# 1.2 — rbac_test.go (RED)

Phase: 1 — Atlas Core
Stage: RED

- [ ] atlas ServiceAccount receives 403 on `get secrets` in every namespace

## Verify

```bash
kubectl auth can-i get secrets --as=system:serviceaccount:portfolio:atlas   # no
go test ./... -run TestRBAC -v
```