...
Test # | source | function | target | result |
|---|---|---|---|---|
Test 3 | SuperUser | can SU | SuperUser | false |
| SuperUser | can SU | Priv User | true |
Test 3 | SuperUser | can SU | Standard User | true |
Test 5 | Standard User | can SU | SuperUser | false |
| Standard User | can SU | Priv User | false |
Test 4 | Standard User | can SU | Standard User | false |
Test 6a | Priv User | can SU | SuperUser | false |
Test 6b | Priv User | can SU | Standard User | true |
| Priv User | can SU | Priv User | true |
...
Expected result: '!su.can_su_realm' will be created if missing the first time the tool is opened by a Standard User.
Test 3 - Validate SuperUser
...
can SU except as another SuperUser
Login as admin and select the test site that contains the SU Tool.
Type in the name of another SuperUser and select 'become user'.
Expected result: 'unauthorized' - SuperUsers cannot su a SuperUser account
Select the up arrow (Reset function.)
Type in the name of a Standard User and select 'become user'.
Expected result: success
Test 4 - Validate Standard User cannot SU another Standard User
...