01

Scenario: Attachment link expiration after 3 hours
Given a user is given a URL to an attachment,
When the URL is accessed,
Then the link should expire after 3 hours.

during the investigation the links to attachments in the shared profiles without time limitations were found. Here is an example:

• shared profile – https://talent.rocken.ch/profile/preview/grxmrvg_john230connor?rid=gdqpkll

• links – https://api.rocken.ch/api/v1/attachments/onpbmzr_trainee, https://api.rocken.ch/api/v1/attachments/okzdevk_bachelor

02

Scenario: Shared profile URL with time-limited access
Given a shared profile URL with an attachment,
When the link is accessed,
Then the attachment should not be available after 3 hours.

03

Scenario: Expired link access attempt
Given a URL to an attachment,
When the user tries to access it after 3 hours,
Then the system should display an error or invalid link message.

04

Scenario: Restricted access to valid link within 3 hours
Given the system has time-limited access to attachment links,
When a user shares the link,
Then only the user with the valid link within the 3-hour period should be able to access it.