...
Step | Action | Expected system response | Comment | 1 |
Note: | The jsons for creating the proper roles: URL: http://10.222.17.134/referencedata/api/roles?access_token=de0d3ff7-acf9-42c8-aa52-5483d25d1c9d, POST
{ "id": "a5481d8e-d7e2-4427-8e22-d6b3142d4c1d", "name": "Requisition view", "rights": [ { "id": "e101d2b8-6a0f-4af6-a5de-a9576b4ebc50", "name": "REQUISITION_VIEW", "type": "SUPERVISION", "attachments": [] } ] } 2. REQUISITION_DELETE { "id": "71fd8790-eb5b-45ad-b221-673e9f48bbe2", "name": "Requisition delete", "rights": [ { "id": "c3eb5df0-c3ac-4e70-a978-02827462f60e", "name": "REQUISITION_DELETE", "type": "SUPERVISION", "attachments": [] } ] } 3. REQUISITION_AUTHORIZE { "id": "a9d3263c-8ad0-4fa1-beba-0ca0be94b021", "name": "Requisition authorize", "rights": [ { "id": "feb4c0b8-f6d2-4289-b29d-811c1d0b2863", "name": "REQUISITION_AUTHORIZE", "type": "SUPERVISION", "attachments": [] } ] } 4. REQUISITION_APPROVE { "id": "e9d4825b-5138-47cb-b5d5-74cfc986a791", "name": "Requisition approve", "rights": [ { "id": "bffa2de2-dc2a-47dd-b126-6501748ac3fc", "name": "REQUISITION_APPROVE", "type": "SUPERVISION", "attachments": [] } ] } 5. REQUISITION_CREATE { "id": "53cfc7dc-eb1b-4253-8b39-9bce02551107", "name": "Requisition create", "rights": [ { "id": "9ade922b-3523-4582-bef4-a47701f7df14", "name": "REQUISITION_CREATE", "type": "SUPERVISION", "attachments": [] } ] } | The roles has been created successfully. | ||
1 | Assign the user (devadmin) a right: REQUISITION_VIEW. URL: http://10.222.17.134/referencedata/api/users?access_token=de0d3ff7-acf9-42c8-aa52-5483d25d1c9d Method: PUT Body: { "roleId": "a5481d8e-d7e2-4427-8e22-d6b3142d4c1d", | Role has been assigned properly.
| How to assign role to user: URL: http://10.222.17.134/referencedata/api/roles?access_token=de0d3ff7-acf9-42c8-aa52-5483d25d1c9d Body: { "id": "a5481d8e-d7e2-4427-8e22-d6b3142d4c1d", "name": "Requisition view", "rights": [ { "id": "e101d2b8-6a0f-4af6-a5de-a9576b4ebc50", "name": "REQUISITION_VIEW", "type": "SUPERVISION", "attachments": [] } ] } | |
2 | Try to delete the requisition when REQUISITION_VIEW right is assigned to user. | User can't delete the requision. The proper right REQUISITION_DELETE is not associated with user. | ||
3 | Try to authorize the requisition when REQUISITION_VIEW right is assigned to user. | User can't authorize the requisition. The proper right REQUISITION_AUTHORIZE is not associated with User. | ||
4 | Try to approve the requisition when REQUISITION_VIEW right is assigned to user. | User can't approve the requisition. The proper right REQUISITION_APPROVE is not associated with User. | ||
5 | Try to initiate or submit the requisition when REQUISITION_VIEW right is assigned to user. | User can't initiate/submit the requisition. The proper right REQUISITION_CREATE is not associated with User. | ||
6 | Try to view the requisition when REQUISITION_VIEW right is assigned to user. | The details of requisition are displayed. | ||
7 | Assign the user a right: REQUISITION_DELETE. Body: | |||
8 | Try to delete the requisition when REQUISITION_DELETE right is assigned to user. | |||
9 | Try to authorize the requisition when REQUISITION_DELETE right is assigned to user. | User can't authorize the requisition. The proper right REQUISITION_AUTHORIZE is not associated with User. | ||
10 | Try to approve the requisition when REQUISITION_DELETE right is assigned to user. | User can't approve the requisition. The proper right REQUISITION_APPROVE is not associated with User. | ||
11 | Try to initiate or submit the requisition when REQUISITION_DELETE right is assigned to user. | User can't initiate/submit the requisition. The proper right REQUISITION_CREATE is not associated with User. | ||
12 | Try to view the requisition when REQUISITION_DELETE right is assigned to user. | The details of requisitions are visible. | ||
13 | Reassign the right: REQUISITION_DELETE and assign the user a right: REQUISITION_AUTHORIZE.
{ | |||
14 | Try to delete the requisition when REQUISITION_AUTHORIZE right is assigned to user. | User can't delete the requisition. The proper right REQUISITION_DELETE is not associated with User. | ||
15 | Try to authorize the requisition when REQUISITION_AUTHORIZE right is assigned to user. | The requisition has been authorized successfully. | ||
16 | Try to approve the requisition when REQUISITION_AUTHORIZE right is assigned to user. | User can't approve the requisition. The proper right REQUISITION_APPROVE is not associated with User. | ||
17 | Try to initiate or submit the requisition when REQUISITION_AUTHORIZE right is assigned to user. | User can't initiate/submit the requisition. The proper right REQUISITION_CREATE is not associated with User. | ||
18 | Try to view the requisition when REQUISITION_AUTHORIZE right is assigned to user. | The details of requisitions are displayed. | ||
19 | Reassign the right: REQUISITION_AUTHORIZE and assign the user a right: REQUISITION_APPROVE.
{ | |||
20 | Try to delete the requisition when REQUISITION_APPROVE right is assigned to user. | User can't delete the requisition. The proper right REQUISITION_DELETE is not associated with User. | ||
21 | Try to authorize the requisition when REQUISITION_APPROVE right is assigned to user. | User can't authorize the requisition. The proper right REQUISITION_AUTHORIZE is not associated with User. | ||
22 | Try to approve the requisition when REQUISITION_APPROVE right is assigned to user. | The requisition has been successfully approved. | ||
23 | Try to initiate or submit the requisition when REQUISITION_APPROVE right is assigned to user. | User can't initiate/submit the requisition. The proper right REQUISITION_CREATE is not associated with User. | ||
24 | Try to view the requisition when REQUISITION_APPROVE right is assigned to user. | The details of requisition are displayed. | ||
25 | Reassign the right: REQUISITION_APPROVE and assign the user a right: REQUISITION_CREATE.
{ | |||
26 | Try to delete the requisition when REQUISITION_CREATE right is assigned to user. | User can't delete the requisition. The proper right REQUISITION_DELETE is not associated with User. | ||
27 | Try to authorize the requisition when REQUISITION_CREATE right is assigned to user. | User can't authorize the requisition. The proper right REQUISITION_AUTHORIZE is not associated with User. | ||
28 | Try to approve the requisition when REQUISITION_CREATE right is assigned to user. | User can't approve the requisition. The proper right REQUISITION_APPROVE is not associated with User. | ||
29 | Try to initiate or submit the requisition when REQUISITION_CREATE right is assigned to user. | It's possible to initiate the requisition. The submission process is possible too. | ||
30 | Try to view the requisition when REQUISITION_CREATE right is assigned to user. | The details of requisition has been displayed. |
Post – conditions: |