mirror of
https://github.com/paperless-ngx/paperless-ngx.git
synced 2025-10-31 02:27:10 -04:00
97 lines
3.3 KiB
TypeScript
97 lines
3.3 KiB
TypeScript
import { expect, test } from '@playwright/test'
|
|
import path from 'node:path'
|
|
|
|
const REQUESTS_HAR = path.join(__dirname, 'requests/api-global-permissions.har')
|
|
|
|
test('should not allow user to edit settings', async ({ page }) => {
|
|
await page.routeFromHAR(REQUESTS_HAR, { notFound: 'fallback' })
|
|
await page.goto('/dashboard')
|
|
await expect(page.getByRole('link', { name: 'Settings' })).not.toBeAttached()
|
|
await page.goto('/settings')
|
|
await expect(page.locator('body')).toHaveText(
|
|
/You don't have permissions to do that/i
|
|
)
|
|
})
|
|
|
|
test('should not allow user to view documents', async ({ page }) => {
|
|
await page.routeFromHAR(REQUESTS_HAR, { notFound: 'fallback' })
|
|
await page.goto('/dashboard')
|
|
await expect(
|
|
page.locator('nav').getByRole('link', { name: 'Documents' })
|
|
).not.toBeAttached()
|
|
await page.goto('/documents')
|
|
await expect(page.locator('body')).toHaveText(
|
|
/You don't have permissions to do that/i
|
|
)
|
|
await page.goto('/documents/1')
|
|
await expect(page.locator('body')).toHaveText(
|
|
/You don't have permissions to do that/i
|
|
)
|
|
})
|
|
|
|
test('should not allow user to view correspondents', async ({ page }) => {
|
|
await page.routeFromHAR(REQUESTS_HAR, { notFound: 'fallback' })
|
|
await page.goto('/dashboard')
|
|
await expect(
|
|
page.getByRole('link', { name: 'Correspondents' })
|
|
).not.toBeAttached()
|
|
await page.goto('/correspondents')
|
|
await expect(page.locator('body')).toHaveText(
|
|
/You don't have permissions to do that/i
|
|
)
|
|
})
|
|
|
|
test('should not allow user to view tags', async ({ page }) => {
|
|
await page.routeFromHAR(REQUESTS_HAR, { notFound: 'fallback' })
|
|
await page.goto('/dashboard')
|
|
await expect(page.getByRole('link', { name: 'Tags' })).not.toBeAttached()
|
|
await page.goto('/tags')
|
|
await expect(page.locator('body')).toHaveText(
|
|
/You don't have permissions to do that/i
|
|
)
|
|
})
|
|
|
|
test('should not allow user to view document types', async ({ page }) => {
|
|
await page.routeFromHAR(REQUESTS_HAR, { notFound: 'fallback' })
|
|
await page.goto('/dashboard')
|
|
await expect(
|
|
page.getByRole('link', { name: 'Document Types' })
|
|
).not.toBeAttached()
|
|
await page.goto('/documenttypes')
|
|
await expect(page.locator('body')).toHaveText(
|
|
/You don't have permissions to do that/i
|
|
)
|
|
})
|
|
|
|
test('should not allow user to view storage paths', async ({ page }) => {
|
|
await page.routeFromHAR(REQUESTS_HAR, { notFound: 'fallback' })
|
|
await page.goto('/dashboard')
|
|
await expect(
|
|
page.getByRole('link', { name: 'Storage Paths' })
|
|
).not.toBeAttached()
|
|
await page.goto('/storagepaths')
|
|
await expect(page.locator('body')).toHaveText(
|
|
/You don't have permissions to do that/i
|
|
)
|
|
})
|
|
|
|
test('should not allow user to view logs', async ({ page }) => {
|
|
await page.routeFromHAR(REQUESTS_HAR, { notFound: 'fallback' })
|
|
await page.goto('/dashboard')
|
|
await expect(page.getByRole('link', { name: 'Logs' })).not.toBeAttached()
|
|
await page.goto('/logs')
|
|
await expect(page.locator('body')).toHaveText(
|
|
/You don't have permissions to do that/i
|
|
)
|
|
})
|
|
|
|
test('should not allow user to view tasks', async ({ page }) => {
|
|
await page.routeFromHAR(REQUESTS_HAR, { notFound: 'fallback' })
|
|
await page.goto('/dashboard')
|
|
await expect(page.getByRole('link', { name: 'Tasks' })).not.toBeAttached()
|
|
await page.goto('/tasks')
|
|
await expect(page.locator('body')).toHaveText(
|
|
/You don't have permissions to do that/i
|
|
)
|
|
})
|