test: [M3-9595] - Firewall create page for restricted users

packages/manager/.changeset/pr-12237-tests-1747403119751.md

@@ -0,0 +1,5 @@
+---
+"@linode/manager": Tests
+---
+
+Test for firewall create page for restricted users ([#12237](https://github.com/linode/manager/pull/12237))

packages/manager/cypress/e2e/core/firewalls/create-firewall.spec.ts

@@ -1,11 +1,19 @@
+import { grantsFactory, profileFactory } from '@linode/utilities';
 import { createLinodeRequestFactory } from '@linode/utilities';
 import { authenticate } from 'support/api/authentication';
+import { mockGetUser } from 'support/intercepts/account';
 import { interceptCreateFirewall } from 'support/intercepts/firewalls';
+import {
+  mockGetProfile,
+  mockGetProfileGrants,
+} from 'support/intercepts/profile';
 import { ui } from 'support/ui';
 import { cleanUp } from 'support/util/cleanup';
 import { createTestLinode } from 'support/util/linodes';
 import { randomLabel, randomString } from 'support/util/random';
 import { chooseRegion } from 'support/util/regions';
+
+import { accountUserFactory } from 'src/factories';
 authenticate();
 
 describe('create firewall', () => {
@@ -123,3 +131,64 @@
     });
   });
 });
+
+describe('restricted user cannot create firewall', () => {
+  beforeEach(() => {
+    cleanUp(['lke-clusters', 'linodes', 'firewalls']);
+    const mockProfile = profileFactory.build({
+      restricted: true,
+      username: randomLabel(),
+    });
+
+    const mockUser = accountUserFactory.build({
+      restricted: true,
+      user_type: 'default',
+      username: mockProfile.username,
+    });
+
+    const mockGrants = grantsFactory.build({
+      global: {
+        add_firewalls: false,
+      },
+    });
+
+    mockGetProfile(mockProfile);
+    mockGetProfileGrants(mockGrants);
+    mockGetUser(mockUser);
+  });
+
+  /*
+   * - Verifies that restricted user cannot create firewall on landing page
+   */
+  it('create firewall is disabled on landing page', () => {
+    cy.visitWithLogin('/firewalls');
+    ui.button
+      .findByTitle('Create Firewall')
+      .should('be.visible')
+      .should('be.disabled');
+  });
+
+  /*
+   * - Verifies that restricted user cannot create firewall in drawer
+   */
+  it('create firewall drawer is disabled', () => {
+    cy.visitWithLogin('/firewalls/create');
+
+    ui.drawer
+      .findByTitle('Create Firewall')
+      .should('be.visible')
+      .within(() => {
+        cy.findByText(
+          "You don't have permissions to create a new Firewall. Please contact an account administrator for details."
+        );
+        ui.buttonGroup
+          .findButtonByTitle('Create Firewall')
+          .should('be.visible')
+          .should('be.disabled');
+        // all form inputs are disabled
+        cy.get('input').each((input) => {
+          cy.wrap(input).should('be.disabled');
+        });
+      });
+  });
+});