@percepta/create 3.5.1 → 3.5.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@percepta/create",
-  "version": "3.5.1",
+  "version": "3.5.2",
   "description": "Scaffold a new Mosaic package",
   "keywords": [
     "cli",

package/templates/webapp/e2e/rbac.spec.ts

@@ -1,6 +1,6 @@
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";
-import { expect, test, type Page } from "@playwright/test";
+import { expect, test, type Browser, type Page } from "@playwright/test";
 
 const execFileAsync = promisify(execFile);
 const password = "password";
@@ -13,7 +13,8 @@ const users = {
 } as const;
 
 test.describe("RBAC access", () => {
-  test("customer admin can manage role mappings but cannot enter the main app", async ({
+  test("customer admin can manage role mappings and change app access", async ({
+    browser,
     page,
   }) => {
     test.setTimeout(60_000);
@@ -46,6 +47,8 @@ test.describe("RBAC access", () => {
       await expect(
         page.getByRole("button", { name: "User assignments" }),
       ).toContainText("App Non User");
+
+      await expectAppAccess(browser, users.nonAppUser, true);
     } finally {
       if (shouldResetSeedData) {
         await resetSeedData();
@@ -61,6 +64,8 @@ test.describe("RBAC access", () => {
       })
       .not.toContain("App Non User");
 
+    await expectAppAccess(browser, users.nonAppUser, false);
+
     await page.goto("/");
     await expect(page.getByRole("heading", { name: /Welcome to/ })).toHaveCount(
       0,
@@ -135,6 +140,33 @@ async function expectNotFound(page: Page) {
   ).toBeVisible();
 }
 
+async function expectAppAccess(
+  browser: Browser,
+  email: string,
+  expectedAccess: boolean,
+) {
+  const expectedHeadingCount = expectedAccess ? 1 : 0;
+
+  await expect
+    .poll(
+      async () => {
+        const context = await browser.newContext();
+        const page = await context.newPage();
+
+        try {
+          await signIn(page, email, "/");
+          return await page
+            .getByRole("heading", { name: /Welcome to/ })
+            .count();
+        } finally {
+          await context.close();
+        }
+      },
+      { timeout: 15_000 },
+    )
+    .toBe(expectedHeadingCount);
+}
+
 async function resetSeedData() {
   await execFileAsync("pnpm", ["db:seed"], { cwd: process.cwd() });
 }