# The rule would allow application.access, but this package does not declare
# the action. The readback must answer not_applicable regardless (T01 §2).
- id: fixture:other-app-undeclared-rule-would-allow
  request:
    subject:
      id: user:alice
      attributes:
        groups: [app-users]
        assurance: {level: aal2, mfa: true}
    action: application.access
    resource: {id: other-app, type: application, system: other-app}
  expect:
    effect: allow
    reason: app_user