skillhub/web/e2e/role-access-control.spec.ts
dongmucat 50a6c4b7fe test(e2e,ci): migrate web e2e to real API and add PR e2e workflow (#198)
* chore(workflow): align local hooks and e2e guidance

* test(e2e): expand reusable api mock helpers

* test(skill): stabilize share button e2e assertions

* chore(test): add e2e make target and tune playwright workers

* test(web): expand e2e coverage and smoke suite

* test(e2e): migrate to real API flows and add request-based data builder

* ci(e2e): add PR workflow for real-service frontend e2e

* ci(e2e): install playwright chromium in PR workflow

* test(e2e): relax timeout and force single worker in CI

* test(e2e): stabilize not-found assertions and harden CI session bootstrap

* chore(agents): align tester role with web/e2e workflow
2026-04-01 14:41:23 +08:00

30 lines
1.1 KiB
TypeScript

import { expect, test, type Page } from '@playwright/test'
import { setEnglishLocale } from './helpers/auth-fixtures'
import { registerSession } from './helpers/session'
async function expectLeaveForbiddenRoute(page: Page, route: string) {
await page.goto(route)
await expect.poll(() => page.url()).not.toBe(`http://localhost:3000${route}`)
}
test.describe('Role Access Control (Real API)', () => {
test.beforeEach(async ({ page }, testInfo) => {
await setEnglishLocale(page)
await registerSession(page, testInfo)
})
test('redirects regular user from review center', async ({ page }) => {
await expectLeaveForbiddenRoute(page, '/dashboard/reviews')
})
test('redirects regular user from promotions and reports pages', async ({ page }) => {
await expectLeaveForbiddenRoute(page, '/dashboard/promotions')
await expectLeaveForbiddenRoute(page, '/dashboard/reports')
})
test('redirects regular user from admin pages', async ({ page }) => {
await expectLeaveForbiddenRoute(page, '/admin/users')
await expectLeaveForbiddenRoute(page, '/admin/audit-log')
await expectLeaveForbiddenRoute(page, '/admin/labels')
})
})