...
Test # | source | function | target | result |
|---|---|---|---|---|
Test 3 | SuperUser | can SU | SuperUser | false |
| SuperUser | can SU | Priv User | true |
Test 3 | SuperUser | can SU | Standard User | true |
Test 5 | Standard User | can SU | SuperUser | false |
| Standard User | can SU | Priv User | false |
Test 4 | Standard User | can SU | Standard User | false |
Test 6a | Priv User | can SU | SuperUser | false |
Test 6b | Priv User | can SU | Standard User | true |
Test 6c | Priv User | can SU | Priv User | true |
...
- Login as admin and access the Realms tool and select the realm entitled '!su.can_su_realm'.
- From the Edit Realm screen, select the Add Role link and type in a Role Id name (for example, 'Can SU'.)
- Check the checkbox next to 'su.can_su' permission for that role and then Save.
- From the Edit Realm screen, select Grant Ability.
- Type in the name of a non-SuperUser in the test site, select the Rolerole name you created, and then Save.
- Repeat the previous step - you . You now have 2 non-SuperUsers with SU access - they are 'priveleged' users.
Test 6a - Validate Priveleged User cannot SU SuperUser
Logout and re-login as one of the Standard Priveleged User username given in Test 5.
Select the test site that contains the SU Tool.
Select SU Tool and type in the name of SuperUser and select 'become user'.
Expected result: 'unauthorized' - Privileged users cannot su SU a SuperUser account.
6-b
...
6b - Validate Priveleged User can SU Standard User
Reset the SU Tool again(by using the up arrow.)
Type in the name of another standard user and select 'become user'.
Expected result: success
6c - Validate Priveleged User can SU another Priveleged User
Logout and re-login as one of the Priveleged User.
Select the test site that contains the SU Tool.
Type in the name of the other Priveleged User and select 'become user'.
Expected result: success
SU Tool Setup
To setup the SU Tool in a particular course or project, login as an admin and follow these steps:
...