| createtestuser | Session user (dev@prowler.com) | | tenantsfixture | 3 tenants: [0],[1] have membership, [2] isolated | | authenticatedclient | JWT client for tenant[0] | | providersfixture | 9 providers in tenant[0] | | tasksfixture | 2 Celery tasks with TaskResult |
| authenticatedclientrbac | All permissions (admin) | | authenticatedclientrbacnoroles | Membership but NO roles | | authenticatedclientnopermissionsrbac | All permissions = False |
RLS returns 404, NOT 403 - the resource is invisible, not forbidden.
Modelli di test per l'API Prowler: JSON:API, attività Celery, isolamento RLS, RBAC. Trigger: durante la scrittura di test per api/ (JSON:richieste/asserzioni API, isolamento tra tenant, RBAC, attività Celery, viewset/serializzatori). Fonte: prowler-cloud/prowler.