Read-only tenant mode tests

cypress/integration/plugins/security-dashboards-plugin/readonly.js

@@ -0,0 +1,84 @@
+/*
+ * Copyright OpenSearch Contributors
+ * SPDX-License-Identifier: Apache-2.0
+ */
+
+import roleWithoutTestJson from '../../../fixtures/plugins/security-dashboards-plugin/roles/roleWithoutTest';
+import { BASE_PATH } from '../../../utils/base_constants';
+import { ADMIN_AUTH, CURRENT_TENANT } from '../../../utils/commands';
+
+const TEST_CONFIG = {
+  role: {
+    name: 'test_readonly_role',
+    json: Object.assign({}, roleWithoutTestJson, {
+      tenant_permissions: [
+        {
+          tenant_patterns: ['test_readonly_tenant'],
+          allowed_actions: ['kibana_all_read'],
+        },
+      ],
+    }),
+  },
+  tenant: {
+    name: 'test_readonly_tenant',
+    description: 'Testing read-only tenant mode',
+  },
+  user: {
+    username: 'test_readonly_user',
+    password: 'testUserPassword123',
+  },
+};
+
+if (Cypress.env('SECURITY_ENABLED')) {
+  describe('Read Only mode', () => {
+    before(() => {
+      CURRENT_TENANT.newTenant = TEST_CONFIG.tenant.name;
+
+      cy.server();
+
+      cy.createTenant(TEST_CONFIG.tenant.name, {
+        description: TEST_CONFIG.tenant.description,
+      });
+
+      cy.createInternalUser(TEST_CONFIG.user.username, {
+        password: TEST_CONFIG.user.password,
+      });
+
+      cy.createRole(TEST_CONFIG.role.name, TEST_CONFIG.role.json);
+
+      cy.createRoleMapping(TEST_CONFIG.role.name, {
+        users: [TEST_CONFIG.user.username],
+      });
+
+      cy.loadSampleData('logs');
+    });
+
+    it('should be able to modify the dashboard as admin', () => {
+      cy.visit(BASE_PATH);
+      cy.waitForLoader();
+
+      cy.getElementByTestId('tenant-switch-modal')
+        .find('[data-test-subj="confirm"]')
+        .click({ force: true });
+      cy.waitForLoader();
+
+      cy.visitDashboard('[Logs] Web Traffic');
+
+      cy.getElementByTestId('dashboardClone').should('exist');
+      cy.getElementByTestId('dashboardEditMode').should('exist');
+    });
+
+    it('should not be able to modify the dashboard when is performing as a custom readonly tenant', () => {
+      ADMIN_AUTH.newUser = TEST_CONFIG.user.username;
+      ADMIN_AUTH.newPassword = TEST_CONFIG.user.password;
+
+      cy.visit(BASE_PATH);
+      cy.waitForLoader();
+
+      cy.visitDashboard('[Logs] Web Traffic');
+
+      cy.getElementByTestId('dashboardClone').should('not.exist');
+      cy.getElementByTestId('dashboardEditMode').should('not.exist');
+    });
+  });
+}

cypress/utils/commands.js

@@ -483,3 +483,12 @@ Cypress.Commands.add(
       });
   }
 );
+
+// type: logs, ecommerce, flights
+Cypress.Commands.add('loadSampleData', (type) => {
+  cy.request({
+    method: 'POST',
+    headers: { 'osd-xsrf': 'opensearch-dashboards' },
+    url: `${BASE_PATH}/api/sample_data/${type}`,
+  });
+});