Record the hub-writer member entity.
bernd.worsch-3 is OpenBao entity f94b7c34-e151-30bb-b473-df3ccdbb9bf1. The member receipt must be that entity. T02 is done. The filed role stays unconfirmed until CCR-2026-0044 is approved. Assistant: grok Assistant-Session: 01a13b2d-5f6d-7a32-b2c9-384625c55ca6
This commit is contained in:
parent
c54193ae24
commit
a7f9516bb3
6 changed files with 44 additions and 27 deletions
|
|
@ -1,6 +1,7 @@
|
|||
from ops_mason.reuse_surface_hub_writer import (
|
||||
DATA,
|
||||
FORBIDDEN_ENTITY_ID,
|
||||
MEMBER_ENTITY_ID,
|
||||
METADATA,
|
||||
PARENT_DATA,
|
||||
POLICY,
|
||||
|
|
@ -15,7 +16,7 @@ def member(**overrides):
|
|||
"login": "ok",
|
||||
"policies": [POLICY],
|
||||
"identity_policies": [],
|
||||
"entity_id": "11111111-1111-1111-1111-111111111111",
|
||||
"entity_id": MEMBER_ENTITY_ID,
|
||||
"capabilities": {
|
||||
DATA: ["read"],
|
||||
METADATA: ["read"],
|
||||
|
|
@ -54,6 +55,11 @@ def test_admin_entity_and_broad_capabilities_fail():
|
|||
assert any("not exactly" in item for item in failures)
|
||||
|
||||
|
||||
def test_other_entity_fails():
|
||||
failures = assess(member(entity_id="11111111-1111-1111-1111-111111111111"))
|
||||
assert any("not the member entity" in item for item in failures)
|
||||
|
||||
|
||||
def test_missing_revoke_fails():
|
||||
assert any("not revoked" in item for item in assess(member(revoked=False)))
|
||||
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue