# yaml-language-server: $schema=https://api.cerbos.dev/latest/cerbos/policy/v1/TestSuite.schema.json
---
resources:
  awal_uk_signing_entity:
    id: "awal_uk_signing_entity"
    kind: "signing_entity"

name: SigningEntityTestSuite
description: Test for verifying signing_entity resource policies
tests:
  - name: Viewing a signing entity
    input:
      principals:
        - rob
        - ciara
        - max
        - gab
      resources:
        - awal_uk_signing_entity
      actions:
        - view
    expected:
      - principal: rob
        resource: awal_uk_signing_entity
        actions:
          view: EFFECT_DENY
      - principal: ciara
        resource: awal_uk_signing_entity
        actions:
          view: EFFECT_ALLOW
      - principal: max
        resource: awal_uk_signing_entity
        actions:
          view: EFFECT_ALLOW
      - principal: gab
        resource: awal_uk_signing_entity
        actions:
          view: EFFECT_ALLOW