kodev-org
/
vikunja
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

test(e2e): cover team READ permission boundary

This commit is contained in:
kolaente 2026-04-21 11:45:11 +02:00 committed by kolaente
parent 01b71577d7
commit be225fd4d3
1 changed files with 25 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

25
frontend/tests/e2e/sharing/team.spec.ts
View File

@ -1,7 +1,10 @@
import {test, expect} from '../../support/fixtures'
import {TeamFactory} from '../../factories/team'
import {TeamMemberFactory} from '../../factories/team_member'
import {TeamProjectFactory} from '../../factories/team_project'
import {UserFactory} from '../../factories/user'
import {createProjects} from '../project/prepareProjects'
import {login, setupApiUrl} from '../../support/authenticateUser'
test.describe('Team', () => {
test('Creates a new team', async ({authenticatedPage: page}) => {
@ -100,3 +103,25 @@ test.describe('Team', () => {
await expect(page.locator('.global-notification')).toContainText('Success')
})
})
test.describe('Team permission tiers on shared projects', () => {
// These tests log in as the second user (the team member), so we can't use
// the `authenticatedPage` fixture which auto-logs in as user 1.
test.beforeEach(async ({page}) => {
await setupApiUrl(page)
})
test('READ: team member cannot add tasks on a shared project', async ({page, apiContext}) => {
const [, member] = await UserFactory.create(2)
await createProjects(1)
await TeamFactory.create(1, {id: 1, created_by_id: 1}, false)
await TeamMemberFactory.create(1, {team_id: 1, user_id: member.id, admin: false}, false)
await TeamProjectFactory.create(1, {team_id: 1, project_id: 1, permission: 0}, false)
await login(page, apiContext, member)
await page.goto('/projects/1/1')
await expect(page.locator('.project-title')).toContainText('First Project')
await expect(page.locator('input.input[placeholder="Add a task…"]')).not.toBeVisible()
})
})