@@ -191,11 +191,11 @@ describe user role 'Administrator';
191191/**
192192 * Create a simple module role without description.
193193 */
194- create module role SecTest.user ;
194+ create module role SecTest.User ;
195195/
196196
197197-- Describe a specific module role (shows DDL + which user roles include it)
198- describe module role SecTest.user ;
198+ describe module role SecTest.User ;
199199
200200-- ============================================================================
201201-- Level 2.2: Module Role with Description
@@ -235,7 +235,7 @@ create module role SecTest.Viewer description 'Read-only access for viewing data
235235/**
236236 * Allow the User role to execute the customer creation microflow.
237237 */
238- grant execute on microflow SecTest.ACT_Customer_Create to SecTest.user ;
238+ grant execute on microflow SecTest.ACT_Customer_Create to SecTest.User ;
239239/
240240
241241-- Verify the grant
@@ -249,7 +249,7 @@ show access on microflow SecTest.ACT_Customer_Create;
249249/**
250250 * Allow both User and Administrator roles to process orders.
251251 */
252- grant execute on microflow SecTest.ACT_Order_Process to SecTest.user , SecTest.Administrator;
252+ grant execute on microflow SecTest.ACT_Order_Process to SecTest.User , SecTest.Administrator;
253253/
254254
255255-- ============================================================================
@@ -269,7 +269,7 @@ grant execute on microflow SecTest.ACT_Customer_Delete to SecTest.Administrator;
269269/**
270270 * Remove User's ability to process orders (admin-only now).
271271 */
272- revoke execute on microflow SecTest.ACT_Order_Process from SecTest.user ;
272+ revoke execute on microflow SecTest.ACT_Order_Process from SecTest.User ;
273273/
274274
275275-- Verify the revoke
@@ -290,7 +290,7 @@ revoke execute on microflow SecTest.ACT_Customer_Delete from SecTest.Administrat
290290/**
291291 * Granting a role that already has access is a no-op (safe to repeat).
292292 */
293- grant execute on microflow SecTest.ACT_Customer_Create to SecTest.user ;
293+ grant execute on microflow SecTest.ACT_Customer_Create to SecTest.User ;
294294/
295295
296296
@@ -308,7 +308,7 @@ grant execute on microflow SecTest.ACT_Customer_Create to SecTest.user;
308308/**
309309 * Allow users to view the customer overview page.
310310 */
311- grant view on page SecTest.Customer_Overview to SecTest.user ;
311+ grant view on page SecTest.Customer_Overview to SecTest.User ;
312312/
313313
314314-- Verify
@@ -322,7 +322,7 @@ show access on page SecTest.Customer_Overview;
322322/**
323323 * Allow both users and administrators to view orders.
324324 */
325- grant view on page SecTest.Order_Overview to SecTest.user , SecTest.Administrator;
325+ grant view on page SecTest.Order_Overview to SecTest.User , SecTest.Administrator;
326326/
327327
328328-- ============================================================================
@@ -332,7 +332,7 @@ grant view on page SecTest.Order_Overview to SecTest.user, SecTest.Administrator
332332/**
333333 * Remove User's view access on order overview (admin-only now).
334334 */
335- revoke view on page SecTest.Order_Overview from SecTest.user ;
335+ revoke view on page SecTest.Order_Overview from SecTest.User ;
336336/
337337
338338-- Verify - should only show Administrator
@@ -374,7 +374,7 @@ grant SecTest.Viewer on SecTest.Customer (read *);
374374/**
375375 * Grant read access to specific attributes, write to a subset.
376376 */
377- grant SecTest.user on SecTest.Customer (read (Name, Email), write (Email));
377+ grant SecTest.User on SecTest.Customer (read (Name, Email), write (Email));
378378/
379379
380380-- ============================================================================
@@ -384,7 +384,7 @@ grant SecTest.user on SecTest.Customer (read (Name, Email), write (Email));
384384/**
385385 * Grant access only to active customers using an XPath constraint.
386386 */
387- grant SecTest.user on SecTest.Order (read *, write *) where '[Status = ''Open'']';
387+ grant SecTest.User on SecTest.Order (read *, write *) where '[Status = ''Open'']';
388388/
389389
390390-- Verify entity access
@@ -398,7 +398,7 @@ show access on SecTest.Customer;
398398/**
399399 * GRANT is additive: adding Notes access preserves existing Name and Email.
400400 */
401- grant SecTest.user on SecTest.Customer (read (Notes));
401+ grant SecTest.User on SecTest.Customer (read (Notes));
402402/
403403
404404-- ============================================================================
@@ -409,13 +409,13 @@ grant SecTest.user on SecTest.Customer (read (Notes));
409409 * Remove read access on a specific attribute (Notes).
410410 * Other permissions are preserved.
411411 */
412- revoke SecTest.user on SecTest.Customer (read (Notes));
412+ revoke SecTest.User on SecTest.Customer (read (Notes));
413413/
414414
415415/**
416416 * Downgrade write to read-only on Email.
417417 */
418- revoke SecTest.user on SecTest.Customer (write (Email));
418+ revoke SecTest.User on SecTest.Customer (write (Email));
419419/
420420
421421-- ============================================================================
@@ -446,7 +446,7 @@ show access on SecTest.Customer;
446446/**
447447 * Create a user role and assign a single module role.
448448 */
449- create or modify user role RegularUser (System.user , SecTest.user );
449+ create or modify user role RegularUser (System.User , SecTest.User );
450450/
451451
452452-- ============================================================================
@@ -456,7 +456,7 @@ create or modify user role RegularUser (System.user, SecTest.user);
456456/**
457457 * A user role can include roles from multiple modules.
458458 */
459- create or modify user role PowerUser (System.user , SecTest.user , SecTest.Administrator);
459+ create or modify user role PowerUser (System.User , SecTest.User , SecTest.Administrator);
460460/
461461
462462-- ============================================================================
@@ -607,7 +607,7 @@ create module role SecTest.Manager description 'Can manage customers and orders'
607607 * Step 2: Grant microflow access based on roles.
608608 * Users can create customers, managers and admins can do everything.
609609 */
610- grant execute on microflow SecTest.ACT_Customer_Create to SecTest.user , SecTest.Manager;
610+ grant execute on microflow SecTest.ACT_Customer_Create to SecTest.User , SecTest.Manager;
611611grant execute on microflow SecTest.ACT_Customer_Delete to SecTest.Manager, SecTest.Administrator;
612612grant execute on microflow SecTest.ACT_Order_Process to SecTest.Manager, SecTest.Administrator;
613613/
@@ -616,7 +616,7 @@ grant execute on microflow SecTest.ACT_Order_Process to SecTest.Manager, SecTest
616616 * Step 3: Grant page access based on roles.
617617 * All roles can see customers, only managers+ can see orders.
618618 */
619- grant view on page SecTest.Customer_Overview to SecTest.user , SecTest.Manager, SecTest.Administrator;
619+ grant view on page SecTest.Customer_Overview to SecTest.User , SecTest.Manager, SecTest.Administrator;
620620grant view on page SecTest.Order_Overview to SecTest.Manager, SecTest.Administrator;
621621/
622622
@@ -648,8 +648,8 @@ show access on page SecTest.Order_Overview;
648648-- When a module has partial access rules (not all entities covered by all
649649-- roles), MxBuild reports CE0066 regardless of security level.
650650revoke SecTest.Administrator on SecTest.Customer;
651- revoke SecTest.user on SecTest.Customer;
652- revoke SecTest.user on SecTest.Order;
651+ revoke SecTest.User on SecTest.Customer;
652+ revoke SecTest.User on SecTest.Order;
653653revoke SecTest.Manager on SecTest.Customer;
654654
655655
0 commit comments