WP-40/41/42: dashboard, security hardening, deployment and operations docs
Dashboard endpoint and page aggregating inventory, vulnerabilities, cluster health, backups and recent jobs. Security headers (CSP, nosniff, DENY, referrer policy), 1 MB body limit, configurable login rate limit, audit steps in CI. Installer script, systemd unit, install/architecture docs. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
This commit is contained in:
@ -25,7 +25,7 @@ test('admin logs in, manages users, logs out; user has no admin access', async (
|
||||
await expect(page.getByRole('heading', { name: 'Dashboard' })).toBeVisible()
|
||||
|
||||
// create a user
|
||||
await page.getByRole('link', { name: 'Users' }).click()
|
||||
await page.getByRole('navigation').getByRole('link', { name: 'Users' }).click()
|
||||
await page.getByRole('button', { name: 'New user' }).click()
|
||||
const email = `e2e-${Date.now()}@example.com`
|
||||
await page.getByLabel('Email').fill(email)
|
||||
@ -48,7 +48,7 @@ test('admin logs in, manages users, logs out; user has no admin access', async (
|
||||
// the new user can log in but not manage users
|
||||
await login(page, email, 'user-password-123')
|
||||
await expect(page.getByRole('heading', { name: 'Dashboard' })).toBeVisible()
|
||||
await expect(page.getByRole('link', { name: 'Users' })).toHaveCount(0)
|
||||
await expect(page.getByRole('navigation').getByRole('link', { name: 'Users' })).toHaveCount(0)
|
||||
await page.goto('/users')
|
||||
await expect(page.getByText('You do not have permission')).toBeVisible()
|
||||
})
|
||||
|
||||
Reference in New Issue
Block a user