75 lines
2.7 KiB
YAML
75 lines
2.7 KiB
YAML
|
[
|
||
|
|
{
|
||
|
|
"id": "fixture:qonto-assistant-agent-read-allow",
|
||
|
|
"request": {
|
||
|
|
"id": "check:qonto-assistant-read-t1",
|
||
|
|
"tenant": "tenant:friendly:binky",
|
||
|
|
"subject": {"id": "agent-harness-binky", "type": "agent"},
|
||
|
|
"action": "finance.qonto.read",
|
||
|
|
"resource": {"id": "finance-snapshot", "type": "finance-snapshot", "system": "qonto-assistant"},
|
||
|
|
"context": {}
|
||
|
|
},
|
||
|
|
"expect": {"effect": "allow", "reason": "finance_read_policy_matched"}
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "fixture:qonto-assistant-human-read-allow",
|
||
|
|
"request": {
|
||
|
|
"id": "check:qonto-assistant-read-t2",
|
||
|
|
"tenant": "tenant:friendly:binky",
|
||
|
|
"subject": {"id": "bernd.worsch", "type": "human"},
|
||
|
|
"action": "finance.qonto.read",
|
||
|
|
"resource": {"id": "finance-snapshot", "type": "finance-snapshot", "system": "qonto-assistant"},
|
||
|
|
"context": {}
|
||
|
|
},
|
||
|
|
"expect": {"effect": "allow", "reason": "finance_read_policy_matched"}
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "fixture:qonto-assistant-wrong-system-deny",
|
||
|
|
"request": {
|
||
|
|
"id": "check:qonto-assistant-read-t3",
|
||
|
|
"tenant": "tenant:friendly:binky",
|
||
|
|
"subject": {"id": "agent-harness-binky", "type": "agent"},
|
||
|
|
"action": "finance.qonto.read",
|
||
|
|
"resource": {"id": "x", "type": "finance-snapshot", "system": "some-other-system"},
|
||
|
|
"context": {}
|
||
|
|
},
|
||
|
|
"expect": {"effect": "deny", "reason": "wrong_system"}
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "fixture:qonto-assistant-unknown-action-deny",
|
||
|
|
"request": {
|
||
|
|
"id": "check:qonto-assistant-read-t4",
|
||
|
|
"tenant": "tenant:friendly:binky",
|
||
|
|
"subject": {"id": "agent-harness-binky", "type": "agent"},
|
||
|
|
"action": "finance.qonto.transfer",
|
||
|
|
"resource": {"id": "finance-snapshot", "type": "finance-snapshot", "system": "qonto-assistant"},
|
||
|
|
"context": {}
|
||
|
|
},
|
||
|
|
"expect": {"effect": "deny", "reason": "unknown_action"}
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "fixture:qonto-assistant-wrong-subject-type-deny",
|
||
|
|
"request": {
|
||
|
|
"id": "check:qonto-assistant-read-t5",
|
||
|
|
"tenant": "tenant:friendly:binky",
|
||
|
|
"subject": {"id": "unknown-device", "type": "device"},
|
||
|
|
"action": "finance.qonto.read",
|
||
|
|
"resource": {"id": "finance-snapshot", "type": "finance-snapshot", "system": "qonto-assistant"},
|
||
|
|
"context": {}
|
||
|
|
},
|
||
|
|
"expect": {"effect": "deny", "reason": "wrong_subject_type"}
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"id": "fixture:qonto-assistant-wrong-tenant-deny",
|
||
|
|
"request": {
|
||
|
|
"id": "check:qonto-assistant-read-t6",
|
||
|
|
"tenant": "tenant:friendly:some-other-company",
|
||
|
|
"subject": {"id": "agent-harness-binky", "type": "agent"},
|
||
|
|
"action": "finance.qonto.read",
|
||
|
|
"resource": {"id": "finance-snapshot", "type": "finance-snapshot", "system": "qonto-assistant"},
|
||
|
|
"context": {}
|
||
|
|
},
|
||
|
|
"expect": {"effect": "deny", "reason": "wrong_tenant"}
|
||
|
|
}
|
||
|
|
]
|