test: ensure authenticated users that are not in the entities do not have access

1 files changed, 6 insertions, 1 deletions

diff --git a/tests/authorization/cedar_authorizer_test.rs b/tests/authorization/cedar_authorizer_test.rs
index 1a04b6af..f2dfebd4 100644
--- a/tests/authorization/cedar_authorizer_test.rs
+++ b/tests/authorization/cedar_authorizer_test.rs
@@ -94,6 +94,11 @@ mod tests {
         let user = build_user("1675940");
         let entities = cedar_policy::Entities::from_entities([user], None).unwrap();
         let authorizer = subject_with(entities);
-        assert!(authorizer.authorize(request));
+        assert!(authorizer.authorize(request.clone()));
+
+        let user = build_user("1");
+        let entities = cedar_policy::Entities::from_entities([user], None).unwrap();
+        let authorizer = subject_with(entities);
+        assert!(!authorizer.authorize(request.clone()));
     }
 }