What are test personas?
Test personas are made-up users with a fixed role and fixed permissions, such as "team lead", "HR" or "employee without special rights". When testing, you sign in as that person, in your head or technically, and check what they can see and do.
The point: permissions cannot be proven in your head. Whether a salary column is really hidden from the team lead only shows once you open the app as the team lead. Test personas turn "should be fine" into a statement you can check, for every role on its own.
Test personas at Openbase.one
At Openbase.one, checking with test personas is part of every version of an app. Before a version goes live, it is built and checked:
- The data model and access rules are checked.
- Records are classified, for example as internal, personal, sensitive or tax-relevant.
- Every page is opened in a real browser as every test persona, for example "as a manager: no salary visible", "as HR: all salaries visible".
A version goes live only when the check passes. If the build or the check fails, the version does not go live. You describe the test personas along the way, simply by saying who may see what.
Describe your first app and watch it go live, checked.
Start for free