Scenario #9020: Fetch Rbac Context with Claimed But No Effective Groups After Assuming Roles

Fetches the RBAC context for the login user / current subject.

Properties

Given

name	value
subjectName	hsh-fran_superuser
assumedRoles	rbactest.package#xxx00:ADMIN;rbactest.package#yyy00:ADMIN
expectedSubjectType	USER
expectedToBeGlobalAdmin	true

Expected

name	value
expectedClaimedGroups	[ “/hsh-Hostmasters”, “/not-synchronized” ]
expectedEffectiveGroups	[]

RBAC Context

HTTP GET "/api/rbac/context" \
  -H "Authorization: Bearer $HSADMINNG_JWT_BEARER" \
  `# {` \
  `#   "sub" : "uuid<hsh-fran_superuser>",` \
  `#   "groups" : [` \
  `#     "/hsh-Hostmasters",` \
  `#     "/not-synchronized"` \
  `#   ]` \
  `# }` \
  -H 'Hostsharing-Assumed-Roles: rbactest.package#xxx00:ADMIN;rbactest.package#yyy00:ADMIN'
=> status: 200 OK 
{
  "subject" : {
    "uuid" : "8fb32bb1-4696-534f-93d1-b03df461d689",
    "name" : "hsh-fran_superuser",
    "organization" : null,
    "type" : "USER"
  },
  "assumedRoles" : [ {
    "uuid" : "90279e85-54e6-4ddc-9df2-861bc9b23550",
    "object.uuid" : "06628e23-1d44-455e-a3b4-34e04d3905b6",
    "objectTable" : "rbactest.package",
    "objectIdName" : "xxx00",
    "roleType" : "ADMIN",
    "roleName" : "rbactest.package#06628e23-1d44-455e-a3b4-34e04d3905b6:ADMIN",
    "roleIdName" : "rbactest.package#xxx00:ADMIN"
  }, {
    "uuid" : "e634c04e-1d72-4212-9d60-db35d5310acc",
    "object.uuid" : "e3bec6fa-a381-4f76-9137-7ae8202e6efb",
    "objectTable" : "rbactest.package",
    "objectIdName" : "yyy00",
    "roleType" : "ADMIN",
    "roleName" : "rbactest.package#e3bec6fa-a381-4f76-9137-7ae8202e6efb:ADMIN",
    "roleIdName" : "rbactest.package#yyy00:ADMIN"
  } ],
  "claimedGroups" : [ "/hsh-Hostmasters", "/not-synchronized" ],
  "effectiveGroups" : [ ],
  "globalAdmin" : true,
  "apiKey" : null
}

---

generated on 2026-08-10 03:08:24 for branch HEAD