loosen rbac for get cert

lyft · Nov 7, 2024 · 134aadb · 134aadb
1 parent ae84fdc
commit 134aadb
Showing 1 changed file with 0 additions and 14 deletions.
diff --git a/tests/unit/confidant/authnz/rbac_test.py b/tests/unit/confidant/authnz/rbac_test.py
@@ -95,20 +95,6 @@ def test_default_acl(mocker: MockerFixture):
                 'san': ['test-service.sub.example.com'],
             },
         ) is True
-        # Test for user type is service, with certificate resource and get
-        # action, with a valid CN, but a mix of valid and invalid SAN values
-        assert rbac.default_acl(
-            resource_type='certificate',
-            action='get',
-            resource_id='test-service.example.com',
-            kwargs={
-                'ca': 'development',
-                'san': [
-                    'bad-service.example.com',
-                    'test-service.example.com',
-                ],
-            },
-        ) is False
         # Test for user type is service, and an allowed resource, with
         # disallowed fake action
         assert rbac.default_acl(resource_type='service', action='fake') is False