GrantRoleToSubject
Tests
| Test |
Duration |
Result |
| packageAdmin_canGrantOwnPackageAdminRole_toArbitraryUser() |
0.371s |
passed |
| packageAdmin_canNotGrantAlienPackageAdminRole_toArbitraryUser() |
0.393s |
passed |
Standard output
2026-08-10T13:35:53.643Z WARN 370 --- [o-auto-3-exec-7] o.h.engine.jdbc.spi.SqlExceptionHelper : SQL Error: 0, SQLState: P0001
2026-08-10T13:35:53.644Z ERROR 370 --- [o-auto-3-exec-7] o.h.engine.jdbc.spi.SqlExceptionHelper : ERROR: [403] Access to granted role rbactest.package#yyy00:ADMIN (ddd93875-868f-44f7-bb27-643b1a994b94) forbidden for rbactest.package#xxx00:ADMIN (5df7ec0d-a8ed-4549-892a-7dcb558e4a31)
Where: PL/pgSQL function rbac.grantroletosubject(uuid,uuid,uuid,boolean) line 22 at RAISE
SQL statement "call rbac.grantRoleToSubject(rbac.assumedRoleUuid(), new.grantedRoleUuid, new.subjectUuid, new.assumed)"
PL/pgSQL function rbac.insert_grant_tf() line 5 at CALL
HTTP/1.1 403
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Content-Type: application/json
Transfer-Encoding: chunked
Date: Mon, 10 Aug 2026 13:35:53 GMT
Keep-Alive: timeout=60
Connection: keep-alive
{
"timestamp": "2026-08-10 01:35:53",
"path": "",
"statusCode": 403,
"statusPhrase": "Forbidden",
"message": "ERROR: [403] Access to granted role rbactest.package#yyy00:ADMIN (ddd93875-868f-44f7-bb27-643b1a994b94) forbidden for rbactest.package#xxx00:ADMIN (5df7ec0d-a8ed-4549-892a-7dcb558e4a31)"
}
HTTP/1.1 201
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Location: http://localhost:36593/api/rbac.yaml/grants/5df7ec0d-a8ed-4549-892a-7dcb558e4a31
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Content-Type: application/json
Transfer-Encoding: chunked
Date: Mon, 10 Aug 2026 13:35:54 GMT
Keep-Alive: timeout=60
Connection: keep-alive
{
"grantedByRoleIdName": "rbactest.package#xxx00:ADMIN",
"grantedByRole.uuid": "5df7ec0d-a8ed-4549-892a-7dcb558e4a31",
"assumed": true,
"grantedRoleIdName": "rbactest.package#xxx00:ADMIN",
"grantedRole.uuid": "5df7ec0d-a8ed-4549-892a-7dcb558e4a31",
"granteeSubjectName": "tst-user_pvnjnftq",
"granteeSubject.uuid": "2f7f6925-016f-4809-9024-21096701dbca"
}