Test Suite

Overview

This document describes the test suite configuration for Cerbos policies.

Test Options

• Lenient Scope Search: Enables lenient searching on resource scopes.
• Current Time: The timestamp used during the tests.

Principals

Admin

• ID: admin
• Roles: ["admin"]

User

• ID: user1
• Roles: ["user"]

Resources

Document

• ID: doc1
• Kind: document

File

• ID: file1
• Kind: file

Tests

Test 1: Admin Access to Document

• Input:
  • Principals: ["admin"]
  • Resources: ["doc1"]
  • Actions: ["view"]
• Expected:
  • Actions:
    • EFFECT_ALLOW: true
  • Outputs:
    • Action: view
    • Expected:
      • src: "doc1"
      • val: {"allowed": true}

Test 2: User Access to Document

• Input:
  • Principals: ["user1"]
  • Resources: ["doc1"]
  • Actions: ["view"]
• Expected:
  • Actions:
    • EFFECT_DENY: true
  • Outputs:
    • Action: view
    • Expected:
      • src: "doc1"
      • val: {"allowed": false}