We have to design Test Cases for an Application which almost have same functionality for all Users but application also consist other functionality issues which is assign to only specific Users who have more rights in the Application like a Senior User can Approve and Modify his/her Junior task. So i m in confused that i should prepare Test Cases w.r.t User (Senior & Junior, Admin) or w.r.t. Functionalty. I m looking w.r.t User. Can anybody help me.

Hi

It seems like you are validating the sanction level for user profile.

Categorise the functionality against user level and test those functionality

Find the functionality between each users ans segreate them accordingly

Eg : Junior - Access to primary level
Senior - Access more than primary
Manager - Access to primary and subsidiary

cheers,
Sridevichitthu

I will suggest you to test the functionality at highest level.

Then do security testing for junior levels, what they allowed to do, what not.

Any query, send me a mail or reply here.

__________________
Brijesh Jain
brijesh.tester@yahoo.co.in
http://softwaretestingexpertise.blogspot.com

Thanks Brijesh fro your reply

According to you i should prepare Test Cases Functionailty point of view not User Point of View.

Correct me if i m wrong.

Thanks Sridevi for your reply

Your answer seems like that i should prepare Test Cases w.r.t User level and then test Functionailty for each User Level.

Correct me if i m wrong.

Hi vijenjoy,

Actually both are the solutions. You have to decide now what you should follow. If your application is of high level and object oriented, then follow my method. If you are not sure about application, follow second method.

I have tested such type of application, in which general user, broker and builder have different access rights. Functionality are same. I test for builder. Then security testing for broker, what he should not allowed to access. Then for normal user.

__________________
Brijesh Jain
brijesh.tester@yahoo.co.in
http://softwaretestingexpertise.blogspot.com

Hi ,

I agree with Brijesh point of view

Even my Company has different Sanction testing where i test for profile sanctions with respect to Team Agent , Team lead , Team Manager......

Each one have different sanctions.We created separate security testing level for this,at the same time when you test such criteria you indirectly focus on finctionality of each profile as well.

More or less its like verifying the user for validating their functionality.

Cheers,
Sridevichitthu