# yaml-language-server: $schema=https://api.cerbos.dev/latest/cerbos/policy/v1/TestSuite.schema.json
---
resources:
  contract_advance_payment_1:
    id: "contract_advance_payment_1"
    kind: "contract_advance_payment"

name: ContractAdvancePaymentTestSuite
description: Test for verifying contract_advance_payment resource policies
tests:
  - name: Viewing a contract advance's payment
    input:
      principals:
        - rob
        - ciara
        - max
        - gab
      resources:
        - contract_advance_payment_1
      actions:
        - view
    expected:
      - principal: rob
        resource: contract_advance_payment_1
        actions:
          view: EFFECT_DENY
      - principal: ciara
        resource: contract_advance_payment_1
        actions:
          view: EFFECT_ALLOW
      - principal: max
        resource: contract_advance_payment_1
        actions:
          view: EFFECT_ALLOW
      - principal: gab
        resource: contract_advance_payment_1
        actions:
          view: EFFECT_ALLOW