# Test Suite

## Overview
This document describes the test suite configuration for Cerbos policies.

## Test Options
- **Lenient Scope Search**: Enables lenient searching on resource scopes.
- **Current Time**: The timestamp used during the tests.

## Principals
### Admin
- **ID**: admin
- **Roles**: ["admin"]

### User
- **ID**: user1
- **Roles**: ["user"]

## Resources
### Document
- **ID**: doc1
- **Kind**: document

### File
- **ID**: file1
- **Kind**: file

## Tests
### Test 1: Admin Access to Document
- **Input**:
  - **Principals**: ["admin"]
  - **Resources**: ["doc1"]
  - **Actions**: ["view"]
- **Expected**:
  - **Actions**:
    - **EFFECT_ALLOW**: true
  - **Outputs**:
    - **Action**: view
    - **Expected**:
      - **src**: "doc1"
      - **val**: {"allowed": true}

### Test 2: User Access to Document
- **Input**:
  - **Principals**: ["user1"]
  - **Resources**: ["doc1"]
  - **Actions**: ["view"]
- **Expected**:
  - **Actions**:
    - **EFFECT_DENY**: true
  - **Outputs**:
    - **Action**: view
    - **Expected**:
      - **src**: "doc1"
      - **val**: {"allowed": false}