Add E2E tests for permission based Project Secrets CRUD operations
Issue Link: #569617 (closed)
This MR adds comprehensive end-to-end (E2E) test coverage for the Project Secrets feature in GitLab's Secrets Manager. It implements automated tests to validate CRUD (Create, Read, Update, Delete) operations with permission-based access control across Roles, Users, and Groups.
Why is this needed?
The Secrets Manager feature requires thorough testing to ensure that:
- Secrets can be created, read, updated, and deleted correctly through the UI
- Permission-based access control works as expected for different permission types (Role-based, User-based, and Group-based)
- The UI interactions function properly across the entire secrets lifecycle
- Users without appropriate permissions are properly blocked from performing unauthorized actions
Test Coverage Summary
| Operation | Test Case | Permission Type | User Role | Permission | Expected Result |
|---|---|---|---|---|---|
| Create | 581636 | Role-based | Maintainer |
|
Secret created successfully |
| Create | 581637 | Role-based | Reporter |
|
Permission error |
| Read | 581639 | Group-based | Reporter |
|
Secret visible |
| Read | 581640 | Role-based | Reporter |
|
Permission error |
| Update | 581641 | Role-based | Maintainer |
|
Secret updated |
| Update | 581642 | Role-based | Reporter |
|
Permission error |
| Delete | 581643 | Role-based | Maintainer |
|
Permission error |
| Delete | 581644 | User-based | Reporter |
|
Secret deleted |
Edited by Shabini Rajadas