Scenario #9020: Fetch Rbac Context with Claimed But No Effective Groups After Assuming Roles

Fetches the RBAC context for the login user / current subject.

Properties

Given

name	value
subjectName	hsh-fran_superuser
assumedRoles	rbactest.package#xxx00:ADMIN;rbactest.package#yyy00:ADMIN
expectedSubjectType	USER
expectedToBeGlobalAdmin	true

Expected

name	value
expectedClaimedGroups	[ “/hsh-Hostmasters”, “/not-synchronized” ]
expectedEffectiveGroups	[]

RBAC Context

HTTP GET "/api/rbac/context" \
  -H "Authorization: Bearer $HSADMINNG_JWT_BEARER" \
  `# {` \
  `#   "sub" : "uuid<hsh-fran_superuser>",` \
  `#   "groups" : [` \
  `#     "/hsh-Hostmasters",` \
  `#     "/not-synchronized"` \
  `#   ]` \
  `# }` \
  -H 'Hostsharing-Assumed-Roles: rbactest.package#xxx00:ADMIN;rbactest.package#yyy00:ADMIN'
=> status: 200 OK 
{
  "subject" : {
    "uuid" : "8fb32bb1-4696-534f-93d1-b03df461d689",
    "name" : "hsh-fran_superuser",
    "organization" : null,
    "type" : "USER"
  },
  "assumedRoles" : [ {
    "uuid" : "fe3e6886-0256-41dc-874a-a7f4410c587f",
    "object.uuid" : "26f152f1-abae-4ef7-9c81-5a1d27f700e7",
    "objectTable" : "rbactest.package",
    "objectIdName" : "xxx00",
    "roleType" : "ADMIN",
    "roleName" : "rbactest.package#26f152f1-abae-4ef7-9c81-5a1d27f700e7:ADMIN",
    "roleIdName" : "rbactest.package#xxx00:ADMIN"
  }, {
    "uuid" : "3899b8d7-360b-45ae-b951-aa506a008648",
    "object.uuid" : "c2ed6885-4f15-42dd-8489-9562e663d10b",
    "objectTable" : "rbactest.package",
    "objectIdName" : "yyy00",
    "roleType" : "ADMIN",
    "roleName" : "rbactest.package#c2ed6885-4f15-42dd-8489-9562e663d10b:ADMIN",
    "roleIdName" : "rbactest.package#yyy00:ADMIN"
  } ],
  "claimedGroups" : [ "/hsh-Hostmasters", "/not-synchronized" ],
  "effectiveGroups" : [ ],
  "globalAdmin" : true,
  "apiKey" : null
}

---

generated on 2026-08-10 04:42:18 for branch HEAD