API Testing · Senior · Question 26 of 75
What is multi-tenant isolation testing?
- 1Checking that each tenant has its own API documentation
- 2Testing the API with many users from the same company
- 3Proving one tenant can never read or change another tenant's data
Show the answer
Correct answer: Proving one tenant can never read or change another tenant's data
Explanation
Tenant IDs from tokens, not request bodies, should scope every query. Tests try cross-tenant IDs on every endpoint, including exports and search.