test: Admin Core — Settings, Appearance, Users, Enrollments, Categories

[guillermoscript]

Scope

Admin operational pages that were not covered by analytics/reporting or billing issues.

Personas

Persona	Email	Role
Admin/Owner	owner@e2etest.com	admin (Default School)

Routes Under Test

Route	Description
/dashboard/admin/settings	General, Email, Payment, Enrollment settings
/dashboard/admin/appearance	Branding: logo, colors, theme
/dashboard/admin/users	User management: list, invite, role management
/dashboard/admin/users/[userId]	Individual user detail: profile, enrollments, role change
/dashboard/admin/enrollments	All student enrollments — search, filter, status change
/dashboard/admin/categories	Course category CRUD
/dashboard/admin/api-tokens	API token management
/dashboard/admin/notifications	Notification settings and history
/dashboard/admin/notifications/templates	Custom notification templates

Test Cases

Settings (/dashboard/admin/settings)

• General: site name, description, contact email — save persists to system_settings
• Email: SMTP config fields render (values hidden, not shown in plaintext)
• Payment: payment method toggle (stripe/manual), webhook URL shown
• Enrollment: auto-approve toggle, enrollment limits

Appearance (/dashboard/admin/appearance)

• Upload school logo → stored in Supabase storage, visible in navbar
• Primary color picker → changes tenant_settings.primary_color
• Color change propagates to CSS custom properties (tenant theming)
• Dark mode preview works

User Management (/dashboard/admin/users)

• User list loads with name, role, join date
• Search by name filters list
• Filter by role (student/teacher/admin)
• Invite user → sends email, creates pending tenant_users row
• Role change (student → teacher) → updates tenant_users.role
• Removing user → removes from tenant_users (does not delete auth user)

User Detail (/dashboard/admin/users/[userId])

• Profile info: name, email (fetched via admin auth), join date
• Enrollment list for that user
• Role badge editable

Enrollments (/dashboard/admin/enrollments)

• All active enrollments listed
• Filter by course
• Filter by status (active/disabled)
• Manual enroll student → creates enrollment record
• Disable enrollment → sets status to disabled

Categories (/dashboard/admin/categories)

• Create category: name, slug, description
• Edit category
• Delete category (confirm: courses using it need handling)
• Categories appear in course creation form

API Tokens (/dashboard/admin/api-tokens)

• Generate new token → shown once, then masked
• Revoke token → removed from DB
• Token list shows name, created date, last used

Notifications

• Notification history lists sent notifications
• Templates: create/edit notification template
• Send test notification to a user

Definition of Done

• All settings save to DB and reflect on next load
• Appearance changes visible immediately on school subdomain
• User invite sends email (or logs in dev mode)
• Enrollment management works without breaking RLS

[guillermoscript]

QA — admin core pages all render clean (no code change)

Tested on Default School as owner@e2etest.com (admin). All data matches DB.

Page	Result
Users (/admin/users)	✅ 2 users / 0 teachers / 1 student. Table: Test Student (student@e2etest.com, Student, 2 enrollments, Active) + School Owner (Admin). Emails resolved via admin auth. Search + Invite + Roles/View actions present.
Settings (/admin/settings)	✅ General/Email/Payment/Enrollment tabs; General shows Site Name, Description, Contact + Support Email, Timezone.
Enrollments (/admin/enrollments)	✅ Total 2 / Active 2 / Completed 0. Test Student in "Introduction to Testing" + "Web Development Basics", both Active.
Categories (/admin/categories)	✅ 4 categories with per-category course counts (Business 0, Data Science 1, Design 0, Programming 3). Add/Edit/Delete.
API Tokens (/admin/api-tokens)	✅ Create Token + How-to-Connect guide + empty "No tokens yet" state.
Appearance (/admin/appearance)	✅ Live preview (course card, component variants, notifications, dashboard stats) + Theme customizer (color/font/radius).

Not exercised this pass

Mutations deferred to keep seed pristine + avoid side effects: user invite (sends email), role change, manual enroll, category/token CRUD, logo upload (storage), primary-color change. All read paths + data correctness verified clean — no bugs found.