@@ -152,6 +152,7 @@ Feature: Authorization checking
152152 And the JSON node "data.securedDummy.relatedDummy" should exist
153153 And the JSON node "data.securedDummy.relatedDummy" should not be null
154154
155+ @v3
155156 @createSchema
156157 Scenario : A user can't access a secured collection relation
157158 Given there are 1 SecuredDummy objects owned by dunglas with related dummies
@@ -175,6 +176,7 @@ Feature: Authorization checking
175176 And the header "Content-Type" should be equal to "application/json"
176177 And the JSON node "data.securedDummy.relatedDummies" should be null
177178
179+ @v3
178180 Scenario : A user can't access a secured relation
179181 When I add "Authorization" header equal to "Basic ZHVuZ2xhczprZXZpbg=="
180182 And I send the following GraphQL request:
@@ -232,6 +234,7 @@ Feature: Authorization checking
232234 And the JSON node "errors[0].message" should be equal to "Access Denied."
233235 And the JSON node "data.relatedSecuredDummies" should be null
234236
237+ @v3
235238 Scenario : A user can access a secured collection relation
236239 When I add "Authorization" header equal to "Basic ZHVuZ2xhczprZXZpbg=="
237240 And I send the following GraphQL request:
@@ -253,6 +256,7 @@ Feature: Authorization checking
253256 And the header "Content-Type" should be equal to "application/json"
254257 And the JSON node "data.securedDummy.relatedSecuredDummies" should have 1 element
255258
259+ @v3
256260 Scenario : A user can access a secured relation
257261 When I add "Authorization" header equal to "Basic ZHVuZ2xhczprZXZpbg=="
258262 And I send the following GraphQL request:
@@ -271,6 +275,7 @@ Feature: Authorization checking
271275 And the JSON node "data.securedDummy.relatedSecuredDummy" should exist
272276 And the JSON node "data.securedDummy.relatedSecuredDummy" should not be null
273277
278+ @v3
274279 Scenario : A user can access a non-secured collection relation
275280 When I add "Authorization" header equal to "Basic ZHVuZ2xhczprZXZpbg=="
276281 And I send the following GraphQL request:
@@ -292,6 +297,7 @@ Feature: Authorization checking
292297 And the header "Content-Type" should be equal to "application/json"
293298 And the JSON node "data.securedDummy.publicRelatedSecuredDummies" should have 1 element
294299
300+ @v3
295301 Scenario : A user can access a non-secured relation
296302 When I add "Authorization" header equal to "Basic ZHVuZ2xhczprZXZpbg=="
297303 When I send the following GraphQL request:
@@ -382,6 +388,7 @@ Feature: Authorization checking
382388 And the response should be in JSON
383389 And the JSON node "data.securedDummies.edges[2].node.ownerOnlyProperty" should be equal to "it works"
384390
391+ @v3
385392 Scenario : An admin can't create a secured resource with an owner-only property if they won't be the owner
386393 When I add "Authorization" header equal to "Basic YWRtaW46a2l0dGVu"
387394 And I send the following GraphQL request:
@@ -465,6 +472,7 @@ Feature: Authorization checking
465472 And the JSON node "data.securedDummy.adminOnlyProperty" should exist
466473 And the JSON node "data.securedDummy.adminOnlyProperty" should not be null
467474
475+ @v3
468476 Scenario : A user can't see a secured admin-only property on an object they own
469477 When I add "Authorization" header equal to "Basic ZHVuZ2xhczprZXZpbg=="
470478 And I send the following GraphQL request:
@@ -527,6 +535,7 @@ Feature: Authorization checking
527535 And the response should be in JSON
528536 And the JSON node "data.securedDummy.ownerOnlyProperty" should be equal to the string "updated"
529537
538+ @v3
530539 Scenario : An admin can't see a secured owner-only property on an object they don't own
531540 When I add "Authorization" header equal to "Basic YWRtaW46a2l0dGVu"
532541 And I send the following GraphQL request:
0 commit comments