In masking on-demand, you can define tests to evaluate the user groups to which the requesting user belongs.
In your privacy tests, you can use the following name/value pair to specify a test of the user groups to which the user requesting sessions for replay belongs:
ReqField=TL_USER_GROUPS
Example
In the following example, the rule ([Rule9]) is defined to block the response based on the following tests:
[SixPageTest]- The URL of the requested page contains the valuesix.[NotInSuperUserGroup]- The user is not a member of the groupSuperUser.
Note that the definition for [Rule9] includes the test operator (TestOp) of AND, which means that both of the above tests must evaluate to true in order for the specified actions (BlockRsp, ReqSetBlockedRsp) to be executed.
[Rule9]
Enabled=true
TestOp=AND
Tests=NotInSuperUserGroup, SixPageTest
Actions=BlockRsp, ReqSetBlockedRsp
[SixPageTest]
ReqField=URL
ReqOp=CONTAINS
ReqVal=six
[NotInSuperUserGroup]
ReqField=TL_USER_GROUPS
ReqOp=CONTAINS
ReqVal=SuperUser
CaseSensitive=False
Not=True
[BlockRsp]
Action=Block
Section=response
Field=body
[ReqSetBlockedRsp]
Action=ReqSet
ReqSetSection=env
ReqSetField=RspAltText
ReplaceString=<html>Response has been blocked for replay.</html>