@camunda/e2e-test-suite 0.0.1287 → 0.0.1289

package/dist/tests/8.8/rba-enabled-v2-user-flows.spec.js

@@ -9,6 +9,7 @@ const roleAuthorizations_1 = require("../../utils/roleAuthorizations");
 const expectTextWithRetry_1 = require("../../utils/assertionHelpers/expectTextWithRetry");
 const expectTextWithPagination_1 = require("../../utils/assertionHelpers/expectTextWithPagination");
 const users_1 = require("../../utils/users");
+const consoleApiHelpers_1 = require("../../utils/consoleApiHelpers");
 const mainUser = (0, users_1.getTestUser)('twentySixthUser');
 _8_8_1.test.describe.parallel('RBA Enabled User Flows Test @tasklistV2', () => {
     const clusterNames = {
@@ -18,6 +19,10 @@ _8_8_1.test.describe.parallel('RBA Enabled User Flows Test @tasklistV2', () => {
         'RBA On User Flow - Permission for Selected Processes Only': 'Fourth RBA V2 Cluster',
     };
     _8_8_1.test.beforeEach(async ({ page, homePage, clusterPage, loginPage, clusterDetailsPage, appsPage }, testInfo) => {
+        // Claimed here, not in each body: creating the cluster and waiting for
+        // it to come back Healthy after the authorizations toggle can outlast
+        // the default per-test timeout before the body starts.
+        _8_8_1.test.slow();
         await (0, UtilitiesPage_1.loginWithRetry)(page, loginPage, mainUser, (testInfo.workerIndex + 1) * 1000);
         await (0, test_1.expect)(homePage.clusterTab).toBeVisible({ timeout: 120000 });
         await homePage.clickClusters();
@@ -25,13 +30,20 @@ _8_8_1.test.describe.parallel('RBA Enabled User Flows Test @tasklistV2', () => {
         (0, test_1.expect)(clusterName, `No cluster mapping for test title: "${testInfo.title}")`).toBeTruthy();
         await clusterPage.createClusterIfNotExists(clusterName);
         await (0, UtilitiesPage_1.disableRBA)(clusterName, homePage, clusterPage, clusterDetailsPage, appsPage);
+        // The flows below hand off to test users with no elevated or DevOps org
+        // role, and Hub only lets those roles assign an environment to a
+        // workspace (camunda-hub#28955). Without this, the test user's deploy
+        // dialog never offers this cluster and every runProcessInstance retry
+        // fails until the test times out. Assign it now, while the elevated
+        // main user's session is active. test-setup creates the test users'
+        // workspaces up front so that they exist at this point.
+        await (0, consoleApiHelpers_1.linkClusterToWorkspacesNamedViaApi)(page, clusterName);
     });
     _8_8_1.test.afterEach(async ({ page }, testInfo) => {
         await (0, _setup_1.captureScreenshot)(page, testInfo);
         await (0, _setup_1.captureFailureVideo)(page, testInfo);
     });
     (0, _8_8_1.test)('RBA On User Flow - No User Permission', async ({ page, homePage, modelerHomePage, appsPage, modelerCreatePage, clusterPage, clusterDetailsPage, taskPanelPage, taskProcessesPage, operateHomePage, ocIdentityHomePage, ocIdentityAuthorizationsPage, ocIdentityRolesPage, loginPage, settingsPage, }, testInfo) => {
-        _8_8_1.test.slow();
         const clusterName = clusterNames[testInfo.title];
         const randomString = await (0, _setup_1.generateRandomStringAsync)(3);
         const processName = 'RBA_NO_PERM' + randomString;
@@ -68,10 +80,19 @@ _8_8_1.test.describe.parallel('RBA Enabled User Flows Test @tasklistV2', () => {
             await ocIdentityAuthorizationsPage.createAuthorization((0, roleAuthorizations_1.authorizationAllPermissions)(role));
         });
         await _8_8_1.test.step('Clear cookies and reset session', async () => {
+            // Reset the session directly rather than driving Hub's user-menu
+            // logout: that menu is not reachable from every page this step can be
+            // reached from, and clickOpenSettingsButton then burns all three of its
+            // retries (nightly: "Failed to click button after 3 retries"). Clearing
+            // cookies and storage is what the step is actually for, and is what
+            // pages/8.9's copy of this spec does.
+            await page.context().clearCookies();
+            await page.evaluate(() => {
+                localStorage.clear();
+                sessionStorage.clear();
+            });
             await page.goto('/');
-            await settingsPage.clickOpenSettingsButton();
-            await settingsPage.clickLogoutButton();
-            await loginPage.loginWithTestUser(testUser);
+            await (0, UtilitiesPage_1.loginWithRetry)(page, loginPage, testUser, 1000);
         });
         await _8_8_1.test.step('Navigate to Web Modeler', async () => {
             await appsPage.clickCamundaApps();
@@ -131,7 +152,6 @@ _8_8_1.test.describe.parallel('RBA Enabled User Flows Test @tasklistV2', () => {
         });
     });
     (0, _8_8_1.test)('RBA On User Flow - Permission for One Process', async ({ page, homePage, modelerHomePage, appsPage, modelerCreatePage, clusterPage, clusterDetailsPage, taskPanelPage, taskProcessesPage, operateHomePage, loginPage, ocIdentityHomePage, ocIdentityAuthorizationsPage, ocIdentityRolesPage, settingsPage, }, testInfo) => {
-        _8_8_1.test.slow();
         const clusterName = clusterNames[testInfo.title];
         const randomString = await (0, _setup_1.generateRandomStringAsync)(3);
         const processName = 'RBA_ONE_PERM' + randomString;
@@ -175,12 +195,21 @@ _8_8_1.test.describe.parallel('RBA Enabled User Flows Test @tasklistV2', () => {
             await ocIdentityAuthorizationsPage.createAuthorization((0, roleAuthorizations_1.roleAllAuthorization)(role1));
         });
         await _8_8_1.test.step('Clear cookies and reset session', async () => {
+            // Reset the session directly rather than driving Hub's user-menu
+            // logout: that menu is not reachable from every page this step can be
+            // reached from, and clickOpenSettingsButton then burns all three of its
+            // retries (nightly: "Failed to click button after 3 retries"). Clearing
+            // cookies and storage is what the step is actually for, and is what
+            // pages/8.9's copy of this spec does.
+            await page.context().clearCookies();
+            await page.evaluate(() => {
+                localStorage.clear();
+                sessionStorage.clear();
+            });
             await page.goto('/');
-            await settingsPage.clickOpenSettingsButton();
-            await settingsPage.clickLogoutButton();
         });
         await _8_8_1.test.step('Login as Test User', async () => {
-            await loginPage.loginWithTestUser(testUser);
+            await (0, UtilitiesPage_1.loginWithRetry)(page, loginPage, testUser, 1000);
         });
         await _8_8_1.test.step('Navigate to Web Modeler', async () => {
             await appsPage.clickCamundaApps();
@@ -280,7 +309,6 @@ _8_8_1.test.describe.parallel('RBA Enabled User Flows Test @tasklistV2', () => {
         });
     });
     (0, _8_8_1.test)('RBA On User Flow - Permission for All Processes with Full Permissions', async ({ page, homePage, modelerHomePage, appsPage, modelerCreatePage, clusterPage, clusterDetailsPage, taskPanelPage, taskProcessesPage, operateHomePage, ocIdentityHomePage, ocIdentityAuthorizationsPage, }, testInfo) => {
-        _8_8_1.test.slow();
         const clusterName = clusterNames[testInfo.title];
         const randomString = await (0, _setup_1.generateRandomStringAsync)(3);
         const processName = 'AFTER_RBA' + randomString;
@@ -352,8 +380,7 @@ _8_8_1.test.describe.parallel('RBA Enabled User Flows Test @tasklistV2', () => {
             await (0, expectTextWithRetry_1.expectTextWithRetry)(page, process2);
         });
     });
-    (0, _8_8_1.test)('RBA On User Flow - Permission for Selected Processes Only', async ({ page, homePage, modelerHomePage, appsPage, modelerCreatePage, clusterPage, clusterDetailsPage, taskPanelPage, taskProcessesPage, operateHomePage, ocIdentityHomePage, ocIdentityAuthorizationsPage, ocIdentityRolesPage, loginPage, settingsPage, }, testInfo) => {
-        _8_8_1.test.slow();
+    (0, _8_8_1.test)('RBA On User Flow - Permission for Selected Processes Only', async ({ page, homePage, modelerHomePage, appsPage, modelerCreatePage, clusterPage, clusterDetailsPage, taskPanelPage, taskProcessesPage, operateHomePage, ocIdentityHomePage, ocIdentityAuthorizationsPage, ocIdentityRolesPage, loginPage, }, testInfo) => {
         const clusterName = clusterNames[testInfo.title];
         const randomString = await (0, _setup_1.generateRandomStringAsync)(3);
         const processName = 'RBA_SELECTED_PERM' + randomString;
@@ -392,10 +419,19 @@ _8_8_1.test.describe.parallel('RBA Enabled User Flows Test @tasklistV2', () => {
             await (0, sleep_1.sleep)(20000);
         });
         await _8_8_1.test.step('Clear cookies and reset session', async () => {
+            // Reset the session directly rather than driving Hub's user-menu
+            // logout: that menu is not reachable from every page this step can be
+            // reached from, and clickOpenSettingsButton then burns all three of its
+            // retries (nightly: "Failed to click button after 3 retries"). Clearing
+            // cookies and storage is what the step is actually for, and is what
+            // pages/8.9's copy of this spec does.
+            await page.context().clearCookies();
+            await page.evaluate(() => {
+                localStorage.clear();
+                sessionStorage.clear();
+            });
             await page.goto('/');
-            await settingsPage.clickOpenSettingsButton();
-            await settingsPage.clickLogoutButton();
-            await loginPage.loginWithTestUser(testUser);
+            await (0, UtilitiesPage_1.loginWithRetry)(page, loginPage, testUser, 1000);
         });
         await _8_8_1.test.step('Navigate to Web Modeler', async () => {
             await appsPage.clickCamundaApps();

package/dist/tests/8.8/test-setup.spec.js

@@ -118,11 +118,56 @@ _8_8_1.test.describe('Cluster Setup Tests', () => {
             await clusterSecretsPage.createSetOfSecrets(clusterName, connectorSecrets_1.connectorSecretsValues);
         }
     });
-    for (const [index, user] of (0, users_1.getTestUsers)().entries()) {
-        (0, _8_8_1.test)(`Create Project Folder for User ${index + 1}`, async ({ page, loginPage, homePage, appsPage, modelerHomePage, }, testInfo) => {
-            await _8_8_1.test.step('Log in', async () => {
-                await (0, UtilitiesPage_1.loginWithRetry)(page, loginPage, user, (testInfo.workerIndex + 1) * 1000);
+    // The RBA specs hand off to these developer-role users, who cannot assign an
+    // environment to a workspace (camunda-hub#28955). Their workspaces must exist
+    // before the RBA beforeEach links its cluster to them as the admin main user.
+    const rbaHandoffUsers = process.env.IS_AG === 'true' && process.env.RUN_FULL_SUITE !== 'true'
+        ? []
+        : ['4', '5', '6']
+            .map((n) => ({
+            username: process.env[`C8_USERNAME_TEST_${n}`] ?? '',
+            password: process.env[`C8_PASSWORD_TEST_${n}`] ?? '',
+            title: `Create Project Folder for RBA hand-off user TEST_${n}`,
+        }))
+            .filter((user) => user.username !== '' && user.password !== '');
+    for (const [index, user] of [
+        ...(0, users_1.getTestUsers)().map((u, i) => ({
+            ...u,
+            title: `Create Project Folder for User ${i + 1}`,
+        })),
+        ...rbaHandoffUsers,
+    ].entries()) {
+        const isRbaHandoffUser = index >= (0, users_1.getTestUsers)().length;
+        (0, _8_8_1.test)(user.title, async ({ page, loginPage, homePage, appsPage, modelerHomePage }, testInfo) => {
+            const loggedIn = await _8_8_1.test.step('Log in', async () => {
+                try {
+                    await (0, UtilitiesPage_1.loginWithRetry)(page, loginPage, user, (testInfo.workerIndex + 1) * 1000);
+                    return true;
+                }
+                catch (error) {
+                    // Every spec in the project depends on this setup project, so a
+                    // hand-off slot the org did not provision must not block the whole
+                    // suite (an 8.9 PR run lost 162 tests to exactly that). Nothing but
+                    // the RBA specs reads these three workspaces, and each of those logs
+                    // in as its own user, so it fails on its own login instead.
+                    //
+                    // Any failure, not just a credential rejection: unlike 8.9/8.10,
+                    // this version's LoginPage does not run classifyLoginRejection, so
+                    // no AUTH0_INVALID_CREDENTIALS marker ever reaches here to match on.
+                    if (!isRbaHandoffUser) {
+                        throw error;
+                    }
+                    console.warn(`${user.title}: ${String(error)}`);
+                    testInfo.annotations.push({
+                        type: 'warning',
+                        description: 'Could not log in as this hand-off user; no workspace',
+                    });
+                    return false;
+                }
             });
+            if (!loggedIn) {
+                return;
+            }
             await _8_8_1.test.step('Navigate to Web Modeler', async () => {
                 // Camunda Hub replaced Console + Web Modeler on SaaS: it lands on the
                 // Modeler home directly and has no app switcher to wait for.

package/dist/tests/8.9/access-user-role-management.spec.js

@@ -6,9 +6,15 @@ const UtilitiesPage_1 = require("../../pages/8.9/UtilitiesPage");
 const sleep_1 = require("../../utils/sleep");
 const resetSession_1 = require("../../utils/resetSession");
 const LoginPage_1 = require("../../pages/8.9/LoginPage");
+const WorkspaceMembersPage_1 = require("../../pages/8.9/WorkspaceMembersPage");
 const test_1 = require("@playwright/test");
 const users_1 = require("../../utils/users");
+const consoleApiHelpers_1 = require("../../utils/consoleApiHelpers");
 const testUser = (0, users_1.getTestUser)('mainUser');
+// The workspace the Analyst flow borrows Editor rights on, and whether that
+// grant is currently outstanding (read by the teardown below).
+const analystWorkspaceName = 'Cross Component Test Project';
+let analystWorkspaceGrantMade = false;
 _8_9_1.test.describe.configure({ mode: 'parallel' });
 _8_9_1.test.describe('User Roles User Flow', () => {
     const clusterNames = {
@@ -17,6 +23,10 @@ _8_9_1.test.describe('User Roles User Flow', () => {
         'Admin Role User Flow': 'Admin Role Cluster',
     };
     _8_9_1.test.beforeEach(async ({ page, homePage, clusterPage, loginPage, clusterDetailsPage, appsPage }, testInfo) => {
+        // Claimed here, not in each body: creating the cluster and waiting for
+        // it to come back Healthy after the authorizations toggle can outlast
+        // the default per-test timeout before the body starts. Same as 8.8.
+        _8_9_1.test.slow();
         await (0, UtilitiesPage_1.loginWithRetry)(page, loginPage, testUser, (testInfo.workerIndex + 1) * 1000);
         await (0, test_1.expect)(homePage.clusterTab).toBeVisible({ timeout: 120000 });
         await homePage.clickClusters();
@@ -30,9 +40,30 @@ _8_9_1.test.describe('User Roles User Flow', () => {
         await (0, _setup_1.captureScreenshot)(page, testInfo);
         await (0, _setup_1.captureFailureVideo)(page, testInfo);
     });
+    // Workspace membership is durable org state: left behind, a retry starts
+    // with the analyst already an Editor and its "not reachable without
+    // workspace access" step fails. Hand it back whether the test passed or not.
+    _8_9_1.test.afterEach(async ({ page, loginPage }, testInfo) => {
+        if (!testInfo.title.startsWith('Analyst Role User Flow')) {
+            return;
+        }
+        if (!analystWorkspaceGrantMade) {
+            return;
+        }
+        // Leave Hub before the analyst's session is dropped. A Hub deep link
+        // reloaded signed out is persisted as the next login's destination
+        // (camunda-hub auth-service.saas.ts persistReturnTo), so the admin landed
+        // on the analyst's diagram, whose sidebar has no org link for
+        // assertTestUsesCorrectOrganization to find.
+        await page.goto('about:blank');
+        await (0, UtilitiesPage_1.loginWithRetry)(page, loginPage, testUser, (testInfo.workerIndex + 1) * 1000);
+        const workspaceMembersPage = new WorkspaceMembersPage_1.WorkspaceMembersPage(page);
+        await workspaceMembersPage.openManageMembers(analystWorkspaceName);
+        await workspaceMembersPage.removeMember(process.env.C8_USERNAME_TEST_9);
+        analystWorkspaceGrantMade = false;
+    });
     //Fix will be implemented in  https://github.com/camunda/c8-cross-component-e2e-tests/issues/1236
     _8_9_1.test.skip('Modeler Role User Flow', async ({ page, modelerHomePage, appsPage, homePage, clusterPage, clusterDetailsPage, context, consoleOrganizationsPage, settingsPage, operateHomePage, ocIdentityHomePage, taskPanelPage, optimizeHomePage, modelerCreatePage, }) => {
-        _8_9_1.test.slow();
         const randomString = await (0, _setup_1.generateRandomStringAsync)(3);
         const processName = 'User Roles User Flow' + randomString;
         const clusterName = clusterNames['Modeler Role User Flow'];
@@ -65,9 +96,9 @@ _8_9_1.test.describe('User Roles User Flow', () => {
                 timeout: 60000,
             });
             await appsPage.clickCamundaApps();
-            await appsPage.assertOptimizePresent();
-            await appsPage.assertOperatePresent();
-            await appsPage.assertTasklistPresent();
+            await appsPage.assertOptimizePresent(clusterName);
+            await appsPage.assertOperatePresent(clusterName);
+            await appsPage.assertTasklistPresent(clusterName);
             await (0, test_1.expect)(appsPage.modelerLink).toBeVisible();
             await appsPage.clickCamundaApps();
         });
@@ -79,7 +110,7 @@ _8_9_1.test.describe('User Roles User Flow', () => {
             });
         });
         await _8_9_1.test.step('Navigate to Tasklist and Ensure Tasklist is not Accessible', async () => {
-            await page.goBack();
+            await appsPage.goBackToHub();
             await (0, UtilitiesPage_1.waitForLoadingToFinish)(page);
             await appsPage.clickCamundaApps();
             await appsPage.clickTasklist(clusterName);
@@ -88,7 +119,7 @@ _8_9_1.test.describe('User Roles User Flow', () => {
             });
         });
         await _8_9_1.test.step('Navigate to Identity and Ensure Identity is not Accessible', async () => {
-            await page.goBack();
+            await appsPage.goBackToHub();
             await (0, UtilitiesPage_1.waitForLoadingToFinish)(page);
             await appsPage.clickCamundaApps();
             await appsPage.clickAdmin(clusterName);
@@ -97,7 +128,7 @@ _8_9_1.test.describe('User Roles User Flow', () => {
             });
         });
         await _8_9_1.test.step('Navigate to Optimize and Ensure Optimize is Not Accessible', async () => {
-            await page.goBack();
+            await appsPage.goBackToHub();
             await (0, UtilitiesPage_1.waitForLoadingToFinish)(page);
             await appsPage.clickCamundaApps();
             await appsPage.clickOptimize(clusterName);
@@ -106,7 +137,7 @@ _8_9_1.test.describe('User Roles User Flow', () => {
             });
         });
         await _8_9_1.test.step('Navigate to Modeler and Ensure Diagram Failed To Deploy', async () => {
-            await page.goBack();
+            await appsPage.goBackToHub();
             await (0, UtilitiesPage_1.waitForLoadingToFinish)(page);
             await appsPage.clickCamundaApps();
             await appsPage.clickModeler();
@@ -130,10 +161,20 @@ _8_9_1.test.describe('User Roles User Flow', () => {
         });
     });
     (0, _8_9_1.test)('Analyst Role User Flow', async ({ page, modelerHomePage, appsPage, homePage, clusterPage, clusterDetailsPage, browser, consoleOrganizationsPage, settingsPage, operateHomePage, ocIdentityHomePage, taskPanelPage, optimizeHomePage, modelerCreatePage, }) => {
-        _8_9_1.test.slow();
         const randomString = await (0, _setup_1.generateRandomStringAsync)(3);
         const processName = 'User Roles User Flow' + randomString;
         const clusterName = clusterNames['Analyst Role User Flow'];
+        // A retry runs in a fresh worker, where analystWorkspaceGrantMade starts
+        // false even when the previous attempt's teardown failed to hand the
+        // grant back. The "not reachable" step below would then always fail.
+        if (_8_9_1.test.info().retry > 0) {
+            await _8_9_1.test.step('Hand back a workspace grant left by the previous attempt', async () => {
+                await appsPage.clickModeler();
+                const workspaceMembersPage = new WorkspaceMembersPage_1.WorkspaceMembersPage(page);
+                await workspaceMembersPage.openManageMembers(analystWorkspaceName);
+                await workspaceMembersPage.removeMember(process.env.C8_USERNAME_TEST_9);
+            });
+        }
         await _8_9_1.test.step('Navigate to Console and Enable RBA', async () => {
             await (0, UtilitiesPage_1.enableAuthorizations)(clusterName, homePage, clusterPage, clusterDetailsPage, appsPage);
             await (0, sleep_1.sleep)(15000);
@@ -155,6 +196,50 @@ _8_9_1.test.describe('User Roles User Flow', () => {
                 password: process.env.C8_PASSWORD_TEST_9,
             });
         });
+        // Hub no longer lets an organization role alone reach a cluster's apps: a
+        // non-admin sees only environments assigned to a workspace they are Editor
+        // or Workspace Admin on (camunda-hub EnvironmentVisibilityResolver,
+        // ProjectOperation.VIEW_ENVIRONMENTS). Assert that gate, then grant it.
+        await _8_9_1.test.step('Ensure Optimize is not reachable without workspace access', async () => {
+            await appsPage.clickCamundaApps();
+            await (0, test_1.expect)(page
+                .getByText('Your organization has no workspaces yet')
+                .or(page.getByText("You don't have explicit membership in any workspace"))
+                .first()).toBeVisible({ timeout: 60000 });
+            const hubSidebar = page.getByRole('navigation', {
+                name: 'Main navigation',
+            });
+            // The negative counts below mean nothing before the shell has rendered.
+            await (0, test_1.expect)(hubSidebar).toBeVisible({ timeout: 30000 });
+            await (0, test_1.expect)(hubSidebar.getByRole('button', { name: clusterName })).toHaveCount(0, { timeout: 30000 });
+            await (0, test_1.expect)(hubSidebar.getByRole('link', { name: /Optimize/ })).toHaveCount(0, { timeout: 30000 });
+            await (0, test_1.expect)(optimizeHomePage.optimizeBanner).not.toBeVisible({
+                timeout: 30000,
+            });
+        });
+        await _8_9_1.test.step('Grant the analyst Editor rights on the shared workspace', async () => {
+            // Membership and environment assignment are org-admin actions, so this
+            // runs as the main user and switches back afterwards.
+            await (0, resetSession_1.resetSession)(browser, page);
+            await new LoginPage_1.LoginPage(page).loginWithTestUser({
+                username: process.env.C8_USERNAME,
+                password: process.env.C8_PASSWORD,
+            });
+            const workspaceMembersPage = new WorkspaceMembersPage_1.WorkspaceMembersPage(page);
+            await workspaceMembersPage.openManageMembers(analystWorkspaceName);
+            // Set before the grant: a failure partway through can still have added
+            // the member, and teardown must undo that too.
+            analystWorkspaceGrantMade = true;
+            await workspaceMembersPage.setMemberRole(process.env.C8_USERNAME_TEST_9, 'Editor');
+            // Editorship alone surfaces nothing: this cluster's environment must
+            // also be assigned to that same workspace, and nothing else assigns it.
+            await (0, consoleApiHelpers_1.linkClusterToWorkspaceViaApi)(page, workspaceMembersPage.workspaceId(), clusterName);
+            await (0, resetSession_1.resetSession)(browser, page);
+            await new LoginPage_1.LoginPage(page).loginWithTestUser({
+                username: process.env.C8_USERNAME_TEST_9,
+                password: process.env.C8_PASSWORD_TEST_9,
+            });
+        });
         await _8_9_1.test.step('Wait for the role change to reach Optimize', async () => {
             // Replaces a blind `sleep(600000)`. The role change only takes effect in
             // Optimize once its permission cache refreshes, and reaching Optimize is
@@ -188,9 +273,9 @@ _8_9_1.test.describe('User Roles User Flow', () => {
                 timeout: 60000,
             });
             await appsPage.clickCamundaApps();
-            await appsPage.assertOptimizePresent();
-            await appsPage.assertOperatePresent();
-            await appsPage.assertTasklistPresent();
+            await appsPage.assertOptimizePresent(clusterName);
+            await appsPage.assertOperatePresent(clusterName);
+            await appsPage.assertTasklistPresent(clusterName);
             await (0, test_1.expect)(appsPage.modelerLink).toBeVisible();
             await appsPage.clickCamundaApps();
         });
@@ -200,7 +285,7 @@ _8_9_1.test.describe('User Roles User Flow', () => {
             await (0, UtilitiesPage_1.assertLocatorVisibleWithRetry)(page, operateHomePage.noPermissionsMessage, 'Operate No Permission message');
         });
         await _8_9_1.test.step('Navigate to Tasklist and Ensure Tasklist is not Accessible', async () => {
-            await page.goBack();
+            await appsPage.goBackToHub();
             await appsPage.clickCamundaApps();
             await appsPage.clickTasklist(clusterName);
             await (0, test_1.expect)(taskPanelPage.noPermissionsMessage).toBeVisible({
@@ -208,7 +293,7 @@ _8_9_1.test.describe('User Roles User Flow', () => {
             });
         });
         await _8_9_1.test.step('Navigate to Identity and Ensure Identity is not Accessible', async () => {
-            await page.goBack();
+            await appsPage.goBackToHub();
             await appsPage.clickCamundaApps();
             await appsPage.clickAdmin(clusterName);
             await (0, test_1.expect)(ocIdentityHomePage.noPermissionsMessage).toBeVisible({
@@ -216,14 +301,14 @@ _8_9_1.test.describe('User Roles User Flow', () => {
             });
         });
         await _8_9_1.test.step('Navigate to Optimize and Ensure Optimize is Accessible', async () => {
-            await page.goBack();
+            await appsPage.goBackToHub();
             await appsPage.clickCamundaApps();
             await appsPage.clickOptimize(clusterName);
             await (0, test_1.expect)(optimizeHomePage.optimizeBanner).toBeVisible({
                 timeout: 60000,
             });
         });
-        await _8_9_1.test.step('Navigate to Modeler and Ensure Diagram Failed To Deploy', async () => {
+        await _8_9_1.test.step('Navigate to Modeler and Ensure Diagram Cannot Be Deployed & Run', async () => {
             await appsPage.clickCamundaApps();
             await appsPage.clickModeler();
             await homePage.clickSkipCustomization();
@@ -240,13 +325,13 @@ _8_9_1.test.describe('User Roles User Flow', () => {
             await modelerCreatePage.clickAppendElementButton();
             await modelerCreatePage.clickAppendEndEventButton();
             await (0, sleep_1.sleep)(20000);
-            await modelerCreatePage.runProcessInstance(clusterName, '', {}, '', false);
-            await (0, test_1.expect)(page.getByText(/The (diagram|application) failed to deploy & run/)).toBeVisible({ timeout: 60000 });
-            await modelerCreatePage.clickCloseButton();
+            // Hub gates this in the UI: an Analyst holds no instance or workflow
+            // create permission, so "Deploy & run" is offered only disabled, where
+            // Console let the attempt through and reported a failed deployment.
+            await modelerCreatePage.assertDeployAndRunNotPermitted();
         });
     });
     (0, _8_9_1.test)('Admin Role User Flow', async ({ page, modelerHomePage, appsPage, homePage, clusterPage, clusterDetailsPage, browser, consoleOrganizationsPage, settingsPage, operateHomePage, ocIdentityHomePage, taskPanelPage, optimizeHomePage, modelerCreatePage, }) => {
-        _8_9_1.test.slow();
         const randomString = await (0, _setup_1.generateRandomStringAsync)(3);
         const processName = 'User Roles User Flow' + randomString;
         const clusterName = clusterNames['Admin Role User Flow'];
@@ -304,9 +389,9 @@ _8_9_1.test.describe('User Roles User Flow', () => {
                 timeout: 60000,
             });
             await appsPage.clickCamundaApps();
-            await appsPage.assertOptimizePresent();
-            await appsPage.assertOperatePresent();
-            await appsPage.assertTasklistPresent();
+            await appsPage.assertOptimizePresent(clusterName);
+            await appsPage.assertOperatePresent(clusterName);
+            await appsPage.assertTasklistPresent(clusterName);
             await (0, test_1.expect)(appsPage.modelerLink).toBeVisible();
             await appsPage.clickCamundaApps();
         });
@@ -318,7 +403,7 @@ _8_9_1.test.describe('User Roles User Flow', () => {
             });
         });
         await _8_9_1.test.step('Navigate to Tasklist and Ensure Tasklist is Accessible', async () => {
-            await page.goBack();
+            await appsPage.goBackToHub();
             await appsPage.clickCamundaApps();
             await appsPage.clickTasklist(clusterName);
             await (0, test_1.expect)(taskPanelPage.taskListPageBanner).toBeVisible({
@@ -326,7 +411,7 @@ _8_9_1.test.describe('User Roles User Flow', () => {
             });
         });
         await _8_9_1.test.step('Navigate to Identity and Ensure Identity is Accessible', async () => {
-            await page.goBack();
+            await appsPage.goBackToHub();
             await appsPage.clickCamundaApps();
             await appsPage.clickAdmin(clusterName);
             await (0, test_1.expect)(ocIdentityHomePage.adminBanner).toBeVisible({
@@ -337,7 +422,7 @@ _8_9_1.test.describe('User Roles User Flow', () => {
             });
         });
         await _8_9_1.test.step('Navigate to Optimize and Ensure Optimize is Accessible', async () => {
-            await page.goBack();
+            await appsPage.goBackToHub();
             await appsPage.clickCamundaApps();
             await appsPage.clickOptimize(clusterName);
             await (0, test_1.expect)(optimizeHomePage.optimizeBanner).toBeVisible({

package/dist/tests/8.9/console-user-flows.spec.js

@@ -154,7 +154,7 @@ _8_9_1.test.describe('Console User Flow Tests @tasklistV2', () => {
         await _8_9_1.test.step('Verify Alert Count Increases to 1 After Trigger', async () => {
             await clusterDetailsPage.clickAlertsTab();
             await (0, test_1.expect)(async () => {
-                await page.reload();
+                await clusterDetailsPage.reopenAlertsTab();
                 await (0, test_1.expect)(clusterDetailsPage.alertsList.first()).toBeVisible({
                     timeout: 20000,
                 });
@@ -162,7 +162,7 @@ _8_9_1.test.describe('Console User Flow Tests @tasklistV2', () => {
                 (0, test_1.expect)(await clusterDetailsPage.alertsList.count()).toBeGreaterThan(1);
                 await (0, test_1.expect)(clusterDetailsPage.alertsList.nth(0)).toContainText(`Email`);
                 await clusterDetailsPage.assertAlertText('Amount triggered1');
-            }).toPass({ timeout: 60000 });
+            }).toPass({ timeout: 240000 });
         });
         await _8_9_1.test.step('Verify Alerts Received via Email for Incident', async () => {
             await (0, sleep_1.sleep)(60000);
@@ -194,13 +194,13 @@ _8_9_1.test.describe('Console User Flow Tests @tasklistV2', () => {
         await _8_9_1.test.step('Verify Alert Count Increases to 3 After Trigger', async () => {
             await clusterDetailsPage.clickAlertsTab();
             await (0, test_1.expect)(async () => {
-                await page.reload();
+                await clusterDetailsPage.reopenAlertsTab();
                 await (0, test_1.expect)(clusterDetailsPage.alertsList.first()).toBeVisible({
                     timeout: 20000,
                 });
                 await clusterDetailsPage.expandAlerts();
                 (0, test_1.expect)(await clusterDetailsPage.alertsList.count()).toBeGreaterThan(1);
-            }).toPass({ timeout: 60000 });
+            }).toPass({ timeout: 240000 });
             await clusterDetailsPage.assertAlertText('Amount triggered3');
         });
         await _8_9_1.test.step('Verify Alerts Received via Email for Incident', async () => {

package/dist/tests/8.9/idp-user-flows.spec.js

@@ -237,7 +237,8 @@ _8_9_1.test.describe('IDP User Flow Tests', () => {
     });
     _8_9_1.test.describe('Classification Template', () => {
         for (const params of classificationTestCases) {
-            (0, _8_9_1.test)(`${params.provider} classification - User creates an idp application with a classification template`, async ({ page, idpCreatePage, modelerHomePage, homePage, appsPage, clusterPage, clusterSecretsPage, }) => {
+            // Skipped due to bug #29644: https://github.com/camunda/camunda-hub/issues/29644
+            _8_9_1.test.skip(`${params.provider} classification - User creates an idp application with a classification template`, async ({ page, idpCreatePage, modelerHomePage, homePage, appsPage, clusterPage, clusterSecretsPage, }) => {
                 _8_9_1.test.slow();
                 const idpApplicationName = await (0, randomName_1.randomNameAgregator)(`${params.provider} classification` + ' - IDP_Application_Name');
                 const idpClassificationTemplateName = await (0, randomName_1.randomNameAgregator)(`${params.provider} classification` +

package/dist/tests/8.9/rba-enabled-v1-user-flows.spec.js

@@ -9,6 +9,7 @@ const roleAuthorizations_1 = require("../../utils/roleAuthorizations");
 const expectTextWithRetry_1 = require("../../utils/assertionHelpers/expectTextWithRetry");
 const expectLocatorWithRetry_1 = require("../../utils/assertionHelpers/expectLocatorWithRetry");
 const users_1 = require("../../utils/users");
+const consoleApiHelpers_1 = require("../../utils/consoleApiHelpers");
 const mainUser = (0, users_1.getTestUser)('twentyFifthUser');
 _8_9_1.test.describe.parallel('RBA Enabled User Flows Test @tasklistV1', () => {
     const clusterNames = {
@@ -18,19 +19,30 @@ _8_9_1.test.describe.parallel('RBA Enabled User Flows Test @tasklistV1', () => {
         'RBA On User Flow - Permission for Selected Processes Only': 'Fourth RBA V1 Cluster',
     };
     _8_9_1.test.beforeEach(async ({ page, homePage, clusterPage, loginPage, clusterDetailsPage, appsPage }, testInfo) => {
+        // Claimed here, not in each body: creating the cluster and waiting for
+        // it to come back Healthy after the authorizations toggle can outlast
+        // the default per-test timeout before the body starts.
+        _8_9_1.test.slow();
         await (0, UtilitiesPage_1.loginWithRetry)(page, loginPage, mainUser, (testInfo.workerIndex + 1) * 1000);
         await homePage.clickClusters();
         const clusterName = clusterNames[testInfo.title];
         (0, test_1.expect)(clusterName, `No cluster mapping for test title: "${testInfo.title}")`).toBeTruthy();
         await clusterPage.createClusterIfNotExists(clusterName);
         await (0, UtilitiesPage_1.disableRBA)(clusterName, homePage, clusterPage, clusterDetailsPage, appsPage);
+        // The flows below hand off to test users with no elevated or DevOps org
+        // role, and Hub only lets those roles assign an environment to a
+        // workspace (camunda-hub#28955). Without this, the test user's deploy
+        // dialog never offers this cluster and every runProcessInstance retry
+        // fails until the test times out. Assign it now, while the elevated
+        // main user's session is active. test-setup creates the test users'
+        // workspaces up front so that they exist at this point.
+        await (0, consoleApiHelpers_1.linkClusterToWorkspacesNamedViaApi)(page, clusterName);
     });
     _8_9_1.test.afterEach(async ({ page }, testInfo) => {
         await (0, _setup_1.captureScreenshot)(page, testInfo);
         await (0, _setup_1.captureFailureVideo)(page, testInfo);
     });
     (0, _8_9_1.test)('RBA On User Flow - No User Permission', async ({ page, homePage, modelerHomePage, appsPage, modelerCreatePage, clusterPage, clusterDetailsPage, taskPanelPage, taskProcessesPage, operateHomePage, ocIdentityHomePage, ocIdentityAuthorizationsPage, ocIdentityRolesPage, loginPage, settingsPage, }, testInfo) => {
-        _8_9_1.test.slow();
         const clusterName = clusterNames[testInfo.title];
         const randomString = await (0, _setup_1.generateRandomStringAsync)(3);
         const processName = 'RBA_NO_PERM' + randomString;
@@ -150,7 +162,6 @@ _8_9_1.test.describe.parallel('RBA Enabled User Flows Test @tasklistV1', () => {
         });
     });
     (0, _8_9_1.test)('RBA On User Flow - Permission for One Process', async ({ page, homePage, modelerHomePage, appsPage, modelerCreatePage, clusterPage, clusterDetailsPage, taskPanelPage, taskProcessesPage, operateHomePage, loginPage, ocIdentityHomePage, ocIdentityAuthorizationsPage, ocIdentityRolesPage, settingsPage, }, testInfo) => {
-        _8_9_1.test.slow();
         const clusterName = clusterNames[testInfo.title];
         const randomString = await (0, _setup_1.generateRandomStringAsync)(3);
         const processName = 'RBA_ONE_PERM' + randomString;
@@ -298,7 +309,6 @@ _8_9_1.test.describe.parallel('RBA Enabled User Flows Test @tasklistV1', () => {
         });
     });
     (0, _8_9_1.test)('RBA On User Flow - Permission for All Processes with Full Permissions', async ({ page, homePage, modelerHomePage, appsPage, modelerCreatePage, clusterPage, clusterDetailsPage, taskPanelPage, taskProcessesPage, operateHomePage, ocIdentityHomePage, ocIdentityAuthorizationsPage, }, testInfo) => {
-        _8_9_1.test.slow();
         const clusterName = clusterNames[testInfo.title];
         const randomString = await (0, _setup_1.generateRandomStringAsync)(3);
         const processName = 'AFTER_RBA' + randomString;
@@ -367,7 +377,6 @@ _8_9_1.test.describe.parallel('RBA Enabled User Flows Test @tasklistV1', () => {
         });
     });
     (0, _8_9_1.test)('RBA On User Flow - Permission for Selected Processes Only', async ({ page, homePage, modelerHomePage, appsPage, modelerCreatePage, clusterPage, clusterDetailsPage, taskPanelPage, taskProcessesPage, operateHomePage, ocIdentityHomePage, ocIdentityAuthorizationsPage, ocIdentityRolesPage, loginPage, }, testInfo) => {
-        _8_9_1.test.slow();
         const clusterName = clusterNames[testInfo.title];
         const randomString = await (0, _setup_1.generateRandomStringAsync)(3);
         const processName = 'RBA_SELECTED_PERM' + randomString;