Update BringBack.postman_collection.json (#26948)

* Update BringBack.postman_collection.json

* Update BringBack.postman_collection.json

* Update BringBack.postman_collection.json

* Update BringBack.postman_collection.json

---------

Co-authored-by: Mehdi <10160868+mbiuki@users.noreply.github.com>

dotCMS/src/curl-test/BringBack.postman_collection.json

@@ -31,6 +31,12 @@
 									"    pm.collectionVariables.set(\"identifier\", jsonData.entity.identifier);",
 									"    pm.collectionVariables.set(\"inode\", jsonData.entity.inode);",
 									"});",
+									"",
+									"pm.test(\"Input validation is applied\", function () {",
+									"    pm.expect(pm.response.json().errors).to.be.empty; ",
+									"});",
+									"",
+									"",
 									""
 								],
 								"type": "text/javascript"
@@ -386,6 +392,27 @@
 									"    pm.collectionVariables.set(\"identifier\", jsonData.entity.identifier);",
 									"    pm.collectionVariables.set(\"inode\", jsonData.entity.inode);    ",
 									"});",
+									"",
+									"// Check for sensitive data exposure",
+									"pm.test(\"No Sensitive Data Exposure\", function () {",
+									"    var sensitiveFields = [\"password\", \"token\", \"secret\"]; // Add fields to check for sensitivity",
+									"    var jsonData = pm.response.json();",
+									"",
+									"    sensitiveFields.forEach(function (field) {",
+									"        pm.expect(jsonData.entity[field]).to.not.be.ok;",
+									"    });",
+									"});",
+									"",
+									"// Check for proper authentication and authorization",
+									"pm.test(\"Proper Authentication and Authorization\", function () {",
+									"    var jsonData = pm.response.json();",
+									"",
+									"    // Add checks for authentication and authorization based on your API response structure",
+									"    pm.expect(jsonData.entity.canRead).to.be.true;",
+									"    pm.expect(jsonData.entity.canWrite).to.be.true;",
+									"    pm.expect(jsonData.entity.canPublish).to.be.true;",
+									"});",
+									"",
 									""
 								],
 								"type": "text/javascript"
@@ -709,6 +736,17 @@
 									"    pm.collectionVariables.set(\"identifier\", jsonData.entity.identifier);",
 									"    pm.collectionVariables.set(\"inode\", jsonData.entity.inode);",
 									"});",
+									"",
+									"// Check for sensitive data exposure",
+									"pm.test(\"No Sensitive Data Exposure\", function () {",
+									"    var sensitiveFields = [\"password\", \"token\", \"secret\"]; // Add fields to check for sensitivity",
+									"    var jsonData = pm.response.json();",
+									"",
+									"    sensitiveFields.forEach(function (field) {",
+									"        pm.expect(jsonData.entity[field]).to.not.be.ok;",
+									"    });",
+									"});",
+									"",
 									""
 								],
 								"type": "text/javascript"
@@ -1062,4 +1100,4 @@
 			"value": ""
 		}
 	]
-}
+}