The answer
That scenario verifies isolation between families. An authenticated user must not gain access to another wedding's private photos by changing identifiers or requesting direct image URLs.
What tests should be performed on photo uploading, viewing, and deletion?
Why should gallery QA include a user from a different wedding?
More FAQs in What tests should be performed on photo uploading, viewing, and deletion?
Page controls can hide a photo while its storage URL remains accessible. Test the underlying read path to verify the intended privacy policy actually holds.
The application needs a recoverable state and retry strategy that reconciles the record with storage. It should not leave an unexplained broken card indefinitely.
Still have questions?
Browse all our FAQs or reach out to our support team
Want to upskill yourself?
Your learning library
Small steps. Big possibilities.
Find your next course. Build something great.