Skip to content

387 — should check when user have time records ultimate permission

Description

Verifies that an employee with the "Time records ultimate" global user role can see and edit every user's time records, including the owner's, without being on the same team.

Preconditions

  • A signed-in owner who will create the role, plus an invited employee who will receive it.
  • Seed data: two projects with one task each and one time record per project. The owner's time record id is captured for direct selection.

Steps

  1. As the owner, go to Roles → User roles, add a user role with the test title, toggle "Time records ultimate" on, then save. Expected: the new role appears in the user roles list.
  2. Assign the role to the invited employee via API and reset the session.
  3. Sign in as the employee and open Time tracking. Expected: the area shows the 5 standard tabs.
  4. View the personal calendar. Expected: 1 time record (the employee's own).
  5. Switch to the Users calendar. Expected: 2 time records are visible and both the employee and owner avatars appear.
  6. Double-click the owner's time record event. Expected: the time record modal opens showing the owner's name.
  7. Set a client description "test" and click Save. Expected: an "Updated" confirmation popup appears — confirming cross-user edit at organization scope.
  • Spec: playwright/tests/integration/permissions.spec.ts (line 810)