Skip to content

Commit

Permalink
Update testcases for permissions for user/group
Browse files Browse the repository at this point in the history
  • Loading branch information
@maryvictol
maryvictol committed Dec 9, 2024
1 parent 4a3c2a3 commit f87c7f6
Show file tree
Hide file tree
Showing 6 changed files with 60 additions and 43 deletions.
8 changes: 4 additions & 4 deletions ...s/UI/Role_Based_Access_Control/3229_grant_permissions_to_user_account/3229_1.md
View file
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
# User Read grant permissions to user account
# READ grant permissions to user account

Test verifies that
- Users shall be able to view list of users they have READ access to
Expand All @@ -13,7 +13,7 @@ Test verifies that
2. Open the **Settings** page and select **User management** >> ***Users*** tab
3. Click on **Edit** icon opposite the admin user name from the prerequisites
4. In an appeared pop-up select **Permissions** tab
5. Add non-admin user from the prerequisites and give him allow `Read` permission
5. Add non-admin user from the prerequisites and give him allow `READ` permission
6. Click **Apply** button
7. Select **Profile** tab
8. In the ***Attributes*** section add 3 attributes `key1`/`value1`, `key2`/`value2` and `key3`/`value3`
Expand All @@ -24,5 +24,5 @@ Test verifies that
| :---: |--- | --- |
| 1 | Logout and login as the non-admin user from the prerequisites | |
| 2 | Open the **Settings** page | **User management** tab is shown |
| 3 | Open the **User management** tab | Users list contains at least 1 user: the admin user from the prerequisites |
| 4 | Click on **Edit** icon opposite the admin user name from the prerequisites | ***Edit User*** pop-up opens that contains: <li> **Impersonate** button isn't visible <li> **Delete** and **Block** buttons are disabled <li> User's Roles and groups are visible and disabled <li> Attributes are visible and disabled <li> Specified Launch options aren't visible |
| 3 | Open the **User management** tab | Users list is shown and contains at least 1 user: the admin user from the prerequisites |
| 4 | Click on **Edit** icon opposite the admin user name from the prerequisites | ***Edit User*** pop-up opens that contains: <li> **Impersonate** button isn't visible <li> **Delete** and **Block** buttons are disabled <li> User's Roles and groups are visible but disabled <li> Attributes are visible but disabled <li> Launch option specified at the step 9 of Preparations isn't visible |
16 changes: 8 additions & 8 deletions ...s/UI/Role_Based_Access_Control/3229_grant_permissions_to_user_account/3229_2.md
View file
Original file line number Diff line number Diff line change
@@ -1,22 +1,22 @@
# User Group's Write grant permissions to user account
# WRITE grant permissions to user account

Test verifies that
- User as member of User Group with WRITE permission is allowed to modify user metadata
- User as member of User Group with WRITE permission to user account is allowed to modify user metadata
- secured metadata keys defined by preference `misc.metadata.sensitive.keys` couldn't be modified
- editing of other user attributes and roles aren't allowed


**Prerequisites**:
- User Group
- User Group (`UserGroup1`)
- Perform [3229_1](3229_1.md) case

**Preparations**:
1. Login as the admin user from the prerequisites of [3229_1](3229_1.md) case
2. Open the **Settings** page and select **User management** tab
3. Add non-admin user from the prerequisites of [3229_1](3229_1.md) case to the User Group from the prerequisites
2. Open the **Settings** page and select **User management** >> ***Users*** tab
3. Add non-admin user from the prerequisites of [3229_1](3229_1.md) case to the User Group (`UserGroup1`) from the prerequisites
4. Click on **Edit** icon opposite the admin user name from the prerequisites of [3229_1](3229_1.md) case
5. In an appeared pop-up select **Permissions** tab
6. Add User Group from the prerequisites and give it allow `Write` permission
6. Add `UserGroup1` and give it allow `WRITE` permission
7. Click **Apply** button and close ***Edit User*** pop-up
8. Select **Preferences** tab
9. Set value `["key1"]` for `misc.metadata.sensitive.keys` preference. Click **Save** button.
Expand All @@ -25,8 +25,8 @@ Test verifies that
| :---: |--- | --- |
| 1 | Logout and login as the non-admin user from the prerequisites of [3229_1](3229_1.md) case | |
| 2 | Open the **Settings** page | **User management** tab is shown |
| 3 | Open the **User management** tab | Users list contains at least 1 user: the admin user from the prerequisites of [3229_1](3229_1.md) case |
| 4 | Click on **Edit** icon opposite the admin user name from the prerequisites of [3229_1](3229_1.md) case | ***Edit User*** pop-up opens that contains: <li> **Impersonate** button isn't visible <li> **Delete** and **Block** buttons are disabled <li> User's Roles and groups are visible and disabled <li> Specified Launch options aren't visible <li> Attribute `key1` isn't visible, attributes `key2` and `key3` are visible and editable |
| 3 | Open the **User management** tab | Users list is shown and contains at least 1 user: the admin user from the prerequisites of [3229_1](3229_1.md) case |
| 4 | Click on **Edit** icon opposite the admin user name from the prerequisites of [3229_1](3229_1.md) case | ***Edit User*** pop-up opens that contains: <li> **Impersonate** button isn't visible <li> **Delete** and **Block** buttons are disabled <li> User's Roles and groups are visible but disabled <li> Launch option specified at the step 9 of Preparations of [3229_1](3229_1.md) case isn't visible <li> Attribute `key1` isn't visible, attributes `key2` and `key3` are visible and editable |
| 5 | In the **Attributes** section click ***Remove*** button for `key2` attribute. Confirm deletion | |
| 6 | Change `key3` and `value3` values for attribute `key3` to `key3_new`/`value3_new` | |
| 7 | Add attribute `key4` with `value4` | |
Expand Down
23 changes: 13 additions & 10 deletions ...s/UI/Role_Based_Access_Control/3229_grant_permissions_to_user_account/3229_3.md
View file
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
# User Group's Execute grant permissions to user account
# EXECUTE grant permissions to user account

Test verifies that
- User as member of User Group with Execute permission is allowed to impersonate as user
Expand All @@ -8,19 +8,22 @@ Test verifies that
- Perform [3229_2](3229_2.md) case

**Preparations**:
1. Login as the admin user from the prerequisites
2. Open the **Settings** page and select **User management** tab
3. Add non-admin user from the prerequisites of [3229_1](3229_1.md) case
4. Click on **Edit** icon opposite the admin user name from the prerequisites of [3229_1](3229_1.md) case
5. In an appeared pop-up select **Permissions** tab
6. Select User Group from the prerequisites of [3229_1](3229_1.md) case and give it only allow `Execute` permission
7. Click **Apply** button and close ***Edit User*** pop-up
1. Login as the admin user from the prerequisites of [3229_1](3229_1.md) case
2. Open the **Settings** page and select **User management** >> ***Users*** tab
3. Click on **Edit** icon opposite the admin user name from the prerequisites of [3229_1](3229_1.md) case
4. In an appeared pop-up select **Permissions** tab
5. Select `UserGroup1` from the prerequisites of [3229_2](3229_2.md) case and give it only allow `EXECUTE` permission
6. Click **Apply** button and close ***Edit User*** pop-up


| Steps | Actions | Expected results |
| :---: |--- | --- |
| 1 | Logout and login as the non-admin user from the prerequisites of [3229_1](3229_1.md) case | |
| 2 | Open the **Settings** page | **User management** tab is shown |
| 3 | Open the **User management** tab | Users list contains at least 1 user: the admin user from the prerequisites of [3229_1](3229_1.md) case |
| 4 | Click on **Edit** icon opposite the admin user name from the prerequisites of [3229_1](3229_1.md) case | ***Edit User*** pop-up opens that contains: <li> **Impersonate** button is visible <li> **Delete** and **Block** buttons are disabled <li> User's Roles and groups are visible and disabled <li> Specified Launch options aren't visible <li> Attributes are visible and disabled |
| 3 | Open the **User management** tab | Users list is shown and contains at least 1 user: the admin user from the prerequisites of [3229_1](3229_1.md) case |
| 4 | Click on **Edit** icon opposite the admin user name from the prerequisites of [3229_1](3229_1.md) case | ***Edit User*** pop-up opens that contains: <li> **Impersonate** button is visible <li> **Delete** and **Block** buttons are disabled <li> User's Roles and groups are visible and disabled <li> Launch option specified at the step 9 of Preparations of [3229_1](3229_1.md) case isn't visible <li> Attributes are visible and disabled |
| 5 | Click **Impersonate** button | <li> Page reloads and the **Dashboard** page opens <li> **Stop Impersonation** button appears on the left navigation panel |

**After:**
- Restore the value of the `misc.metadata.sensitive.keys` preference to the initial value.
- Remove the changes made in the [3229_1](3229_1.md) - [3229_3](3229_3.md) cases for the admin user from the prerequisites of [3229_1](3229_1.md) case.
19 changes: 9 additions & 10 deletions ...UI/Role_Based_Access_Control/3751_allow_to_grant_permissions_to_group/3751_1.md
View file
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
# User Read grant permissions to group
# READ grant permissions to User Group

Test verifies that Users with READ permission are allowed to view user details
Test verifies that Users with READ permission to User Group are allowed to view group details

**Prerequisites**:
- admin user
Expand All @@ -12,16 +12,15 @@ Test verifies that Users with READ permission are allowed to view user details
2. Open the **Settings** page and select **User management** tab. Navigate to the ***Groups*** tab.
3. Click on **Edit** icon opposite the `UserGroup1` name from the prerequisites
4. In an appeared pop-up select **Permissions** tab
5. Add non-admin user from the prerequisites and give him allow `Read` permission
6. Click **Apply** button
7. Select **Profile** tab
8. In the ***Attributes*** section add 3 attributes `key1`/`value1`, `key2`/`value2` and `key3`/`value3`
9. In the *Launch options* section set `m.*` value into the ***Allowed tool instance types mask*** field
10. Click **Save** button
5. Add non-admin user from the prerequisites and give him allow `READ` permission. Click **Apply** button
6. Select **Profile** tab
7. In the ***Attributes*** section add 3 attributes `key1`/`value1`, `key2`/`value2` and `key3`/`value3`
8. In the *Launch options* section set `m.*` value into the ***Allowed tool instance types mask*** field
9. Click **Save** button

| Steps | Actions | Expected results |
| :---: |--- | --- |
| 1 | Logout and login as the non-admin user from the prerequisites | |
| 2 | Open the **Settings** page | |
| 3 | Open the **User management** tab. Navigate to the ***Groups*** tab | Groups list contains at least 1 User Group: the `UserGroup1` from the prerequisites |
| 4 | Click on **Edit** icon opposite the `UserGroup1` name from the prerequisites | ***Edit Group*** pop-up opens that contains: <li> List of Users is visible and disabled <li> Attributes are visible and disabled <li> Specified Launch options aren't visible |
| 3 | Open the **User management** tab. Navigate to the ***Groups*** tab | Groups list is shown and contains at least 1 User Group: the `UserGroup1` from the prerequisites |
| 4 | Click on **Edit** icon opposite the `UserGroup1` name from the prerequisites | ***Edit Group*** pop-up opens that contains: <li> List of Users is visible but disabled <li> Attributes are visible but disabled <li> Launch option specified at the step 8 of Preparations isn't visible |
27 changes: 16 additions & 11 deletions ...UI/Role_Based_Access_Control/3751_allow_to_grant_permissions_to_group/3751_2.md
View file
Original file line number Diff line number Diff line change
@@ -1,36 +1,41 @@
# User Group's Write grant permissions to group
# WRITE grant permissions to User Group

Test verifies that
- User as member of User Group with WRITE permission is allowed to modify group metadata
- User as member of User Group with WRITE permission to User Group is allowed to modify group metadata
- secured metadata keys defined by preference `misc.metadata.sensitive.keys` couldn't be modified
- List of Users can be modified


**Prerequisites**:
- User Group (`UserGroup2`)
- Perform [3751_1](3751_1.md), [3229_1](3229_1.md) cases
- Perform [3751_1](3751_1.md) case

**Preparations**:
1. Login as the admin user from the prerequisites of [3751_1](3751_1.md) case
2. Open the **Settings** page and select **User management** tab. Navigate to the ***Groups*** tab.
3. Add non-admin user from the prerequisites of [3751_1](3751_1.md) case to the `UserGroup2`
4. Click on **Edit** icon opposite the `UserGroup1` name from the prerequisites of [3751_1](3751_1.md) case
5. In an appeared pop-up select **Permissions** tab
6. Add `UserGroup2` from the prerequisites and give it allow `Write` permission
7. Click **Apply** button and close ***Edit Group*** pop-up
8. Select **Preferences** tab
9. Set value `["key1"]` for `misc.metadata.sensitive.keys` preference. Click **Save** button.
3. Add non-admin user from the prerequisites of [3751_1](3751_1.md) case to the _Permissions_ list of admin user from the prerequisites of [3751_1](3751_1.md) case.
4. Add non-admin user from the prerequisites of [3751_1](3751_1.md) case to the `UserGroup2` from the prerequisites.
5. Click on **Edit** icon opposite the `UserGroup1` name from the prerequisites of [3751_1](3751_1.md) case.
6. In an appeared pop-up select **Permissions** tab
7. Add `UserGroup2` and give it allow `WRITE` permission
8. Click **Apply** button and close ***Edit Group*** pop-up
9. Select **Preferences** tab
10. Set value `["key1"]` for `misc.metadata.sensitive.keys` preference. Click **Save** button.

| Steps | Actions | Expected results |
| :---: |--- | --- |
| 1 | Logout and login as the non-admin user from the prerequisites of [3751_1](3751_1.md) case | |
| 2 | Open the **Settings** page | **User management** tab is shown |
| 3 | Open the **User management** tab. Navigate to the ***Groups*** tab | Groups list contains at least 1 User Group: the `UserGroup1` from the prerequisites of [3751_1](3751_1.md) case |
| 4 | Click on **Edit** icon opposite the `UserGroup1` name from the prerequisites of [3751_1](3751_1.md) case | ***Edit Group*** pop-up opens that contains: <li> **Block** button isn't visible <li> List of Users is visible and editabled <li> Specified Launch options aren't visible <li> Attribute `key1` isn't visible, attributes `key2` and `key3` are visible and editable |
| 4 | Click on **Edit** icon opposite the `UserGroup1` name from the prerequisites of [3751_1](3751_1.md) case | ***Edit Group*** pop-up opens that contains: <li> **Block** button isn't visible <li> List of Users is visible and editabled <li> Launch option specified at the step 8 of Preparations of [3751_1](3751_1.md) case isn't visible <li> Attribute `key1` isn't visible, attributes `key2` and `key3` are visible and editable |
| 5 | In the **Attributes** section click ***Remove*** button for `key2` attribute. Confirm deletion | |
| 6 | Change `key3` and `value3` values for attribute `key3` to `key3_new`/`value3_new` | |
| 7 | Add attribute `key4` with `value4` | |
| 8 | Input the admin user name from the prerequisites of [3229_1](3229_1.md) case into the _Search User_ field and select it from drop-down list |
| 9 | Click **+Add user** button | |
| 10 | Click **OK** button | |
| 11 | Click on **Edit** icon opposite the admin user name from the prerequisites of [3751_1](3751_1.md) case | ***Edit Group*** pop-up opens and all changes made at steps 5-10 are kept |

**After:**
- Restore the value of the `misc.metadata.sensitive.keys` preference to the initial value.
- Remove the changes made in the [3751_1](3751_1.md) - [3751_2](3751_2.md) cases for the admin user from the prerequisites of [3751_1](3751_1.md) case.
10 changes: 10 additions & 0 deletions docs/testcases/UI/Role_Based_Access_Control/Role_Based_Access_Control.md
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,10 @@
# Role Based Access Control testcases

| Case ID | Description/name |
|---|---|
| [**2144_impersonate_admin_as_general_user**](2144_impersonate_admin_as_general_user.md) | Allow to "impersonate" administrator as a general user |
| [**3229_1**](3229_grant_permissions_to_user_account/3229_1.md) | READ grant permissions to user account |
| [**3229_2**](3229_grant_permissions_to_user_account/3229_2.md) | WRITE grant permissions to user account |
| [**3229_3**](3229_grant_permissions_to_user_account/3229_3.md) | EXECUTE grant permissions to user account |
| [**3751_1**](3751_allow_to_grant_permissions_to_group/3751_1.md) | READ grant permissions to User Group |
| [**3751_2**](3751_allow_to_grant_permissions_to_group/3751_2.md) | WRITE grant permissions to User Group |

0 comments on commit f87c7f6

Please sign in to comment.