Scenario #9020: Fetch Rbac Context with Claimed But No Effective Groups After Assuming Roles

Fetches the RBAC context for the login user / current subject.

Properties

Given

name	value
subjectName	hsh-fran_superuser
assumedRoles	rbactest.package#xxx00:ADMIN;rbactest.package#yyy00:ADMIN
expectedSubjectType	USER
expectedToBeGlobalAdmin	true

Expected

name	value
expectedClaimedGroups	[ “/hsh-Hostmasters”, “/not-synchronized” ]
expectedEffectiveGroups	[]

RBAC Context

HTTP GET "/api/rbac/context" \
  -H "Authorization: Bearer $HSADMINNG_JWT_BEARER" \
  `# {` \
  `#   "sub" : "uuid<hsh-fran_superuser>",` \
  `#   "groups" : [` \
  `#     "/hsh-Hostmasters",` \
  `#     "/not-synchronized"` \
  `#   ]` \
  `# }` \
  -H 'Hostsharing-Assumed-Roles: rbactest.package#xxx00:ADMIN;rbactest.package#yyy00:ADMIN'
=> status: 200 OK 
{
  "subject" : {
    "uuid" : "8fb32bb1-4696-534f-93d1-b03df461d689",
    "name" : "hsh-fran_superuser",
    "organization" : null,
    "type" : "USER"
  },
  "assumedRoles" : [ {
    "uuid" : "d370ba59-4f84-42a0-ae01-b368a7ed5534",
    "object.uuid" : "00391eb5-0d71-4778-85e7-cd8940b689a4",
    "objectTable" : "rbactest.package",
    "objectIdName" : "xxx00",
    "roleType" : "ADMIN",
    "roleName" : "rbactest.package#00391eb5-0d71-4778-85e7-cd8940b689a4:ADMIN",
    "roleIdName" : "rbactest.package#xxx00:ADMIN"
  }, {
    "uuid" : "4a062ccc-fc5b-44f6-a753-b98187c498eb",
    "object.uuid" : "0c84e7ac-9b8f-461b-955b-132074273e95",
    "objectTable" : "rbactest.package",
    "objectIdName" : "yyy00",
    "roleType" : "ADMIN",
    "roleName" : "rbactest.package#0c84e7ac-9b8f-461b-955b-132074273e95:ADMIN",
    "roleIdName" : "rbactest.package#yyy00:ADMIN"
  } ],
  "claimedGroups" : [ "/hsh-Hostmasters", "/not-synchronized" ],
  "effectiveGroups" : [ ],
  "globalAdmin" : true,
  "apiKey" : null
}

---

generated on 2026-08-10 01:37:46 for branch