GrantRoleToSubject

all > net.hostsharing.hsadminng.rbac.grant > RbacGrantControllerAcceptanceTest$GrantRoleToSubject
2

tests
0

failures
0

ignored
0.947s

duration
100%

successful

Tests

Test Duration Result
packageAdmin_canGrantOwnPackageAdminRole_toArbitraryUser() 0.487s passed
packageAdmin_canNotGrantAlienPackageAdminRole_toArbitraryUser() 0.460s passed

Standard output

2026-08-10T16:40:25.336Z  WARN 369 --- [o-auto-3-exec-5] o.h.engine.jdbc.spi.SqlExceptionHelper   : SQL Error: 0, SQLState: P0001
2026-08-10T16:40:25.336Z ERROR 369 --- [o-auto-3-exec-5] o.h.engine.jdbc.spi.SqlExceptionHelper   : ERROR: [403] Access to granted role rbactest.package#yyy00:ADMIN (cbdc1bf7-8fdd-4373-8fe8-ba5b1bdb1a44) forbidden for rbactest.package#xxx00:ADMIN (276bbc57-4bbf-45f2-ba56-b2e7e16eadb8)
  Where: PL/pgSQL function rbac.grantroletosubject(uuid,uuid,uuid,boolean) line 22 at RAISE
SQL statement "call rbac.grantRoleToSubject(rbac.assumedRoleUuid(), new.grantedRoleUuid, new.subjectUuid, new.assumed)"
PL/pgSQL function rbac.insert_grant_tf() line 5 at CALL
HTTP/1.1 403 
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Content-Type: application/json
Transfer-Encoding: chunked
Date: Mon, 10 Aug 2026 16:40:25 GMT
Keep-Alive: timeout=60
Connection: keep-alive

{
    "timestamp": "2026-08-10 04:40:25",
    "path": "",
    "statusCode": 403,
    "statusPhrase": "Forbidden",
    "message": "ERROR: [403] Access to granted role rbactest.package#yyy00:ADMIN (cbdc1bf7-8fdd-4373-8fe8-ba5b1bdb1a44) forbidden for rbactest.package#xxx00:ADMIN (276bbc57-4bbf-45f2-ba56-b2e7e16eadb8)"
}
HTTP/1.1 201 
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Location: http://localhost:34015/api/rbac.yaml/grants/276bbc57-4bbf-45f2-ba56-b2e7e16eadb8
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Content-Type: application/json
Transfer-Encoding: chunked
Date: Mon, 10 Aug 2026 16:40:25 GMT
Keep-Alive: timeout=60
Connection: keep-alive

{
    "grantedByRoleIdName": "rbactest.package#xxx00:ADMIN",
    "grantedByRole.uuid": "276bbc57-4bbf-45f2-ba56-b2e7e16eadb8",
    "assumed": true,
    "grantedRoleIdName": "rbactest.package#xxx00:ADMIN",
    "grantedRole.uuid": "276bbc57-4bbf-45f2-ba56-b2e7e16eadb8",
    "granteeSubjectName": "tst-user_rzivqodz",
    "granteeSubject.uuid": "8a6cf8a0-4a70-413d-af6c-fe6fe6dbb505"
}