[
  {
    "enabled":1,
    "version_min":300000,
    "title":"Testing Disruptive actions (1/n)",
    "expected":{
      "debug_log": " Running action deny",
      "http_code":403
    },
    "rules":[
      "SecRuleEngine On",
      "SecRuleEngine On",
      "SecDefaultAction \"phase:2,deny,status:404\"",
      "SecAction \"id:'900001',phase:request,nolog,status:403,t:none,block\""
    ]
  },
  {
    "enabled":1,
    "version_min":300000,
    "title":"Testing Disruptive actions (2/n)",
    "expected":{
      "debug_log": "Rule engine disabled, returning...",
      "http_code":200
    },
    "rules":[
      "SecRuleEngine On",
      "SecRuleEngine Off",
      "SecDefaultAction \"phase:2,deny,status:404\"",
      "SecAction \"id:'1',phase:request,nolog,t:none,block\""
    ]
  },
  {
    "enabled":1,
    "version_min":300000,
    "title":"Testing Disruptive actions (3/n)",
    "expected":{
      "http_code":404
    },
    "rules":[
      "SecRuleEngine On",
      "SecRuleEngine DetectionOnly",
      "SecDefaultAction \"phase:2,deny,status:404\"",
      "SecAction \"id:'1',phase:request,nolog,nolog,block,t:none,block\""
    ]
  },
  {
    "enabled":1,
    "version_min":300000,
    "title":"Testing Disruptive actions (4/n)",
    "expected":{
      "debug_log": "Rule engine disabled, returning...",
      "http_code":200
    },
    "rules":[
      "SecRuleEngine On",
      "SecRuleEngine Off",
      "SecDefaultAction \"phase:2,deny,status:404\"",
      "SecAction \"id:'1',phase:request,nolog,t:none,block\""
    ]
  },
  {
    "enabled":1,
    "version_min":300000,
    "title":"Testing Disruptive actions (5/n)",
    "expected":{
      "debug_log": "Rule engine disabled, returning...",
      "http_code":200
    },
    "rules":[
      "SecRuleEngine On",
      "SecRuleEngine Off",
      "SecDefaultAction \"phase:2,deny,status:404\"",
      "SecAction \"id:'1',phase:request,nolog,block,t:none,block\""
    ]
  }
]