2300: User Authorization

User authorization tests access to the Users endpoints according to the default configuration provided in the vanilla installation and illustrated at the beginning of this document.

Test Number HTTP Method Endpoint Authenticated User User to be checked Request Status Results
0010 GET Users/uid/authorization/dataset/create ingestor herself 200 {authorization: true}
0020 GET Users/uid/authorization/dataset/create admin herself 200 {authorization: true}
0030 GET Users/uid/authorization/dataset/create admin user1 200 {authorization: true}
0040 GET Users/uid/authorization/dataset/create admin user2 200 {authorization: true}
0050 GET Users/uid/authorization/dataset/create admin user3 200 {authorization: true}
0060 GET Users/uid/authorization/dataset/create admin user4 200 {authorization: false}
0070 GET Users/uid/authorization/dataset/create user1 herself 200 {authorization: true}
0080 GET Users/uid/authorization/dataset/create user1 admin 403 n/a
0090 GET Users/uid/authorization/dataset/create user1 user2 403 n/a
0100 GET Users/uid/authorization/dataset/create user1 user3 403 n/a
0110 GET Users/uid/authorization/dataset/create user1 user4 403 n/a
0120 GET Users/uid/authorization/dataset/create user2 herself 200 {authorization: true}
0130 GET Users/uid/authorization/dataset/create user3 herself 200 {authorization: true}
0140 GET Users/uid/authorization/dataset/create user4 herself 200 {authorization: false}
0144 GET Users/uid/authorization/dataset/create anonymous admin 401 n/a
0146 GET Users/uid/authorization/dataset/create anonymous user1 401 n/a
0150 POST Users/jwt anonymous n/a 201 {jwt: <NEW_JWT>}
0160 POST Users/jwt admin n/a 201 {jwt: <NEW_JWT>}
0170 POST Users/jwt user1 n/a 201 {jwt: <NEW_JWT>}
0180 GET Users/uid admin herself 200 Admin user model without password
0190 GET Users/uid admin user1 200 User1 user model without password
0200 GET Users/uid user1 herself 200 User1 user model without password
0210 GET Users/uid user1 admin 403 n/a
0220 GET Users/uid user1 user2 403 n/a
0230 GET Users/uid anonymous admin 401 n/a
0240 GET Users/uid anonymous user1 401 n/a
0250 GET Users/uid/userIdentity admin herself 200 Admin user identity model
0260 GET Users/uid/userIdentity admin user1 200 User1 user identity model
0270 GET Users/uid/userIdentity user1 herself 200 User1 user identity model
0280 GET Users/uid/userIdentity user1 admin 403 n/a
0290 GET Users/uid/userIdentity user1 user2 403 n/a
0300 GET Users/uid/userIdentity anonymous admin 401 n/a
0310 GET Users/uid/userIdentity anonymous user1 401 n/a
0320 GET Users/uid/settings admin herself 200 Admin user settings model
0330 GET Users/uid/settings admin user1 200 User1 user settings model
0340 GET Users/uid/settings user1 herself 200 User1 user settings model
0350 GET Users/uid/settings user1 admin 403 n/a
0360 GET Users/uid/settings user1 user2 403 n/a
0370 GET Users/uid/settings anonymous admin 401 n/a
0380 GET Users/uid/settings anonymous user1 401 n/a
0390 GET Users/userIdentities/findOne admin herself 200 Admin user identity model
0400 GET Users/userIdentities/findOne admin user1 200 User1 user identity model
0410 GET Users/userIdentities/findOne user1 herself 200 User1 user identity model
0420 GET Users/userIdentities/findOne user1 admin 403 n/a
0430 GET Users/userIdentities/findOne user1 user2 403 n/a
0440 GET Users/userIdentities/findOne anonymous admin 401 n/a
0450 GET Users/userIdentities/findOne anonymous user1 401 n/a
0460 POST Users/uid/jwt admin herself 201 { "jwt" : "<JWT-TOKEN>"}
0470 POST Users/uid/jwt admin user1 201 { "jwt" : "<JWT-TOKEN>"}
0480 POST Users/uid/jwt user1 herself 403 n/a
0490 POST Users/uid/jwt user1 admin 403 n/a
0500 POST Users/uid/jwt user1 user2 403 n/a
0510 POST Users/uid/jwt anonymous admin 401 n/a
0520 POST Users/uid/jwt anonymous user1 401 n/a

results matching ""

    No results matching ""