The tester tool currently outputs the following:

> Group names: (none)
> Role names: (none)

... which can be confusing, when used with MagnoliaGroupResolver, for example - the tool mocks out the GroupManager, and does not connect to the JCR, so it simply can not resolve the groups. Instead of indicating "none", it should tell the user this is normal and can only be resolved when connected to an actual Magnolia instance.

Same goes for roles – and likewise, if one uses an ldap group resolver but the MagnoliaRoleResolver, it could be confusing to indicate that no roles were resolved for the test user.

Here's a patch proposing a solution for this. Not entirely convinced this is the most elegant way.