# TEST: SECURITY-UM-18

## References

* [User Management](https://help.santesuite.org/installation/installation-1/deployment/installing-software/santedb-server/installation-qualification/security-administration-testing/test-cases-for-ui-1/user-management-tests/broken-reference)
* [TEST: SECURITY-UM-01](https://help.santesuite.org/installation/installation-1/deployment/installing-software/santedb-server/installation-qualification/security-administration-testing/test-cases-for-ui-1/user-management-tests/test-security-um-01)
* [TEST: SECURITY-UM-15](https://help.santesuite.org/installation/installation-1/deployment/installing-software/santedb-server/installation-qualification/security-administration-testing/test-cases-for-ui-1/user-management-tests/test-security-um-15)

## Discussion

While creating new users, any Employer being added to a new user's profile must be one that exists as an option from the static list of all employers.

## Pre-Conditions / Setup

1. User must be logged into an account with policies granted for creating users.
2. Navigate to **Administration Panel / Security / Users / Create User** by clicking the **Create** button on the **Administration Panel / Security / Users / Index** page.

## Actions/Steps

1\. Follow the same actions/steps from [TEST: SECURITY-UM-15](https://help.santesuite.org/installation/installation-1/deployment/installing-software/santedb-server/installation-qualification/security-administration-testing/test-cases-for-ui-1/user-management-tests/test-security-um-15), but use the **Employer** textbox and a corresponding invalid value (e.g. "NOT\_AN\_EMPLOYER") instead of the **Primary Facility** textbox and a corresponding invalid value.  &#x20;

## Expected Behaviour

* The dropdown of possible existing employers should only have a single disabled option that simply prompts users: "No results found".

![](https://3421852694-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-LZ0_pjgTp_kx4hqTZ3a%2F-Me0yizNZvQtX3pZcHjN%2F-Me1-G8EyqM20L_8IAFz%2Fimage.png?alt=media\&token=99280650-dac1-4b42-90bb-c9c1a33d7ab9)
