Loading…
Loading…
Loading…
These endpoints exist on the Practice Hub:
| Route | Allowed roles (documented) |
|---|---|
GET /api/admin/users | admin, support |
GET /api/admin/orders | admin, support |
POST /api/admin/products | admin only |
GET /api/profile | any authenticated user |
Seed users: customer@qahub.test, admin@qahub.test, support@qahub.test, unauthenticated.
Your task: complete the authorization matrix (role × route × expected status). Then explain how you would test the admin-route-accessible-to-customer defect if it were active.
Write your own answer first — the defect report, the case table, the locator, whatever the question asks for. An interviewer grades your reasoning, not your recall.
Practice this live with an AI interviewer
Starts a QA mock interview pre-filled with this problem — you can edit the brief before starting.