}

	resourceID := "idmp-"
	roleID := env.Get(EnvIdentityPluginRoleID, kv.Get(RoleID))
	if roleID == "" {
		// We use a hash of the plugin URL so that the ARN remains
		// constant across restarts.
		h := sha1.New()
		h.Write([]byte(pluginURL))
		bs := h.Sum(nil)
		resourceID += base64.RawURLEncoding.EncodeToString(bs)
	} else {
		// Check that the roleID is restricted to URL safe characters

        assertEquals("ROLE_SUPER_ULTRA_MEGA_ADMIN_WITH_VERY_LONG_NAME_FOR_TESTING_PURPOSES", secured.value()[0]);
    }

    // Test with many roles
    @Secured({ "ROLE_1", "ROLE_2", "ROLE_3", "ROLE_4", "ROLE_5", "ROLE_6", "ROLE_7", "ROLE_8", "ROLE_9", "ROLE_10" })
    static class ManyRolesClass {
    }

    @Test
    public void test_manyRoles() {
        Secured secured = ManyRolesClass.class.getAnnotation(Secured.class);

						Action: DeleteAction,
						RuleID: rule.ID,
						Due:    rule.Expiration.Date.Time,
					})
				}
			case !rule.Expiration.IsDaysNull():
				if expectedExpiry := ExpectedExpiryTime(obj.ModTime, int(rule.Expiration.Days)); now.IsZero() || now.After(expectedExpiry) {
					event := Event{
						Action: DeleteAction,
						RuleID: rule.ID,
						Due:    expectedExpiry,
					}

        user = new TestFessUser("testuser", null, new String[] {}, new String[] {});
        assertNull(user.getRoleNames());

        // Test with roles containing special characters
        roles = new String[] { "role-1", "role_2", "role.3" };
        user = new TestFessUser("testuser", roles, new String[] {}, new String[] {});
        assertArrayEquals(roles, user.getRoleNames());
    }

    @Test
    public void test_getGroupNames() {

        }

        @Override
        public void setSessionId(String sessionId) {
            // Do nothing in test
        }

        @Override
        public void setRuleId(String ruleId) {
            // Do nothing in test
        }

        @Override
        public void setUrl(String url) {
            // Do nothing in test
        }

        @Override