Users and Permissions Test Plan

  • New server should allow admin/admin authentication
  • Cannot revoke "admin" user
  • Can add new user and that user has access
  • Can change user password and old password doesn't work while new one does work
  • All creds persist after server restart
  • Passwords not exposed in client or server heap dumps
  • Error messages when using incorrect credentials
  • Password change takes affect immediately
    • Start connection with creds
    • Change creds
    • Subsequent client calls on that connection should not work (SecurityException should be thrown)