...
source | function | target | result | ||||||
---|---|---|---|---|---|---|---|---|---|
user A | can SU | user B | true/false |
|
What is expected:
test | source | function | target | result | Test # |
---|---|---|---|---|---|
SuperUser | can SU | SuperUser | false |
| test 3 |
SuperUser | can SU | Priv User | true |
|
|
SuperUser | can SU | Standard User | true |
|
|
Standard User | can SU | SuperUser | false |
| test 5 |
Standard User | can SU | Priv User | false |
|
|
Standard User | can SU | Stardard Standard User | false |
| test 4 |
Priv User | can SU | SuperUser | false |
| test 6a |
Priv User | can SU | Standard User | true |
| test 6b |
Priv User | can SU | Priv User | true |
|
|
...
Expected result: 'unauthorized' - SuperUsers cannot su a SuperUser account
Test 4 - Validate Standard User cannot SU another Standard User
Login as a standard user Standard User and select the tool page test site that contains the SU Tool.
type Type in the name of another standard user Standard User and select 'become user'.
Expected result: 'unauthorized' - Standard users cannot su another standard user account with out the correct permissions
...