GrantRoleToSubject
Tests
| Test |
Duration |
Result |
| packageAdmin_canGrantOwnPackageAdminRole_toArbitraryUser() |
0.441s |
passed |
| packageAdmin_canNotGrantAlienPackageAdminRole_toArbitraryUser() |
0.388s |
passed |
Standard output
2026-08-10T16:32:18.976Z WARN 368 --- [-auto-3-exec-10] o.h.engine.jdbc.spi.SqlExceptionHelper : SQL Error: 0, SQLState: P0001
2026-08-10T16:32:18.976Z ERROR 368 --- [-auto-3-exec-10] o.h.engine.jdbc.spi.SqlExceptionHelper : ERROR: [403] Access to granted role rbactest.package#yyy00:ADMIN (abe5fe6e-769a-4b62-b2d0-33ccb6468cdc) forbidden for rbactest.package#xxx00:ADMIN (528c8b2d-1128-4c64-bcba-38a738c6c58e)
Where: PL/pgSQL function rbac.grantroletosubject(uuid,uuid,uuid,boolean) line 22 at RAISE
SQL statement "call rbac.grantRoleToSubject(rbac.assumedRoleUuid(), new.grantedRoleUuid, new.subjectUuid, new.assumed)"
PL/pgSQL function rbac.insert_grant_tf() line 5 at CALL
HTTP/1.1 403
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Content-Type: application/json
Transfer-Encoding: chunked
Date: Mon, 10 Aug 2026 16:32:18 GMT
Keep-Alive: timeout=60
Connection: keep-alive
{
"timestamp": "2026-08-10 04:32:18",
"path": "",
"statusCode": 403,
"statusPhrase": "Forbidden",
"message": "ERROR: [403] Access to granted role rbactest.package#yyy00:ADMIN (abe5fe6e-769a-4b62-b2d0-33ccb6468cdc) forbidden for rbactest.package#xxx00:ADMIN (528c8b2d-1128-4c64-bcba-38a738c6c58e)"
}
HTTP/1.1 201
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Location: http://localhost:43651/api/rbac.yaml/grants/528c8b2d-1128-4c64-bcba-38a738c6c58e
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Content-Type: application/json
Transfer-Encoding: chunked
Date: Mon, 10 Aug 2026 16:32:19 GMT
Keep-Alive: timeout=60
Connection: keep-alive
{
"grantedByRoleIdName": "rbactest.package#xxx00:ADMIN",
"grantedByRole.uuid": "528c8b2d-1128-4c64-bcba-38a738c6c58e",
"assumed": true,
"grantedRoleIdName": "rbactest.package#xxx00:ADMIN",
"grantedRole.uuid": "528c8b2d-1128-4c64-bcba-38a738c6c58e",
"granteeSubjectName": "tst-user_qaimtypy",
"granteeSubject.uuid": "5fba7adb-8a5c-4fe1-b449-f36be5c2270d"
}