Safety net: Agent — list, show, RBAC

Agent — list, show, RBAC

Integration tests covering the agent list page, show page rendering, and role-based access control across all three namespaces (explore, project, group).

Test cases

• List page renders agent items from query response
• List page shows empty state when no agents exist
• List page includes third-party flows when aiCatalogThirdPartyFlows feature is enabled
• List page excludes third-party flows when feature is disabled
• List page search filters results
• Show page renders agent details (name, description, system prompt, tools, MCP servers, visibility, type)
• Explore: logged-in user sees Enable and Duplicate, but not Edit/Delete/Disable
• Explore: logged-in user does NOT see Enable for foundational agent
• Explore: logged-out user sees no action buttons
• Project: admin user sees Edit, Duplicate, Delete/Hide, and Disable (when enabled)
• Project: admin consumer (non-admin) sees Enable (when not enabled), Disable (when enabled), but not Edit/Delete
• Project: user with no permissions sees no action buttons
• Project: instance admin sees hard Delete option (with soft/hard radio choice)
• Group: admin consumer sees Disable (when enabled), but NOT Edit/Delete/Duplicate
• Group: user with reportAiCatalogItem sees Report, but not on foundational agents
• Unauthorized user redirected away from create page
• Unauthorized user redirected away from edit page
• Unauthorized user redirected away from duplicate page

Location

ee/spec/frontend/ai/catalog/integration/agent_list_show_rbac_integration_spec.js

Dependencies

Blocked by: Safety net: Integration test infrastructure