACE}/admin"
+ ]
+ """
Scenario: --as-role works
When I run `conjur policy load --as-role group:$ns/admin --collection $ns` interactively
And I pipe in the file "policy.rb"
- And the exit status should be 0
+ And the command completes successfully
+ And I reset the command list
When I run `conjur role members policy:$ns/test-policy-1.0`
- Then the output from "conjur role members policy:$ns/test-policy-1.0" should match /group:.*$ns.admin/
+ Then the JSON should be:
+ """
+ [
+ "cucumber:group:%{NAMESPACE}/admin"
+ ]
+ """
Scenario: --as-group doesn't interfere with policy ownership of other resources
When I run `conjur policy load --as-group $ns/admin --collection $ns` interactively
And I pipe in the file "policy.rb"
- And the exit status should be 0
- When I run `conjur resource show user:test_user@$ns-test-policy-1-0 | jsonfield owner`
- Then the output from "conjur resource show user:test_user@$ns-test-policy-1-0 | jsonfield owner" should match /policy:$ns.test-policy-1.0/
+ And the command completes successfully
+ And I reset the command list
+ When I run `conjur resource show user:test_user@$ns-test-policy-1-0`
+ Then the JSON at "owner" should be "cucumber:policy:%{NAMESPACE}/test-policy-1.0"