# yaml-language-server: $schema=https://api.cerbos.dev/latest/cerbos/policy/v1/TestSuite.schema.json
---
resources:
  label_participant_1:
    id: "label_participant_1"
    kind: "label_participant"
    attr:
      tenant:
        tenant_uuid: "4abb13a2-aa83-438e-9159-23be3909889d"
        tenant_hierarchy: []
  label_participant_2:
    id: "label_participant_2"
    kind: "label_participant"
    attr:
      tenant:
        tenant_uuid: "9975c722-09d1-4e6f-800f-d101a07cdc21"
        tenant_hierarchy: []

name: LabelParticipantTestSuite 
description: Tests for verifying the label participant resource policy 
tests: 
  - name: Viewing a Label Participant's Fan Data
    input:
      principals:
        - olivia
        - brian
        - jordy
        - international_bob
      resources:
        - label_participant_1
        - label_participant_2
      actions:
        - view_fan_data
    expected:
      - principal: olivia
        resource: label_participant_1
        actions:
          view_fan_data: EFFECT_ALLOW
      - principal: olivia
        resource: label_participant_2
        actions:
          view_fan_data: EFFECT_DENY
      - principal: brian
        resource: label_participant_1
        actions:
          view_fan_data: EFFECT_ALLOW
      - principal: brian
        resource: label_participant_2
        actions:
          view_fan_data: EFFECT_DENY
      - principal: jordy
        resource: label_participant_1
        actions:
          view_fan_data: EFFECT_ALLOW
      - principal: jordy
        resource: label_participant_2
        actions:
          view_fan_data: EFFECT_DENY
      - principal: international_bob
        resource: label_participant_1
        actions:
          view_fan_data: EFFECT_ALLOW