snapshot of https://github.com/mattermost/mattermost.git (master, 2026-09-16; blobs > 131072B omitted)

e2e-tests/cypress/tests/integration/channels/enterprise/permissions/bookmark_permissions_spec.ts

@@ -0,0 +1,82 @@
+// Copyright (c) 2015-present Mattermost, Inc. All Rights Reserved.
+// See LICENSE.txt for license information.
+
+// ***************************************************************
+// - [#] indicates a test step (e.g. # Go to a page)
+// - [*] indicates an assertion (e.g. * Check the title)
+// - Use element ID when selecting an element. Create one if none.
+// ***************************************************************
+
+// Stage: @prod
+// Group: @channels @enterprise @permissions
+
+import * as TIMEOUTS from '@/fixtures/timeouts';
+
+const deleteExistingTeamOverrideSchemes = () => {
+    cy.apiGetSchemes('team').then(({schemes}) => {
+        schemes.forEach((scheme) => {
+            cy.apiDeleteScheme(scheme.id);
+        });
+    });
+};
+
+const checkChannelBookmarksPermissionsAreVisibleAndSet = () => {
+    const permissionRowIds = ['all_users-public_channel-manage_public_channel_bookmarks-checkbox',
+        'all_users-private_channel-manage_private_channel_bookmarks-checkbox'];
+
+    permissionRowIds.forEach((id) => {
+        cy.findByTestId(id).then((el) => {
+            expect(el.hasClass('checked')).to.be.true;
+        });
+    });
+};
+
+describe('Revoke Bookmarks Permissions', () => {
+    before(() => {
+        cy.apiRequireLicense();
+        cy.apiInitSetup();
+        deleteExistingTeamOverrideSchemes();
+    });
+
+    beforeEach(() => {
+        cy.apiLogout();
+        cy.apiAdminLogin();
+        cy.apiResetRoles();
+    });
+
+    it('Channel Bookmarks permissions should be visible and set in the system scheme', () => {
+        cy.apiAdminLogin();
+
+        // # Go to `User Management / Permissions` section
+        cy.visit('/admin_console/user_management/permissions');
+
+        // # Click `Edit Scheme` on System Scheme
+        cy.findByTestId('systemScheme-link').should('be.visible').click().wait(TIMEOUTS.HALF_SEC);
+
+        // # Find and ensure that manage bookmarks permissions are visible and set
+        checkChannelBookmarksPermissionsAreVisibleAndSet();
+    });
+
+    it('Channel Bookmarks permissions should be visible and set in a custom scheme', () => {
+        cy.apiAdminLogin();
+
+        // # Go to `User Management / Permissions` section
+        cy.visit('/admin_console/user_management/permissions');
+
+        // # Click `New Team Override Scheme`
+        cy.findByTestId('team-override-schemes-link').should('be.visible').click().wait(TIMEOUTS.HALF_SEC);
+
+        // # Type Name and Description
+        cy.get('#scheme-name').should('be.visible').type('custom test schema');
+        cy.get('#scheme-description').type('description');
+
+        // # Save scheme
+        cy.get('#saveSetting').click().wait(TIMEOUTS.TWO_SEC);
+
+        // # Edit the schema
+        cy.findByTestId('custom test schema-edit').should('be.visible').click().wait(TIMEOUTS.HALF_SEC);
+
+        // # Find and ensure that manage bookmarks permissions are visible and set
+        checkChannelBookmarksPermissionsAreVisibleAndSet();
+    });
+});

e2e-tests/cypress/tests/integration/channels/enterprise/permissions/team_permissions_spec.ts

@@ -0,0 +1,234 @@
+// Copyright (c) 2015-present Mattermost, Inc. All Rights Reserved.
+// See LICENSE.txt for license information.
+
+// ***************************************************************
+// - [#] indicates a test step (e.g. # Go to a page)
+// - [*] indicates an assertion (e.g. * Check the title)
+// - Use element ID when selecting an element. Create one if none.
+// ***************************************************************
+
+// Stage: @prod
+// Group: @channels @enterprise @permissions
+
+import * as TIMEOUTS from '@/fixtures/timeouts';
+
+const deleteExistingTeamOverrideSchemes = () => {
+    cy.apiGetSchemes('team').then(({schemes}) => {
+        schemes.forEach((scheme) => {
+            cy.apiDeleteScheme(scheme.id);
+        });
+    });
+};
+
+const createTeamOverrideSchemeWithPermission = (name: string, team: Cypress.Team, permissionId: string, permissionValue: boolean) => {
+    cy.apiAdminLogin();
+
+    // # Go to `User Management / Permissions` section
+    cy.visit('/admin_console/user_management/permissions');
+
+    // # Click `New Team Override Scheme`
+    cy.findByTestId('team-override-schemes-link').should('be.visible').click().wait(TIMEOUTS.HALF_SEC);
+
+    // # Type Name and Description
+    cy.get('#scheme-name').should('be.visible').type(name);
+    cy.get('#scheme-description').type('Description');
+
+    // # Click `Add Teams`
+    cy.findByTestId('add-teams').should('be.visible').click().wait(TIMEOUTS.HALF_SEC);
+
+    // # Find and select testTeam
+    cy.get('#selectItems input').typeWithForce(team.display_name).wait(TIMEOUTS.HALF_SEC);
+    cy.get('#multiSelectList div.more-modal__row.clickable').eq(0).click().wait(TIMEOUTS.HALF_SEC);
+
+    // # Save scheme
+    cy.get('#saveItems').should('be.visible').click().wait(TIMEOUTS.HALF_SEC);
+
+    // # Modify the permissions scheme
+    cy.findByTestId(permissionId).then((el) => {
+        if ((!el.hasClass('checked') && permissionValue) || (el.hasClass('checked') && !permissionValue)) {
+            el.click();
+        }
+    });
+
+    // # Save scheme
+    cy.get('#saveSetting').click().wait(TIMEOUTS.TWO_SEC);
+    cy.apiLogout();
+};
+
+describe('Team Permissions', () => {
+    let testTeam: Cypress.Team;
+    let testUser: Cypress.UserProfile;
+    let testPrivateCh: Cypress.Channel;
+    let otherUser: Cypress.UserProfile;
+    const schemeName = 'schemetest';
+    before(() => {
+        cy.apiRequireLicense();
+        cy.apiInitSetup().then(({team, user}) => {
+            testTeam = team;
+            testUser = user;
+            cy.apiCreateChannel(testTeam.id, 'private-permissions-test', 'Private Permissions Test', 'P', '').then(({channel}) => {
+                cy.apiAddUserToChannel(channel.id, testUser.id);
+                testPrivateCh = channel;
+            });
+            cy.apiCreateUser().then(({user: newUser}) => {
+                otherUser = newUser;
+                cy.apiAddUserToTeam(testTeam.id, otherUser.id);
+            });
+        });
+    });
+
+    beforeEach(() => {
+        cy.apiLogout();
+        cy.apiAdminLogin();
+        cy.apiResetRoles();
+        deleteExistingTeamOverrideSchemes();
+    });
+
+    it('MM-T2871 Member cannot add members to the team', () => {
+        createTeamOverrideSchemeWithPermission(schemeName, testTeam, 'all_users-teams_team_scope-send_invites-checkbox', false);
+        cy.apiLogin(testUser);
+
+        // # Go to main channel
+        cy.visit(`/${testTeam.name}/channels/town-square`);
+
+        // # Open hamburger menu
+        cy.uiOpenTeamMenu().wait(TIMEOUTS.HALF_SEC);
+
+        // * Verify `Invite People` menu item is not present
+        cy.get("#sidebarTeamMenu li:contains('Invite people')").should('not.exist');
+
+        // # Click `View Members` menu item
+        cy.get("#sidebarTeamMenu li:contains('View members')").should('be.visible').click().wait(TIMEOUTS.HALF_SEC);
+
+        // * Verify team members modal opens
+        cy.get('#teamMembersModal').should('be.visible');
+
+        // * Verify 'Invite People` button is not present
+        cy.get('#invitePeople').should('not.exist');
+    });
+
+    it('MM-T2876 Member cannot add or remove other members from private channel', () => {
+        createTeamOverrideSchemeWithPermission(schemeName, testTeam, 'all_users-private_channel-manage_private_channel_members_and_read_groups-checkbox', false);
+        cy.apiLogin(testUser);
+
+        // # Go to private channel
+        cy.visit(`/${testTeam.name}/channels/${testPrivateCh.name}`);
+
+        // # Open channel header menu
+        cy.uiOpenChannelMenu().wait(TIMEOUTS.HALF_SEC);
+
+        // * Verify dropdown opens
+        cy.get('#channelHeaderDropdownMenu').should('be.visible');
+
+        // * Verify `View Members` menu item is visible
+        cy.get('#channelMembers').should('be.visible');
+
+        // # Close channel header menu
+        cy.get('body').type('{esc}');
+
+        // # Open channel members list
+        cy.get('.member-rhs__trigger').should('be.visible').click().wait(TIMEOUTS.HALF_SEC);
+
+        // * Verify it does not countains Add or Manage buttons
+        cy.uiGetRHS().contains('button', 'Manage').should('not.exist');
+        cy.uiGetRHS().contains('button', 'Add').should('not.exist');
+    });
+
+    it('MM-T2878 Member cannot create a private channel', () => {
+        createTeamOverrideSchemeWithPermission(schemeName, testTeam, 'all_users-private_channel-create_private_channel-checkbox', false);
+        cy.apiLogin(testUser);
+
+        // # Go to main channel
+        cy.visit(`/${testTeam.name}/channels/town-square`);
+
+        // # Click on create new channel at LHS
+        cy.uiBrowseOrCreateChannel('Create new channel');
+
+        // * Verify that the create private channel is disabled
+        cy.findByRole('dialog', {name: 'Create a new channel'}).find('#public-private-selector-button-P').should('have.class', 'disabled');
+    });
+
+    it('MM-T2900 As a Channel Admin, the test user is now able to add or remove other users from public channel', () => {
+        cy.apiLogin(testUser);
+
+        // # Create new public channel
+        cy.apiCreateChannel(testTeam.id, 'public-permissions-test', 'Public Permissions Test', 'O', '').then(({channel}) => {
+            // # Visit the created channel
+            cy.visit(`/${testTeam.name}/channels/${channel.name}`);
+
+            // # Open channel header menu
+            cy.uiOpenChannelMenu().wait(TIMEOUTS.HALF_SEC);
+
+            // * Verify dropdown opens
+            cy.get('#channelHeaderDropdownMenu').should('be.visible');
+
+            // # Click on `Members`
+            cy.get('#channelMembers').should('be.visible').click().wait(TIMEOUTS.HALF_SEC);
+            cy.uiGetButton('Add').click();
+
+            // # Search and select otherUser
+            cy.get('#selectItems input').typeWithForce(otherUser.username).wait(TIMEOUTS.HALF_SEC);
+            cy.get('#multiSelectList div').eq(0).click();
+
+            // # Click `Save` button
+            cy.get('#saveItems').should('be.visible').click().wait(TIMEOUTS.ONE_SEC);
+
+            // # Open channel header menu
+            cy.uiOpenChannelMenu().wait(TIMEOUTS.HALF_SEC);
+
+            // * Verify dropdown opens
+            cy.get('#channelHeaderDropdownMenu').should('be.visible');
+
+            // # Click on `Members`
+            cy.get('#channelMembers').should('be.visible').click().wait(TIMEOUTS.HALF_SEC);
+            cy.uiGetButton('Manage').click();
+
+            // # Click on `Member`
+            cy.uiGetRHS().findByTestId(`memberline-${otherUser.id}`).within(() => {
+                cy.findByTestId('rolechooser').should('be.visible').and('contain.text', 'Member').click().wait(TIMEOUTS.HALF_SEC);
+                cy.findByTestId('rolechooser').within(() => {
+                    // * Verify the user can be removed
+                    cy.get('.Menu__content.dropdown-menu .MenuItem').eq(1).should('be.visible').and('contain.text', 'Remove from Channel').click();
+                });
+            });
+        });
+    });
+
+    it('MM-T2908 As a Team Admin, the test user is able to update the public channel Name, Header and Purpose', () => {
+        cy.apiLogin(testUser);
+
+        // # Create new team
+        cy.apiCreateTeam('test-team-permissions', 'Test Team Permissions').then(({team}) => {
+            // # Visit the `Off-Topic` channel in the new team
+            cy.visit(`/${team.name}/channels/off-topic`);
+
+            // # Open channel header dropdown
+            cy.get('#channelHeaderDropdownButton').click();
+
+            // * Verify Channel Settings option is visible
+            cy.findByText('Channel Settings').should('be.visible');
+
+            // # Click on Channel Settings
+            cy.findByText('Channel Settings').click();
+
+            // * Verify Channel Settings modal opens
+            cy.get('.ChannelSettingsModal').should('be.visible');
+
+            // * Verify user can edit channel name
+            cy.get('#input_channel-settings-name').should('be.visible').and('not.be.disabled');
+
+            // * Verify user can edit channel URL
+            cy.get('.url-input-button').should('be.visible').and('not.be.disabled');
+
+            // * Verify user can edit channel purpose
+            cy.get('#channel_settings_purpose_textbox').scrollIntoView().should('be.visible').and('not.be.disabled');
+
+            // * Verify user can edit channel header
+            cy.get('#channel_settings_header_textbox').scrollIntoView().should('be.visible').and('not.be.disabled');
+
+            // # Close the modal
+            cy.get('.GenericModal .modal-header button[aria-label="Close"]').click();
+            cy.get('.ChannelSettingsModal').should('not.exist');
+        });
+    });
+});