forked from lei.chen/myxce
Routes and RBAC entries already existed from prior P0-2a/2b work. This adds three TDD tests that lock down the RBAC invariants: - TestRBAC_HostControl_ClusterAdminOnly: cluster_admin has host:control with domain=all; basic_user must NOT have host:control - TestRBAC_HostView_BasicUserHasAccess: basic_user has host:view with domain=all; queue_admin must NOT have host:view - TestRBAC_HostControl_DomainTypeIsAll: cluster_admin host:control domain type must be "all" (not hostgroup) All apiserver tests passing. |
||
|---|---|---|
| .. | ||
| apiserver | ||
| docs | ||
| tests/regression | ||
| xcecli | ||
| CLAUDE.md | ||
| Makefile | ||
| meson.build | ||