Thanks to visit codestin.com
Credit goes to Github.com

Skip to content

Ambiguity in the summary related to the test case Testing for Bypassing Authorization Schema #1089

@mojtaba13133

Description

@mojtaba13133

These 2 lines are mentioned in the summary of the Testing for Bypassing Authorization Schema test case, but the access level has no meaning if the user has no session and no authentication.

1- Is it possible to access that resource even if the user is not authenticated?

2- Is it possible to access that resource after the log-out?

In your opinion, 2 items include Testing for Bypassing Authentication Schema test case?
Please explain to me how access after logout or without authentication can be included in this test case while this test case examines the level of access of authenticated users horizontally and vertically?
This seems to be in conflict with the Direct page request in Testing for Bypassing Authentication Schema

Metadata

Metadata

Labels

reviseNeeds quality review, updates, or revision

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions