acceptance-features/dsl/policy_owner.feature in conjur-cli-4.28.2 vs acceptance-features/dsl/policy_owner.feature in conjur-cli-4.29.0

- old
+ new

@@ -6,26 +6,40 @@ """ policy 'test-policy-1.0' do user "test_user" end """ + And I reset the command list Scenario: --as-group works When I run `conjur policy load --as-group $ns/admin --collection $ns` interactively And I pipe in the file "policy.rb" - And the exit status should be 0 + And the command completes successfully + And I reset the command list When I run `conjur role members policy:$ns/test-policy-1.0` - Then the output from "conjur role members policy:$ns/test-policy-1.0" should match /group:.*$ns.admin/ + Then the JSON should be: + """ + [ + "cucumber:group:%{NAMESPACE}/admin" + ] + """ Scenario: --as-role works When I run `conjur policy load --as-role group:$ns/admin --collection $ns` interactively And I pipe in the file "policy.rb" - And the exit status should be 0 + And the command completes successfully + And I reset the command list When I run `conjur role members policy:$ns/test-policy-1.0` - Then the output from "conjur role members policy:$ns/test-policy-1.0" should match /group:.*$ns.admin/ + Then the JSON should be: + """ + [ + "cucumber:group:%{NAMESPACE}/admin" + ] + """ Scenario: --as-group doesn't interfere with policy ownership of other resources When I run `conjur policy load --as-group $ns/admin --collection $ns` interactively And I pipe in the file "policy.rb" - And the exit status should be 0 - When I run `conjur resource show user:test_user@$ns-test-policy-1-0 | jsonfield owner` - Then the output from "conjur resource show user:test_user@$ns-test-policy-1-0 | jsonfield owner" should match /policy:$ns.test-policy-1.0/ + And the command completes successfully + And I reset the command list + When I run `conjur resource show user:test_user@$ns-test-policy-1-0` + Then the JSON at "owner" should be "cucumber:policy:%{NAMESPACE}/test-policy-1.0"