14.36Permission tests

If Mule uses a restricted integration user, external environment tests should prove:

allowed fields
→ work

required object access
→ works

You may also deliberately test a forbidden operation in a dedicated environment if appropriate.

This catches:

worked under admin credentials
failed under production-like account