Scenario #9010: Fetch Rbac Context with Effective Groups

UseCase Fetch Rbac Context => RBAC Context

Fetches the RBAC context for the login user / current subject.

Properties

Given

name value
subjectName hsh-fran_superuser
assumedRoles
expectedSubjectType USER
expectedToBeGlobalAdmin true

Expected

name value
expectedClaimedGroups [ “/hsh-Hostmasters”, “/hsh-Team”, “/not-synchronized” ]
expectedEffectiveGroups [
  { “name”: “/hsh-Hostmasters” },
  { “name”: “/hsh-Team” }
]

RBAC Context

HTTP GET "/api/rbac/context" \
  -H "Authorization: Bearer $HSADMINNG_JWT_BEARER" \
  `# {` \
  `#   "sub" : "uuid<hsh-fran_superuser>",` \
  `#   "groups" : [` \
  `#     "/hsh-Hostmasters",` \
  `#     "/hsh-Team",` \
  `#     "/not-synchronized"` \
  `#   ]` \
  `# }` \
  -H 'Hostsharing-Assumed-Roles: '
=> status: 200 OK 
{
  "subject" : {
    "uuid" : "8fb32bb1-4696-534f-93d1-b03df461d689",
    "name" : "hsh-fran_superuser",
    "type" : "USER"
  },
  "assumedRoles" : [ ],
  "claimedGroups" : [ "/hsh-Hostmasters", "/hsh-Team", "/not-synchronized" ],
  "effectiveGroups" : [ {
    "uuid" : "dbbe1fdb-3c6a-5a94-a561-8cc95a200893",
    "name" : "/hsh-Hostmasters"
  }, {
    "uuid" : "b9e3e82e-35d3-5bb5-a376-d165badf4e25",
    "name" : "/hsh-Team"
  } ],
  "globalAdmin" : true
}

generated on 2026-07-17 01:42:18 for branch