Authorization testing in Testing Fundamentals - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is authorization testing?

Authorization testing checks if users can access only the parts of a system they are allowed to. It ensures users cannot do things beyond their permissions.

beginner

Why is authorization testing important?

It protects sensitive data and functions from unauthorized users, preventing security breaches and data leaks.

intermediate

Name two common methods to perform authorization testing.

1. Role-based testing: Check access for different user roles.<br>2. Permission testing: Verify specific permissions for actions or data.

beginner

What is the difference between authentication and authorization?

Authentication confirms who the user is (login). Authorization decides what the user can do (permissions).

beginner

Give an example of an authorization test case.

Test that a regular user cannot access the admin dashboard. The system should block access and show an error or redirect.

What does authorization testing verify?

A User identity verification

B User permissions to access resources

C System performance under load

D User interface design

Authorization testing checks if users have the correct permissions to access resources.

Which is NOT a focus of authorization testing?

A Checking user roles

B Ensuring data protection

C Verifying password strength

D Testing access restrictions

Password strength is part of authentication, not authorization testing.

If a user can access admin features without permission, what kind of issue is this?

A Authorization failure

B Authentication failure

C Performance issue

D UI bug

Allowing access without permission is an authorization failure.

Which testing method involves checking access for different user roles?

A Integration testing

B Load testing

C Unit testing

D Role-based testing

Role-based testing verifies access permissions for different user roles.

What should happen if a user tries to access a page they are not authorized for?

A Access is denied or redirected

B Page loads normally

C User is logged out

D System crashes

The system should deny access or redirect unauthorized users.

Explain in your own words what authorization testing is and why it matters.

Think about who can do what in a system.

Describe a simple test case you could write to check authorization in a web app.

Imagine testing if a normal user can open an admin page.