Test Case #:882
Test Case Name: Add Rights checks to requisitions save/submit/approve/delete endpoints | |
System: openLMIS | Subsystem: blue |
Test case designed by: Lucyna Laska | Design Date:17.05.2016 |
Short description: Prior to this ticket, the Requisition Service has been built without validating security. The Requisition Service actually needs to apply security validations to restrict permissions based on RBAC and Supervisory Nodes. Now that RBAC is implemented ( Initiate a Requisition: REQUISITION_CREATE Update a Requisition (setting fields in the line items): REQUISITION_CREATE or REQUISITION_APPROVE or REQUISITION_AUTHORIZE Submit a Requisition: REQUISITION_CREATE Approve a Requisition: REQUISITION_APPROVE Authorize a Requisition: REQUISITION_AUTHORIZE Delete a Requisition: REQUISITION_DELETE View a Requisition: REQUISITION_VIEW More info here: Requisition Rights |
|
Pre – conditions: |
Step | Action | Expected system response | Comment |
1 | |||
2 |
| ||
3 |
| ||
4 |
| ||
5 | |||
6 |
| ||
7 |
| ||
8 |
|
Post – conditions: |