graphdb-workbench-tests 3.4.0-TR2 → 3.4.0-TR4

package/e2e-security/repository/url-with-repository-id-parameter.spec.js

@@ -1,57 +0,0 @@
-import {RepositorySelectorSteps} from '../../steps/repository-selector-steps.js';
-import {LoginSteps} from '../../steps/login-steps.js';
-import {UserAndAccessSteps} from '../../steps/setup/user-and-access-steps.js';
-import HomeSteps from '../../steps/home-steps.js';
-
-describe('URL with Repository ID parameter', () => {
-    let repositoryId;
-
-    beforeEach(() => {
-        repositoryId = 'repository-in-url-' + Date.now();
-        cy.createRepository({id: repositoryId});
-        cy.presetRepository(repositoryId);
-    })
-
-    afterEach(() => {
-        cy.loginAsAdmin();
-        cy.switchOffSecurity(true);
-        cy.deleteRepository(repositoryId);
-    });
-
-    it('should set repositoryId in url after enable security->login', () => {
-        enableSecurity(repositoryId);
-        // When user logs in again
-        LoginSteps.loginWithUser('admin', 'root');
-        // Then repositoryId parameter should be present in the URL and repository should be selected in the selector
-        UserAndAccessSteps.getUsersCatalogContainer().should('be.visible');
-        cy.url().should('include', 'repositoryId=' + repositoryId);
-        RepositorySelectorSteps.getSelectedRepository().should('contain', repositoryId);
-    });
-
-    it('should set repositoryId in ur after first login', () => {
-        // Given security is on
-        cy.switchOnSecurity();
-        // And I log in with user admin
-        LoginSteps.visitLoginPage();
-        LoginSteps.loginWithUser('admin', 'root');
-        // Then repositoryId parameter should be present in the URL and repository should be selected in the selector
-        HomeSteps.getView().should('be.visible');
-        cy.url().should('include', 'repositoryId=' + repositoryId);
-        RepositorySelectorSteps.getSelectedRepository().should('contain', repositoryId);
-    });
-});
-
-function enableSecurity(repositoryId) {
-    // Given security is off
-    // When user visits user and access page
-    UserAndAccessSteps.visit();
-    // Then url should contain repositoryId parameter and repository should be selected in the selector
-    cy.url().should('include', 'repositoryId=' + repositoryId);
-    RepositorySelectorSteps.getSelectedRepository().should('contain', repositoryId);
-    // When user toggles security on
-    UserAndAccessSteps.toggleSecurity();
-    // Then user should be logged out and login page should be shown
-    LoginSteps.getLoginPage().should('be.visible');
-    // And repositoryId parameter should not be present in the URL
-    cy.url().should('not.include', 'repositoryId=');
-}

package/e2e-security/setup/home/cookie-policy.spec.js

@@ -1,290 +0,0 @@
-import {UserAndAccessSteps} from "../../../steps/setup/user-and-access-steps";
-import {LicenseStubs} from "../../../stubs/license-stubs";
-import {LoginSteps} from "../../../steps/login-steps";
-import {ModalDialogSteps} from "../../../steps/modal-dialog-steps";
-import {MainMenuSteps} from '../../../steps/main-menu-steps.js';
-import {CookieConsentBannerSteps} from '../../../steps/cookie-policy/cookie-consent-banner-steps.js';
-import ImportSteps from '../../../steps/import/import-steps.js';
-import {CookiePolicyModalSteps} from '../../../steps/cookie-policy/cookie-policy-modal.steps.js';
-import {SettingsSteps} from '../../../steps/setup/settings-steps.js';
-import {HeaderSteps} from '../../../steps/header-steps.js';
-
-Cypress.env('set_default_user_data', false);
-
-describe('Cookie policy', () => {
-
-    let repository;
-
-    beforeEach(() => {
-        cy.loginAsAdmin().then(() => {
-            cy.switchOffFreeAccess(true);
-            cy.switchOffSecurity(true);
-        });
-        cy.setDefaultUserData(undefined);
-        LicenseStubs.stubFreeLicense();
-        repository = 'cypress-test-cookie-policy-security-' + Date.now();
-        cy.createRepository({id: repository});
-    });
-
-    afterEach(() => {
-        cy.deleteRepository(repository, true);
-        cy.loginAsAdmin().then(() => {
-            cy.switchOffFreeAccess(true);
-            cy.switchOffSecurity(true);
-            cy.setDefaultUserData(undefined);
-        });
-    });
-
-    // Scenario 5
-    it('should hide cookie consent banner when security is ON and user is logged out', () => {
-        // Given I open user and access page in prod mode
-        UserAndAccessSteps.visitInProdMode();
-        // Then the cookie policy banner should be visible
-        CookieConsentBannerSteps.getCookieConsentBanner().should('exist').and('be.visible');
-        // When I enable security
-        UserAndAccessSteps.toggleSecurity();
-        // Then I should be logged out
-        LoginSteps.getLoginPage().should('be.visible');
-        // And the cookie policy banner should be hidden
-        CookieConsentBannerSteps.getCookieConsentBanner().should('not.exist');
-        // When I login with admin
-        LoginSteps.loginWithUser('admin', 'root');
-        // Then the cookie policy banner should be visible
-        UserAndAccessSteps.getUsersTable().should('be.visible');
-        CookieConsentBannerSteps.getCookieConsentBanner().should('exist').and('be.visible');
-    });
-
-    // Scenario 6
-    it('should give cookie consent when security is ON', () => {
-        // Given I open user and access page in prod mode
-        UserAndAccessSteps.visitInProdMode();
-        // When I enable security
-        UserAndAccessSteps.toggleSecurity();
-        // Then I should be logged out
-        LoginSteps.getLoginPage().should('be.visible');
-        // When I login with admin
-        LoginSteps.loginWithUser('admin', 'root');
-        // Then I should see the users and access page
-        UserAndAccessSteps.getUsersTable().should('be.visible');
-        // Then the cookie policy banner should be visible
-        CookieConsentBannerSteps.getCookieConsentBanner().should('be.visible');
-        // When I click OK in the cookie consent banner
-        CookieConsentBannerSteps.giveCookieConsent();
-        // Then the cookie policy banner should be hidden
-        CookieConsentBannerSteps.getCookieConsentBanner().should('not.exist');
-        // When I open another page
-        MainMenuSteps.clickOnMenuImport();
-        ImportSteps.getView().should('be.visible');
-        // Then the cookie policy banner should be hidden
-        CookieConsentBannerSteps.getCookieConsentBanner().should('not.exist');
-        // When I reload the page
-        cy.reload();
-        // Then the cookie policy banner should be hidden
-        CookieConsentBannerSteps.getCookieConsentBanner().should('not.exist');
-    });
-
-    // Scenario 7
-    it('should update cookie policy and give cookie consent when security is ON', () => {
-        // Given I open user and access page in prod mode
-        UserAndAccessSteps.visitInProdMode();
-        // And I enable security
-        UserAndAccessSteps.toggleSecurity();
-        // And I login with admin
-        LoginSteps.loginWithUser('admin', 'root');
-        // When I click on the cookie policy link in the banner
-        CookieConsentBannerSteps.clickCookiePolicyLink();
-        // Then I see the cookie policy
-        CookiePolicyModalSteps.getDialogComponent().should('be.visible');
-        CookiePolicyModalSteps.validateCookiePolicyDialog(true, true);
-        // When I toggle off the analytics cookie checkbox
-        CookiePolicyModalSteps.toggleStatisticCookies();
-        // And I close the dialog
-        CookiePolicyModalSteps.closeDialog();
-        CookiePolicyModalSteps.getDialog().should('not.exist');
-        // When I reload the page
-        cy.reload();
-        // Then I expect to see that analytic cookies are not allowed and third party cookies are allowed
-        CookieConsentBannerSteps.clickCookiePolicyLink();
-        CookiePolicyModalSteps.validateCookiePolicyDialog(false, true);
-        // And I close the cookie policy dialog
-        CookiePolicyModalSteps.closeDialog();
-        // When I open my settings page
-        MainMenuSteps.clickOnMySettings();
-        // And I open cookie policy modal using the button in the my settings widget
-        SettingsSteps.clickCookiePolicyLink();
-        // Then I should see the cookie policy
-        CookiePolicyModalSteps.getDialogComponent().should('be.visible');
-        // And I expect to see that analytic cookies are not allowed and third party cookies are allowed
-        CookiePolicyModalSteps.validateCookiePolicyDialog(false, true);
-        // When I toggle off third party cookies checkbox
-        CookiePolicyModalSteps.toggleThirdPartyCookies();
-        // And I close the modal
-        CookiePolicyModalSteps.closeDialog();
-        // When I reopen modal from the widget
-        SettingsSteps.clickCookiePolicyLink();
-        // Then I expect to see that analytic cookies are not allowed and third party cookies are not allowed
-        CookiePolicyModalSteps.validateCookiePolicyDialog(false, false);
-        CookiePolicyModalSteps.closeDialog();
-        // When I click OK in the banner
-        CookieConsentBannerSteps.giveCookieConsent();
-        // Then I expect the banner to be hidden
-        CookieConsentBannerSteps.getCookieConsentBanner().should('not.exist');
-        // When I reload the page
-        cy.reload();
-        // Then I expect the banner to be hidden
-        CookieConsentBannerSteps.getCookieConsentBanner().should('not.exist');
-        // When I logout
-        LoginSteps.logout();
-        // Then I should see the login page
-        LoginSteps.getLoginPage().should('be.visible');
-        // And the cookie policy banner should be hidden
-        CookieConsentBannerSteps.getCookieConsentBanner().should('not.exist');
-        // When I login with admin
-        LoginSteps.loginWithUser('admin', 'root');
-        // Then the cookie policy banner should be hidden
-        CookieConsentBannerSteps.getCookieConsentBanner().should('not.exist');
-        // When I open cookie policy modal from the widget
-        SettingsSteps.clickCookiePolicyLink();
-        // Then I expect to see that analytic cookies are not allowed and third party cookies are not allowed
-        CookiePolicyModalSteps.validateCookiePolicyDialog(false, false);
-        // When I toggle on third party cookies checkbox
-        CookiePolicyModalSteps.toggleThirdPartyCookies();
-        // And I close the modal
-        CookiePolicyModalSteps.closeDialog();
-        // When I reload the page
-        cy.reload();
-        // Then I expect to see that analytic cookies are not allowed and third party cookies are allowed
-        SettingsSteps.clickCookiePolicyLink();
-        CookiePolicyModalSteps.validateCookiePolicyDialog(false, true);
-    });
-
-    // Scenario 8
-    it('should update cookie policy and give cookie consent when security is ON and free access is ON', () => {
-        // Given I open user and access page in prod mode
-        UserAndAccessSteps.visitInProdMode();
-        // And I enable security
-        UserAndAccessSteps.toggleSecurity();
-        // And I login with admin
-        LoginSteps.loginWithUser('admin', 'root');
-        // And I enable free access
-        UserAndAccessSteps.toggleFreeAccess();
-        UserAndAccessSteps.clickFreeWriteAccessRepo(repository);
-        ModalDialogSteps.clickOKButton();
-        // Then the cookie policy banner should be visible
-        CookieConsentBannerSteps.getCookieConsentBanner().and('be.visible');
-        // When I click on the cookie policy link in the banner
-        CookieConsentBannerSteps.clickCookiePolicyLink();
-        // Then I see the cookie policy
-        CookiePolicyModalSteps.getDialogComponent().should('be.visible');
-        // And I expect to see that analytic and third party cookies are allowed
-        CookiePolicyModalSteps.validateCookiePolicyDialog(true, true);
-        // When I toggle off the analytics cookie checkbox
-        // The policy is saved on the server
-        CookiePolicyModalSteps.toggleStatisticCookies();
-        // And I close the dialog
-        CookiePolicyModalSteps.closeDialog();
-        CookiePolicyModalSteps.getDialog().should('not.exist');
-        // When I logout
-        HeaderSteps.logout();
-        // Then I should still see the user and access page but I have no access to it which is unimportant for this test
-        cy.url().should('include', '/users');
-        // And the cookie policy banner should be visible
-        CookieConsentBannerSteps.getCookieConsentBanner().and('be.visible');
-        // When I click on the cookie policy link in the banner
-        CookieConsentBannerSteps.clickCookiePolicyLink();
-        // Then I see the cookie policy
-        CookiePolicyModalSteps.getDialogComponent().should('be.visible');
-        // And I expect to see that analytic cookies are allowed and third party cookies are allowed
-        // (using browser data, because user is logged out)
-        CookiePolicyModalSteps.validateCookiePolicyDialog(true, true);
-        // And I close the cookie policy modal
-        CookiePolicyModalSteps.closeDialog();
-        // When I open another page
-        MainMenuSteps.clickOnMenuImport();
-        // Then the cookie policy banner should be visible
-        CookieConsentBannerSteps.getCookieConsentBanner().and('be.visible');
-        // When I give cookie consent
-        CookieConsentBannerSteps.giveCookieConsent();
-        // Then the cookie policy banner should be hidden
-        CookieConsentBannerSteps.getCookieConsentBanner().should('not.exist');
-        // When I open another page
-        MainMenuSteps.clickOnSparqlMenu();
-        cy.url().should('include', '/sparql');
-        // Then the cookie policy banner should be hidden
-        CookieConsentBannerSteps.getCookieConsentBanner().should('not.exist');
-        // When I reload the page
-        cy.reload();
-        // Then the cookie policy banner should be hidden
-        CookieConsentBannerSteps.getCookieConsentBanner().should('not.exist');
-        // When I login with admin
-        HeaderSteps.login();
-        LoginSteps.loginWithUser('admin', 'root');
-        cy.url().should('include', '/sparql');
-        // Then the cookie policy banner should be visible (because consent is saved on the server, but user has no changes persisted on server, so defaults are considered)
-        CookieConsentBannerSteps.getCookieConsentBanner().and('be.visible');
-        // When I click on the cookie policy link in the banner
-        CookieConsentBannerSteps.clickCookiePolicyLink();
-        // Then I see the cookie policy
-        CookiePolicyModalSteps.getDialogComponent().should('be.visible');
-        // And I expect to see that analytic cookies are allowed and third party cookies are allowed
-        CookiePolicyModalSteps.validateCookiePolicyDialog(false, true);
-        // When I toggle off third party cookies checkbox
-        CookiePolicyModalSteps.toggleThirdPartyCookies();
-        // And I close the modal
-        CookiePolicyModalSteps.closeDialog();
-        // When I reopen modal from the banner button
-        CookieConsentBannerSteps.clickCookiePolicyLink();
-        // Then I expect to see that analytic cookies are allowed and third party cookies are not allowed
-        CookiePolicyModalSteps.validateCookiePolicyDialog(false, false);
-        CookiePolicyModalSteps.closeDialog();
-        // When I logout
-        HeaderSteps.logout();
-        // And the cookie policy banner should be hidden (using browser data)
-        CookieConsentBannerSteps.getCookieConsentBanner().should('not.exist');
-        // When I login with admin
-        HeaderSteps.login();
-        LoginSteps.loginWithUser('admin', 'root');
-        // Then the cookie policy banner should be visible (consent is persisted with the user on server)
-        CookieConsentBannerSteps.getCookieConsentBanner().should('be.visible');
-        // When I give cookie consent
-        CookieConsentBannerSteps.giveCookieConsent();
-        // Then the cookie policy banner should be hidden
-        CookieConsentBannerSteps.getCookieConsentBanner().should('not.exist');
-        // When I reload the page
-        cy.reload();
-        // Then the cookie policy banner should be hidden
-        CookieConsentBannerSteps.getCookieConsentBanner().should('not.exist');
-    });
-
-    it('should show the consent popup if free access is on and the user is on the login page', () => {
-        // Given: Security is enabled and free access is on
-        UserAndAccessSteps.visitInProdMode();
-        UserAndAccessSteps.toggleSecurity();
-        LoginSteps.loginWithUser('admin', 'root');
-        // And: Free access is enabled
-        UserAndAccessSteps.getFreeAccessSwitchInput().should('not.be.checked');
-        UserAndAccessSteps.toggleFreeAccess();
-        UserAndAccessSteps.clickFreeWriteAccessRepo(repository);
-        ModalDialogSteps.clickOKButton();
-
-        // When: The user visits the login page
-        LoginSteps.visitInProdMode();
-        // Then: The cookie policy popup should be shown
-        CookieConsentBannerSteps.getCookieConsentBanner().should('exist').and('be.visible');
-    });
-
-    it('should not show the consent popup if free access is off and the user is on the login page', () => {
-        // Given: Security is enabled and free access is off
-        UserAndAccessSteps.visitInProdMode();
-        UserAndAccessSteps.toggleSecurity();
-        LoginSteps.loginWithUser('admin', 'root');
-        UserAndAccessSteps.getFreeAccessSwitchInput().should('not.be.checked');
-
-        // When: The user logs out and visits the login page
-        LoginSteps.logout();
-        // Then: The cookie policy popup should not be shown
-        CookieConsentBannerSteps.getCookieConsentBanner().should('not.exist');
-        LoginSteps.visitInProdMode();
-        CookieConsentBannerSteps.getCookieConsentBanner().should('not.exist');
-    });
-});

package/e2e-security/setup/users-and-access/create-user-permissions.spec.js

@@ -1,193 +0,0 @@
-import {MainMenuSteps} from '../../../steps/main-menu-steps';
-import {UserAndAccessSteps} from '../../../steps/setup/user-and-access-steps';
-import {LoginSteps} from '../../../steps/login-steps';
-import {ToasterSteps} from '../../../steps/toaster-steps';
-import {YasqeSteps} from '../../../steps/yasgui/yasqe-steps';
-import {YasrSteps} from '../../../steps/yasgui/yasr-steps';
-
-describe('User Management – Creation, Validation, Permissions & Deletion', () => {
-    let repositoryId;
-    const testPassword = 'P@ssw0rd123!';
-    const testUsername = `testuser-${Date.now()}`;
-
-    beforeEach(() => {
-        cy.loginAsAdmin();
-        cy.switchOffSecurity(true);
-        // Create and initialize a fresh repository for isolation
-        repositoryId = `repo-${Date.now()}`;
-        cy.createRepository({ id: repositoryId });
-        cy.presetRepository(repositoryId);
-        cy.initializeRepository(repositoryId);
-
-        // Navigate to Users & Access
-        UserAndAccessSteps.visit();
-    });
-
-    afterEach(() => {
-        // Clean up repository
-        cy.deleteRepository(repositoryId);
-        cy.deleteUser('user');
-    });
-
-    describe('Create a new user – validation', () => {
-        beforeEach(() => {
-            UserAndAccessSteps.clickCreateNewUserButton();
-            cy.deleteUser('user');
-        });
-
-        it('should show error when username is empty', () => {
-            UserAndAccessSteps.typePassword(testPassword);
-            UserAndAccessSteps.typeConfirmPasswordField(testPassword);
-            UserAndAccessSteps.clickReadAccessRepo(repositoryId);
-            UserAndAccessSteps.clickWriteAccessRepo(repositoryId);
-            UserAndAccessSteps.confirmUserCreate();
-            UserAndAccessSteps.getUserFieldError('username').should('be.visible').and('contain.text', 'Enter username!');
-        });
-
-        it('should show error when passwords are empty', () => {
-            UserAndAccessSteps.typeUsername(testUsername);
-            UserAndAccessSteps.confirmUserCreate();
-            UserAndAccessSteps.getUserFieldError('password').should('be.visible').and('contain.text', 'Enter password!');
-            UserAndAccessSteps.getUserFieldError('confirmPassword').should('be.visible').and('contain.text', 'Confirm password!');
-        });
-
-        it('should show error when passwords do not match', () => {
-            UserAndAccessSteps.typeUsername(testUsername);
-            UserAndAccessSteps.typePassword(testPassword);
-            UserAndAccessSteps.typeConfirmPasswordField('Different123!');
-            UserAndAccessSteps.clickReadAccessRepo(repositoryId);
-            UserAndAccessSteps.clickWriteAccessRepo(repositoryId);
-            UserAndAccessSteps.confirmUserCreate();
-            UserAndAccessSteps.getUserFieldError('confirmPassword').should('be.visible').and('contain.text', 'Confirm password!');
-        });
-
-        it('should show error when username duplicates existing one', () => {
-            UserAndAccessSteps.typeUsername('user');
-            UserAndAccessSteps.typePassword(testPassword);
-            UserAndAccessSteps.typeConfirmPasswordField(testPassword);
-            UserAndAccessSteps.clickReadAccessRepo(repositoryId);
-            UserAndAccessSteps.clickWriteAccessRepo(repositoryId);
-            UserAndAccessSteps.confirmUserCreate();
-
-            cy.url().should('include', '/users');
-            UserAndAccessSteps.clickCreateNewUserButton();
-            UserAndAccessSteps.typeUsername('user');
-            UserAndAccessSteps.typePassword(testPassword);
-            UserAndAccessSteps.typeConfirmPasswordField(testPassword);
-            UserAndAccessSteps.clickWriteAccessRepo(repositoryId);
-            UserAndAccessSteps.confirmUserCreate();
-
-            // Using the toaster from the shared components which has different class names
-
-            ToasterSteps.verifyError('An account with the given username already exists.');
-            cy.deleteUser('user');
-        });
-
-        it('should show error when no repository read access is given', () => {
-            UserAndAccessSteps.typeUsername(testUsername);
-            UserAndAccessSteps.typePassword(testPassword);
-            UserAndAccessSteps.typeConfirmPasswordField(testPassword);
-            UserAndAccessSteps.confirmUserCreate();
-            UserAndAccessSteps.getRepositoryRightsError().should('be.visible').and('contain.text', 'Users should have rights to at least one repository!');
-        });
-
-        it('should show error when custom role is too short', () => {
-            UserAndAccessSteps.typeUsername(testUsername);
-            UserAndAccessSteps.typePassword(testPassword);
-            UserAndAccessSteps.typeConfirmPasswordField(testPassword);
-            UserAndAccessSteps.addTextToCustomRoleField('a');
-            UserAndAccessSteps.clickReadAccessRepo(repositoryId);
-            UserAndAccessSteps.clickWriteAccessRepo(repositoryId);
-            UserAndAccessSteps.getCustomRoleFieldError().should('be.visible').and('contain.text', 'Must be at least 2 symbols long');
-        });
-    });
-
-    describe('Create a new user – read/write access', () => {
-        const rwUsername = `rwuser-${Date.now()}`;
-
-        afterEach(() =>{
-            cy.loginAsAdmin();
-            cy.switchOffSecurity(true);
-            cy.deleteUser(rwUsername);
-        })
-
-        it('should create, login, and verify permissions', () => {
-            UserAndAccessSteps.clickCreateNewUserButton();
-            UserAndAccessSteps.typeUsername(rwUsername);
-            UserAndAccessSteps.typePassword(testPassword);
-            UserAndAccessSteps.typeConfirmPasswordField(testPassword);
-            UserAndAccessSteps.clickReadAccessRepo(repositoryId);
-            UserAndAccessSteps.clickWriteAccessRepo(repositoryId);
-            UserAndAccessSteps.getWriteAccessForRepo(repositoryId).should('be.checked');
-            UserAndAccessSteps.confirmUserCreate();
-            UserAndAccessSteps.toggleSecurity();
-
-            LoginSteps.visitLoginPage();
-
-            LoginSteps.loginWithUser(rwUsername, testPassword);
-            MainMenuSteps.clickOnSparqlMenu();
-
-            YasqeSteps.clearEditor();
-            const prefix = 'PREFIX ex: <http://example.org/>\n';
-            const query = 'INSERT DATA {\n' +
-                'ex:greeting ex:text "Hello, world!" .\n' +
-                '}';
-            cy.pasteIntoCodeMirror('.CodeMirror', prefix + query);
-            YasqeSteps.executeQueryWithoutWaiteResult();
-            // Verify read access
-            YasrSteps.getResponseInfo()
-                .should('not.have.class', 'hidden')
-                .should('not.have.class', 'empty')
-                .should('be.visible')
-                .should('contain.text', 'Added 1 statements.');
-
-            LoginSteps.logout();
-        });
-    });
-
-    describe('Create a new user – read only access', () => {
-        const roUsername = `rouser-${Date.now()}`;
-
-        afterEach(() =>{
-            cy.loginAsAdmin();
-            cy.switchOffSecurity(true);
-            cy.deleteUser(roUsername);
-        })
-
-        it('should create, login, and verify read-only', () => {
-            UserAndAccessSteps.clickCreateNewUserButton();
-            UserAndAccessSteps.typeUsername(roUsername);
-            UserAndAccessSteps.typePassword(testPassword);
-            UserAndAccessSteps.typeConfirmPasswordField(testPassword);
-            UserAndAccessSteps.clickReadAccessRepo(repositoryId);
-            UserAndAccessSteps.getReadAccessForRepo(repositoryId).should('be.checked');
-            UserAndAccessSteps.getWriteAccessForRepo(repositoryId).should('not.be.checked');
-            UserAndAccessSteps.confirmUserCreate();
-            UserAndAccessSteps.toggleSecurity();
-
-            LoginSteps.visitLoginPage();
-
-            LoginSteps.loginWithUser(roUsername, testPassword);
-            MainMenuSteps.clickOnSparqlMenu();
-
-            YasqeSteps.clearEditor();
-            const prefix = 'PREFIX ex: <http://example.org/>\n';
-            const query = 'INSERT DATA {\n' +
-                'ex:greeting ex:text "Hello, world!" .\n' +
-                '}';
-            cy.pasteIntoCodeMirror('.CodeMirror', prefix + query);
-            // Verify no write access
-            YasqeSteps.executeErrorQuery();
-
-            YasqeSteps.clearEditor();
-            const readQuery = 'select * where {\n' +
-                '?s ?p ?o .\n' +
-                '} limit 100';
-            cy.pasteIntoCodeMirror('.CodeMirror', readQuery);
-            // Verify read accessorQuery();
-            YasqeSteps.executeQuery();
-
-            LoginSteps.logout();
-        });
-    });
-});

package/e2e-security/setup/users-and-access/graphql-user.spec.js

@@ -1,126 +0,0 @@
-import {UserAndAccessSteps} from "../../../steps/setup/user-and-access-steps";
-import {LoginSteps} from "../../../steps/login-steps";
-import {GraphqlPlaygroundSteps} from "../../../steps/graphql/graphql-playground-steps";
-import {RepositorySteps} from "../../../steps/repository-steps";
-
-describe('GraphQL-only User – Playground Access & Mutation Restriction', () => {
-    let repositoryId;
-    const gqlUsername = `gqluser-${Date.now()}`;
-    const testPassword = 'P@ssw0rd123!';
-    const readQuery = `
-                query StarshipById {
-                  starship(ID: "https://swapi.co/resource/starship/9") {
-                    name
-                  }
-                }
-            `;
-    const mutation = `
-    mutation CreateHuman {
-      create_Human(
-        objects: [
-          {
-            id: "file:/test/onto/vocabulary/Human1",
-            rdfs_label: "New human with specific iri id"
-          }
-        ]
-      ) {
-        human { id }
-        affected_objects { ids }
-      }
-    }
-  `;
-
-    beforeEach(() => {
-        repositoryId = `repo-${Date.now()}`;
-        cy.createRepository({ id: repositoryId });
-        cy.presetRepository(repositoryId);
-        cy.importServerFile(repositoryId, 'swapi-dataset.ttl');
-        cy.uploadGraphqlSchema(repositoryId, 'graphql/soml/swapi-schema.yaml', 'swapi');
-    });
-
-    afterEach(() => {
-        cy.loginAsAdmin();
-        cy.switchOffSecurity(true);
-        cy.deleteUser(gqlUsername);
-        cy.deleteRepository(repositoryId);
-    });
-
-    it('should see only the assigned repo, block SPARQL, allow GraphQL read and forbid writes, and hide create-repo everywhere', () => {
-        UserAndAccessSteps.visit();
-        UserAndAccessSteps.clickCreateNewUserButton();
-        UserAndAccessSteps.typeUsername(gqlUsername);
-        UserAndAccessSteps.typePassword(testPassword);
-        UserAndAccessSteps.typeConfirmPasswordField(testPassword);
-        UserAndAccessSteps.clickReadAccessRepo(repositoryId);
-        UserAndAccessSteps.clickGraphqlAccessRepo(repositoryId);
-        UserAndAccessSteps.confirmUserCreate();
-
-        UserAndAccessSteps.toggleSecurity();
-
-        // Log in as GraphQL-only user
-        LoginSteps.loginWithUser(gqlUsername, testPassword);
-
-        // The repository is set
-        RepositorySteps.verifyRepositoryIsSelected(repositoryId);
-
-        // Verify only the assigned repository appears in endpoints
-        GraphqlPlaygroundSteps.visit();
-        GraphqlPlaygroundSteps.getView().should('be.visible');
-        GraphqlPlaygroundSteps.getQueryEditor().should('be.visible');
-        GraphqlPlaygroundSteps.getSelectedEndpoint().should('have.text', 'swapi');
-        // And I can execute a query on the countries endpoint
-        GraphqlPlaygroundSteps.setInEditor(readQuery);
-        // And I execute the query
-        GraphqlPlaygroundSteps.executeQuery();
-        // Then I get expected result
-        GraphqlPlaygroundSteps.getResponse().should('contain', '"name": "Death Star"');
-
-        // Execute the create_Human mutation → expect errors
-        GraphqlPlaygroundSteps.setInEditor(mutation);
-        GraphqlPlaygroundSteps.executeQuery();
-        GraphqlPlaygroundSteps.getResponse().should('contain.text', 'errors');
-        LoginSteps.logout();
-    });
-
-    it('should allow GraphQL mutation and hide SPARQL/Import/Create-repo menus', () => {
-        UserAndAccessSteps.visit();
-        UserAndAccessSteps.clickCreateNewUserButton();
-        UserAndAccessSteps.typeUsername(gqlUsername);
-        UserAndAccessSteps.typePassword(testPassword);
-        UserAndAccessSteps.typeConfirmPasswordField(testPassword);
-        UserAndAccessSteps.clickReadAccessRepo(repositoryId);
-        UserAndAccessSteps.clickWriteAccessRepo(repositoryId);
-        UserAndAccessSteps.clickGraphqlAccessRepo(repositoryId);
-        UserAndAccessSteps.confirmUserCreate();
-
-        UserAndAccessSteps.toggleSecurity();
-
-        // Log in as the new user
-        LoginSteps.loginWithUser(gqlUsername, testPassword);
-
-        // The repository is set
-        RepositorySteps.verifyRepositoryIsSelected(repositoryId);
-
-        // Visit GraphQL Playground
-        GraphqlPlaygroundSteps.visit();
-        GraphqlPlaygroundSteps.getView().should('be.visible');
-        GraphqlPlaygroundSteps.getQueryEditor().should('be.visible');
-        GraphqlPlaygroundSteps.getSelectedEndpoint().should('have.text', 'swapi');
-
-        // Execute a read query to verify read access
-        GraphqlPlaygroundSteps.setInEditor(readQuery);
-        GraphqlPlaygroundSteps.executeQuery();
-        GraphqlPlaygroundSteps.getResponse()
-            .should('contain.text', '"name": "Death Star"');
-
-        // Execute the mutation and expect success
-        GraphqlPlaygroundSteps.setInEditor(mutation);
-        GraphqlPlaygroundSteps.executeQuery();
-        GraphqlPlaygroundSteps.getResponse()
-            .should('contain.text', 'data')
-            .and('contain.text', 'create_Human')
-            .and('contain.text', 'affected_objects');
-
-        LoginSteps.logout();
-    });
-});