2017-07-26 21:45:26 +00:00
|
|
|
Feature: User has access restricted access to domains
|
|
|
|
|
2017-09-21 20:07:34 +00:00
|
|
|
@need-registered-user-john
|
2017-07-26 21:45:26 +00:00
|
|
|
Scenario: User john has admin access
|
2018-04-25 07:30:21 +00:00
|
|
|
When I visit "https://login.example.com:8080?rd=https://home.example.com:8080/"
|
2017-09-21 20:07:34 +00:00
|
|
|
And I login with user "john" and password "password"
|
|
|
|
And I use "REGISTERED" as TOTP token handle
|
2017-10-21 23:23:26 +00:00
|
|
|
And I click on "Sign in"
|
2017-11-02 20:34:07 +00:00
|
|
|
And I'm redirected to "https://home.example.com:8080/"
|
2018-03-28 22:04:59 +00:00
|
|
|
Then I have access to "https://public.example.com:8080/secret.html"
|
|
|
|
And I have access to "https://dev.example.com:8080/groups/admin/secret.html"
|
|
|
|
And I have access to "https://dev.example.com:8080/groups/dev/secret.html"
|
|
|
|
And I have access to "https://dev.example.com:8080/users/john/secret.html"
|
|
|
|
And I have access to "https://dev.example.com:8080/users/harry/secret.html"
|
|
|
|
And I have access to "https://dev.example.com:8080/users/bob/secret.html"
|
|
|
|
And I have access to "https://admin.example.com:8080/secret.html"
|
|
|
|
And I have access to "https://mx1.mail.example.com:8080/secret.html"
|
|
|
|
And I have access to "https://single_factor.example.com:8080/secret.html"
|
|
|
|
And I have no access to "https://mx2.mail.example.com:8080/secret.html"
|
2017-07-26 21:45:26 +00:00
|
|
|
|
2017-09-21 20:07:34 +00:00
|
|
|
@need-registered-user-bob
|
2017-07-26 21:45:26 +00:00
|
|
|
Scenario: User bob has restricted access
|
2018-04-25 07:30:21 +00:00
|
|
|
When I visit "https://login.example.com:8080?rd=https://home.example.com:8080/"
|
2017-09-21 20:07:34 +00:00
|
|
|
And I login with user "bob" and password "password"
|
|
|
|
And I use "REGISTERED" as TOTP token handle
|
2017-10-21 23:23:26 +00:00
|
|
|
And I click on "Sign in"
|
2017-11-02 20:34:07 +00:00
|
|
|
And I'm redirected to "https://home.example.com:8080/"
|
2018-03-28 22:04:59 +00:00
|
|
|
Then I have access to "https://public.example.com:8080/secret.html"
|
|
|
|
And I have no access to "https://dev.example.com:8080/groups/admin/secret.html"
|
|
|
|
And I have access to "https://dev.example.com:8080/groups/dev/secret.html"
|
|
|
|
And I have no access to "https://dev.example.com:8080/users/john/secret.html"
|
|
|
|
And I have no access to "https://dev.example.com:8080/users/harry/secret.html"
|
|
|
|
And I have access to "https://dev.example.com:8080/users/bob/secret.html"
|
|
|
|
And I have no access to "https://admin.example.com:8080/secret.html"
|
|
|
|
And I have access to "https://mx1.mail.example.com:8080/secret.html"
|
|
|
|
And I have no access to "https://single_factor.example.com:8080/secret.html"
|
|
|
|
And I have access to "https://mx2.mail.example.com:8080/secret.html"
|
2017-07-26 21:45:26 +00:00
|
|
|
|
2017-09-21 20:07:34 +00:00
|
|
|
@need-registered-user-harry
|
2017-07-26 21:45:26 +00:00
|
|
|
Scenario: User harry has restricted access
|
2018-04-25 07:30:21 +00:00
|
|
|
When I visit "https://login.example.com:8080?rd=https://home.example.com:8080/"
|
2017-09-21 20:07:34 +00:00
|
|
|
And I login with user "harry" and password "password"
|
|
|
|
And I use "REGISTERED" as TOTP token handle
|
2017-10-21 23:23:26 +00:00
|
|
|
And I click on "Sign in"
|
2017-11-02 20:34:07 +00:00
|
|
|
And I'm redirected to "https://home.example.com:8080/"
|
2018-03-28 22:04:59 +00:00
|
|
|
Then I have access to "https://public.example.com:8080/secret.html"
|
|
|
|
And I have no access to "https://dev.example.com:8080/groups/admin/secret.html"
|
|
|
|
And I have no access to "https://dev.example.com:8080/groups/dev/secret.html"
|
|
|
|
And I have no access to "https://dev.example.com:8080/users/john/secret.html"
|
|
|
|
And I have access to "https://dev.example.com:8080/users/harry/secret.html"
|
|
|
|
And I have no access to "https://dev.example.com:8080/users/bob/secret.html"
|
|
|
|
And I have no access to "https://admin.example.com:8080/secret.html"
|
|
|
|
And I have no access to "https://mx1.mail.example.com:8080/secret.html"
|
|
|
|
And I have no access to "https://single_factor.example.com:8080/secret.html"
|
|
|
|
And I have no access to "https://mx2.mail.example.com:8080/secret.html"
|