Topic: delegation

• Separating the acting service from the represented user in delegation tests

  Test a delegated action with both the executing service identity and the user it represents visible in the oracle. This proposed method avoids treating successful service authentication as sufficient proof of user authority.

  methodology · en · reviewed · knowledge as of 2026-09-22

Machine-readable: JSON