Scenario #9020: Fetch Rbac Context with Claimed But No Effective Groups After Assuming Roles

Fetches the RBAC context for the login user / current subject.

Properties

Given

name	value
subjectName	hsh-fran_superuser
assumedRoles	rbactest.package#xxx00:ADMIN;rbactest.package#yyy00:ADMIN
expectedSubjectType	USER
expectedToBeGlobalAdmin	true

Expected

name	value
expectedClaimedGroups	[ “/hsh-Hostmasters”, “/not-synchronized” ]
expectedEffectiveGroups	[]

RBAC Context

HTTP GET "/api/rbac/context" \
  -H "Authorization: Bearer $HSADMINNG_JWT_BEARER" \
  `# {` \
  `#   "sub" : "uuid<hsh-fran_superuser>",` \
  `#   "groups" : [` \
  `#     "/hsh-Hostmasters",` \
  `#     "/not-synchronized"` \
  `#   ]` \
  `# }` \
  -H 'Hostsharing-Assumed-Roles: rbactest.package#xxx00:ADMIN;rbactest.package#yyy00:ADMIN'
=> status: 200 OK 
{
  "subject" : {
    "uuid" : "8fb32bb1-4696-534f-93d1-b03df461d689",
    "name" : "hsh-fran_superuser",
    "type" : "USER"
  },
  "assumedRoles" : [ {
    "uuid" : "7a2bf979-60ef-4220-a077-5076935c8541",
    "object.uuid" : "34229f81-8adc-4070-a792-afec1465cf66",
    "objectTable" : "rbactest.package",
    "objectIdName" : "xxx00",
    "roleType" : "ADMIN",
    "roleName" : "rbactest.package#34229f81-8adc-4070-a792-afec1465cf66:ADMIN",
    "roleIdName" : "rbactest.package#xxx00:ADMIN"
  }, {
    "uuid" : "123f015f-1df3-425a-b121-d1104be44055",
    "object.uuid" : "ad47793d-233e-48bb-807d-4564ffdc1f3b",
    "objectTable" : "rbactest.package",
    "objectIdName" : "yyy00",
    "roleType" : "ADMIN",
    "roleName" : "rbactest.package#ad47793d-233e-48bb-807d-4564ffdc1f3b:ADMIN",
    "roleIdName" : "rbactest.package#yyy00:ADMIN"
  } ],
  "claimedGroups" : [ "/hsh-Hostmasters", "/not-synchronized" ],
  "effectiveGroups" : [ ],
  "globalAdmin" : true
}

---

generated on 2026-07-17 01:42:18 for branch