1 files changed, 78 insertions, 0 deletions
diff --git a/buildscripts/idl/tests/compatibility_test_pass/old/compatibility_test_pass_old.idl b/buildscripts/idl/tests/compatibility_test_pass/old/compatibility_test_pass_old.idl
index 203e4496ead..4ec2621cd39 100644
--- a/buildscripts/idl/tests/compatibility_test_pass/old/compatibility_test_pass_old.idl
+++ b/buildscripts/idl/tests/compatibility_test_pass/old/compatibility_test_pass_old.idl
@@ -1185,3 +1185,81 @@ commands:
             parameterStruct:
                 type: array<ArrayTypeStruct>
         reply_type: ArrayTypeStruct
+
+    complexActionTypesSubset:
+        description: "new command passes when the action types are a subset"
+        command_name: complexActionTypesSubset
+        namespace: ignored
+        cpp_name: complexActionTypesSubset
+        strict: true
+        api_version: "1"
+        reply_type: OkReply
+        access_check:
+            complex:
+                - privilege:
+                    resource_pattern: resourcePattern
+                    action_type: [actionTypeOne, actionTypeTwo, actionTypeThree]
+                - privilege:
+                    resource_pattern: resourcePatternTwo
+                    action_type: [actionTypeOne, actionTypeTwo]
+                - check: checkOne
+
+    complexActionTypesSubsetTwo:
+        description: "new command passes when the action types are a subset"
+        command_name: complexActionTypesSubsetTwo
+        namespace: ignored
+        cpp_name: complexActionTypesSubsetTwo
+        strict: true
+        api_version: "1"
+        reply_type: OkReply
+        access_check:
+            complex:
+                - privilege:
+                    resource_pattern: resourcePattern
+                    action_type: [actionTypeOne, actionTypeTwo]
+                - check: checkOne
+                - check: checkTwo
+                - privilege:
+                    resource_pattern: resourcePatternTwo
+                    action_type: [actionTypeOne, actionTypeTwo, actionTypeThree]
+
+    complexChecksSubset:
+        description: "new command passes when the complex checks are a subset of the old checks"
+        command_name: complexChecksSubset
+        namespace: ignored
+        cpp_name: complexChecksSubset
+        strict: true
+        api_version: "1"
+        reply_type: OkReply
+        access_check:
+            complex:
+                - check: checkOne
+                - check: checkTwo
+                - check: checkThree
+
+    removedComplexPrivilege:
+        description: "new command passes when a complex privilege is removed"
+        command_name: removedComplexPrivilege
+        namespace: ignored
+        cpp_name: removedComplexPrivilege
+        strict: true
+        api_version: "1"
+        reply_type: OkReply
+        access_check:
+            complex:
+                - privilege:
+                    resource_pattern: resourcePattern
+                    action_type: [actionTypeOne, actionTypeTwo]
+                - check: checkOne
+                - privilege:
+                    resource_pattern: resourcePattern
+                    action_type: [actionTypeOne, actionTypeTwo, actionTypeThree]
+
+    addedAccessCheckField:
+        description: "new command passes because it adds the access_check field when the api_version is not '1'"
+        command_name: addedAccessCheckField
+        namespace: ignored
+        cpp_name: addedAccessCheckField
+        strict: true
+        api_version: ""
+        reply_type: OkReply