Scenario #9020: Fetch Rbac Context with Claimed But No Effective Groups After Assuming Roles

Fetches the RBAC context for the login user / current subject.

Properties

Given

name	value
subjectName	hsh-fran_superuser
assumedRoles	rbactest.package#xxx00:ADMIN;rbactest.package#yyy00:ADMIN
expectedSubjectType	USER
expectedToBeGlobalAdmin	true

Expected

name	value
expectedClaimedGroups	[ “/hsh-Hostmasters”, “/not-synchronized” ]
expectedEffectiveGroups	[]

RBAC Context

HTTP GET "/api/rbac/context" \
  -H "Authorization: Bearer $HSADMINNG_JWT_BEARER" \
  `# {` \
  `#   "sub" : "uuid<hsh-fran_superuser>",` \
  `#   "groups" : [` \
  `#     "/hsh-Hostmasters",` \
  `#     "/not-synchronized"` \
  `#   ]` \
  `# }` \
  -H 'Hostsharing-Assumed-Roles: rbactest.package#xxx00:ADMIN;rbactest.package#yyy00:ADMIN'
=> status: 200 OK 
{
  "subject" : {
    "uuid" : "8fb32bb1-4696-534f-93d1-b03df461d689",
    "name" : "hsh-fran_superuser",
    "organization" : null,
    "type" : "USER"
  },
  "assumedRoles" : [ {
    "uuid" : "4cb19a6c-e1b2-44a2-b178-e91681402a3f",
    "object.uuid" : "f978af5a-9103-451e-9854-fd2add19e8bc",
    "objectTable" : "rbactest.package",
    "objectIdName" : "xxx00",
    "roleType" : "ADMIN",
    "roleName" : "rbactest.package#f978af5a-9103-451e-9854-fd2add19e8bc:ADMIN",
    "roleIdName" : "rbactest.package#xxx00:ADMIN"
  }, {
    "uuid" : "830aecac-9ac3-48fa-836f-f7b1072329a6",
    "object.uuid" : "6e154d46-f4e2-43da-a85a-c895e6debe11",
    "objectTable" : "rbactest.package",
    "objectIdName" : "yyy00",
    "roleType" : "ADMIN",
    "roleName" : "rbactest.package#6e154d46-f4e2-43da-a85a-c895e6debe11:ADMIN",
    "roleIdName" : "rbactest.package#yyy00:ADMIN"
  } ],
  "claimedGroups" : [ "/hsh-Hostmasters", "/not-synchronized" ],
  "effectiveGroups" : [ ],
  "globalAdmin" : true,
  "apiKey" : null
}

---

generated on 2026-08-10 04:34:14 for branch HEAD