Skip to content

test: add coverage for the admin role reachability and authorization matrix #253

Description

Summary

No test asserts an admin can actually reach /admin/* (currently impossible due to the hardcoded role) or that non-admins are rejected — the authz matrix is unverified.

Acceptance Criteria

  • Test: admin token reaches admin endpoints
  • Test: non-admin rejected
  • Test: API-key admin path
  • Run in CI

Complexity

Medium-High.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Stellar WaveIssues in the Stellar wave programhigh-complexityHigh-complexity backend task requiring deep architectural worksecuritySecurity vulnerabilitytestingTest coverage and quality

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions