test: [M3-9595] - Firewall create page for restricted users (#12237)

* add restricted user tests

* Added changeset: Test for firewall create page for restricted users

* edits after pr review

* edit test descriptions after pr review

Author: dmcintyr-akamai

packages/manager/.changeset/pr-12237-tests-1747403119751.md

@@ -0,0 +1,5 @@
+---
+"@linode/manager": Tests
+---
+
+Test for firewall create page for restricted users ([#12237](https://github.com/linode/manager/pull/12237))

packages/manager/cypress/e2e/core/firewalls/create-firewall.spec.ts

@@ -1,11 +1,19 @@
+import { grantsFactory, profileFactory } from '@linode/utilities';
 import { createLinodeRequestFactory } from '@linode/utilities';
 import { authenticate } from 'support/api/authentication';
+import { mockGetUser } from 'support/intercepts/account';
 import { interceptCreateFirewall } from 'support/intercepts/firewalls';
+import {
+  mockGetProfile,
+  mockGetProfileGrants,
+} from 'support/intercepts/profile';
 import { ui } from 'support/ui';
 import { cleanUp } from 'support/util/cleanup';
 import { createTestLinode } from 'support/util/linodes';
 import { randomLabel, randomString } from 'support/util/random';
 import { chooseRegion } from 'support/util/regions';
+
+import { accountUserFactory } from 'src/factories';
 authenticate();
 
 describe('create firewall', () => {
@@ -123,3 +131,65 @@ describe('create firewall', () => {
     });
   });
 });
+
+describe('restricted user cannot create firewall', () => {
+  beforeEach(() => {
+    cleanUp(['lke-clusters', 'linodes', 'firewalls']);
+    const mockProfile = profileFactory.build({
+      restricted: true,
+      username: randomLabel(),
+    });
+
+    const mockUser = accountUserFactory.build({
+      restricted: true,
+      user_type: 'default',
+      username: mockProfile.username,
+    });
+
+    const mockGrants = grantsFactory.build({
+      global: {
+        add_firewalls: false,
+      },
+    });
+
+    mockGetProfile(mockProfile);
+    mockGetProfileGrants(mockGrants);
+    mockGetUser(mockUser);
+  });
+
+  /*
+   * - Verifies that restricted user cannot create firewall on landing page
+   */
+  it('confirms the create button is disabled on the Firewall Landing page', () => {
+    cy.visitWithLogin('/firewalls');
+    ui.button
+      .findByTitle('Create Firewall')
+      .should('be.visible')
+      .should('be.disabled');
+  });
+
+  /*
+   * - Verifies that restricted user cannot create firewall in drawer
+   */
+  it('confirms the Create Firewall button is disabled in create drawer', () => {
+    cy.visitWithLogin('/firewalls/create');
+
+    ui.drawer
+      .findByTitle('Create Firewall')
+      .should('be.visible')
+      .within(() => {
+        cy.findByText(
+          "You don't have permissions to create a new Firewall. Please contact an account administrator for details."
+        );
+        ui.buttonGroup.findButtonByTitle('Create Firewall').scrollIntoView();
+        ui.buttonGroup
+          .findButtonByTitle('Create Firewall')
+          .should('be.visible')
+          .should('be.disabled');
+        // all form inputs are disabled
+        cy.get('input').each((input) => {
+          cy.wrap(input).should('be.disabled');
+        });
+      });
+  });
+});