add more tests

Author: jdconrad

libs/entitlement/src/test/java/org/elasticsearch/entitlement/runtime/policy/FileAccessTreeTests.java

@@ -236,6 +236,22 @@ public void testBasicExclusiveAccess() {
         assertThat(tree.canWrite(path("foo/baz")), is(false));
         assertThat(tree.canRead(path("foo/bar")), is(false));
         assertThat(tree.canWrite(path("foo/bar")), is(false));
+        tree = accessTree(
+            entitlement("foo", "read", "foo.xml", "read", "foo/bar.xml", "read_write"),
+            exclusivePaths("test-component", "diff-module", "foo/bar")
+        );
+        assertThat(tree.canRead(path("foo")), is(true));
+        assertThat(tree.canWrite(path("foo")), is(false));
+        assertThat(tree.canRead(path("foo.xml")), is(true));
+        assertThat(tree.canWrite(path("foo.xml")), is(false));
+        assertThat(tree.canRead(path("foo/baz")), is(true));
+        assertThat(tree.canWrite(path("foo/baz")), is(false));
+        assertThat(tree.canRead(path("foo/bar")), is(false));
+        assertThat(tree.canWrite(path("foo/bar")), is(false));
+        assertThat(tree.canRead(path("foo/bar.xml")), is(true));
+        assertThat(tree.canWrite(path("foo/bar.xml")), is(true));
+        assertThat(tree.canRead(path("foo/bar.baz")), is(true));
+        assertThat(tree.canWrite(path("foo/bar.baz")), is(false));
     }
 
     public void testInvalidExclusiveAccess() {