Use these checklists to ensure you’re testing the correct things for each type of code change.
Permissions. Users without the necessary role or permissions get a 403 response. Users with the necessary permissions get a 200 response. Validations For each required parameter, requests without it get an error response. For each parameter with other kinds of validations, requests with invalid values get an error response.