test: ExportEngagementButton + EngagementDetailPage RBAC tests
9 tests for ExportEngagementButton (render, open, close-outside, Escape, per-format trigger, loading state, error toast). 3 RBAC tests for EngagementDetailPage (admin/redteam see Export, soc does not). Total: 121 → 133 vitest passing. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
94
frontend/tests/EngagementDetailPage.test.tsx
Normal file
94
frontend/tests/EngagementDetailPage.test.tsx
Normal file
@@ -0,0 +1,94 @@
|
||||
import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
|
||||
import { screen, waitFor } from '@testing-library/react';
|
||||
import { Route, Routes } from 'react-router-dom';
|
||||
import MockAdapter from 'axios-mock-adapter';
|
||||
import { apiClient } from '@/api/client';
|
||||
import { EngagementDetailPage } from '@/pages/EngagementDetailPage';
|
||||
import { renderWithProviders } from './utils';
|
||||
import type { Engagement } from '@/api/types';
|
||||
|
||||
vi.mock('@/api/exports', () => ({
|
||||
downloadEngagementExport: vi.fn(),
|
||||
}));
|
||||
|
||||
const ENGAGEMENT: Engagement = {
|
||||
id: 1,
|
||||
name: 'Test Engagement',
|
||||
description: 'A test engagement',
|
||||
start_date: '2026-06-01',
|
||||
end_date: null,
|
||||
status: 'active',
|
||||
created_at: '2026-06-01T08:00:00',
|
||||
created_by: { id: 1, username: 'alice' },
|
||||
};
|
||||
|
||||
type MockRole = 'admin' | 'redteam' | 'soc';
|
||||
let mockRole: MockRole = 'admin';
|
||||
|
||||
function DetailPage() {
|
||||
return (
|
||||
<Routes>
|
||||
<Route path="/engagements/:id" element={<EngagementDetailPage />} />
|
||||
</Routes>
|
||||
);
|
||||
}
|
||||
|
||||
vi.mock('@/hooks/useAuth', () => ({
|
||||
useAuth: () => ({
|
||||
user: { id: 1, username: 'alice', role: mockRole, created_at: '2026-01-01' },
|
||||
status: 'authenticated',
|
||||
login: vi.fn(),
|
||||
logout: vi.fn(),
|
||||
isAdmin: mockRole === 'admin',
|
||||
isRedteam: mockRole === 'redteam',
|
||||
isSoc: mockRole === 'soc',
|
||||
canEditEngagements: mockRole === 'admin' || mockRole === 'redteam',
|
||||
}),
|
||||
}));
|
||||
|
||||
describe('EngagementDetailPage — RBAC for Export button', () => {
|
||||
let mock: MockAdapter;
|
||||
|
||||
beforeEach(() => {
|
||||
mock = new MockAdapter(apiClient);
|
||||
mock.onGet('/engagements/1').reply(200, ENGAGEMENT);
|
||||
mock.onGet('/engagements/1/simulations').reply(200, []);
|
||||
});
|
||||
|
||||
afterEach(() => {
|
||||
mock.restore();
|
||||
});
|
||||
|
||||
it('admin sees Export button', async () => {
|
||||
mockRole = 'admin';
|
||||
renderWithProviders(<DetailPage />, {
|
||||
routerProps: { initialEntries: ['/engagements/1'] },
|
||||
});
|
||||
await waitFor(() => {
|
||||
expect(screen.getByText('Test Engagement')).toBeInTheDocument();
|
||||
});
|
||||
expect(screen.getByTestId('export-dropdown')).toBeInTheDocument();
|
||||
});
|
||||
|
||||
it('redteam sees Export button', async () => {
|
||||
mockRole = 'redteam';
|
||||
renderWithProviders(<DetailPage />, {
|
||||
routerProps: { initialEntries: ['/engagements/1'] },
|
||||
});
|
||||
await waitFor(() => {
|
||||
expect(screen.getByText('Test Engagement')).toBeInTheDocument();
|
||||
});
|
||||
expect(screen.getByTestId('export-dropdown')).toBeInTheDocument();
|
||||
});
|
||||
|
||||
it('soc does NOT see Export button', async () => {
|
||||
mockRole = 'soc';
|
||||
renderWithProviders(<DetailPage />, {
|
||||
routerProps: { initialEntries: ['/engagements/1'] },
|
||||
});
|
||||
await waitFor(() => {
|
||||
expect(screen.getByText('Test Engagement')).toBeInTheDocument();
|
||||
});
|
||||
expect(screen.queryByTestId('export-dropdown')).toBeNull();
|
||||
});
|
||||
});
|
||||
Reference in New Issue
Block a user