@camunda/e2e-test-suite 0.0.1431 → 0.0.1433

package/dist/tests/8.11/access-user-role-management.spec.js

@@ -43,10 +43,8 @@ _8_11_1.test.describe('User Roles User Flow', () => {
     });
     // Workspace membership is durable organization state, so the Editor rights
     // the Analyst flow grants must be handed back whether the test passed or
-    // failed. Left behind, a retry would start with the analyst already an
-    // Editor and its own "not reachable without workspace access" assertion
-    // would fail on the second attempt; the grant would also leak into every
-    // later nightly run against the same org.
+    // failed. Left behind, the grant would leak into every later nightly run
+    // against the same org.
     _8_11_1.test.afterEach(async ({ page, loginPage }, testInfo) => {
         if (!testInfo.title.startsWith('Analyst Role User Flow')) {
             return;
@@ -170,7 +168,8 @@ _8_11_1.test.describe('User Roles User Flow', () => {
         const clusterName = clusterNames['Analyst Role User Flow'];
         // A retry runs in a fresh worker, where analystWorkspaceGrantMade starts
         // false even when the previous attempt's teardown failed to hand the
-        // grant back. The "not reachable" step below would then always fail.
+        // grant back. Remove a leftover grant so the membership does not leak
+        // into later runs against the same org.
         if (_8_11_1.test.info().retry > 0) {
             await _8_11_1.test.step('Hand back a workspace grant left by the previous attempt', async () => {
                 await appsPage.clickModeler();
@@ -200,51 +199,23 @@ _8_11_1.test.describe('User Roles User Flow', () => {
                 password: process.env.C8_PASSWORD_TEST_9,
             });
         });
-        // An organization role no longer decides on its own what a non-admin can
-        // reach. Since camunda-hub's environments work (pdp-3443, pdp-3715), a
-        // cluster's apps are surfaced through an ENVIRONMENT, and an environment
-        // is visible only to users who are Editor or Workspace Admin on a
-        // workspace it is assigned to -- organization admins and owners excepted,
-        // who see every environment unconditionally. An Analyst with no workspace
-        // membership therefore reaches nothing, which is the decided design
-        // rather than a defect: "Clusters are shown only to org admins.
-        // Non-admins do not have cluster visibility (they operate with
-        // environments instead)."
-        //
-        // Assert that gate before granting the membership the rest of this test
-        // depends on, so both halves are covered: the role alone grants no
-        // access, and the role plus workspace editorship does.
-        await _8_11_1.test.step('Ensure Optimize is not reachable without workspace access', async () => {
-            // Assert the cause, not just the consequence. Hub shows the analyst an
-            // empty Workspaces overview -- "You don't have explicit membership in
-            // any workspace in this organization" before the scope is widened, and
-            // "Your organization has no workspaces yet" after -- because the
-            // workspace belongs to whoever created it. With no workspace there is
-            // no environment, and with no environment no cluster app, so checking
-            // the Optimize banner alone would pass for unrelated reasons too.
+        // Every SaaS organization member sees every environment in the
+        // organization, whether or not they belong to a workspace. Hub decided
+        // this in camunda-hub#30270 and shipped it in camunda-hub#30271; the bug
+        // that challenged it, camunda-hub#30300, was closed as works-as-intended.
+        // Assert it, so a revert to the stricter "assigned only" rule is caught.
+        // What the analyst may do inside each app stays gated by the cluster's
+        // authorizations, which the steps below assert.
+        await _8_11_1.test.step('Ensure the cluster is listed without workspace access', async () => {
             await appsPage.clickCamundaApps();
             await (0, test_1.expect)(page
                 .getByText('Your organization has no workspaces yet')
                 .or(page.getByText("You don't have explicit membership in any workspace"))
                 .first()).toBeVisible({ timeout: 60000 });
-            // Assert the absence of THIS cluster's Optimize target directly rather
-            // than calling clickOptimize() and swallowing whatever it throws: a
-            // swallowed error would let this step pass because the hand-off helper
-            // itself broke and the page simply stayed on Hub, where the Optimize
-            // banner is absent for reasons that have nothing to do with the gate.
-            // On Hub a cluster's apps hang off the sidebar group named for the
-            // cluster, so with no environment neither the group nor the Optimize
-            // link inside it is ever rendered.
             const hubSidebar = page.getByRole('navigation', {
                 name: 'Main navigation',
             });
-            // The negative counts below mean nothing before the shell has rendered.
-            await (0, test_1.expect)(hubSidebar).toBeVisible({ timeout: 30000 });
-            await (0, test_1.expect)(hubSidebar.getByRole('button', { name: clusterName })).toHaveCount(0, { timeout: 30000 });
-            await (0, test_1.expect)(hubSidebar.getByRole('link', { name: /Optimize/ })).toHaveCount(0, { timeout: 30000 });
-            await (0, test_1.expect)(optimizeHomePage.optimizeBanner).not.toBeVisible({
-                timeout: 30000,
-            });
+            await (0, test_1.expect)(hubSidebar.getByRole('button', { name: clusterName })).toBeVisible({ timeout: 30000 });
         });
         await _8_11_1.test.step('Grant the analyst Editor rights on the shared workspace', async () => {
             // Only an organization admin may change workspace membership, so this

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camunda/e2e-test-suite",
-  "version": "0.0.1431",
+  "version": "0.0.1433",
   "description": "End-to-end test helpers for Camunda 8",
   "repository": {
     "type": "git",