Publish curated ITWorx_MCP_Hub source from 6c7434368ce2a594005983c5a6601a31a639e7f1

tests/test_wp230_rbac.py

@@ -204,8 +204,11 @@ def test_policy_simulate_available_to_every_role(
 def test_catalog_preview_available_to_every_role(
     role_sessions: dict[ManagementRole, RoleSession], role: ManagementRole
 ) -> None:
-    response = role_sessions[role].post("/api/catalog/preview", json={"project": "nonexistent"})
+    response = role_sessions[role].post("/api/catalog/preview", json={"project": "ludarium"})
     assert response.status_code == 200, (role, response.text)  # type: ignore[union-attr]
+    preview = response.json()  # type: ignore[union-attr]
+    assert preview["valid"] is True
+    assert preview["changes"] == ["reconcile all registered project routes, including ludarium"]
 
 
 # --- Tool readiness: bounded live probe, operator+ only ------------------
@@ -400,6 +403,9 @@ def test_live_operations_check_available_to_operator_and_admin(
     response = role_sessions[role].post("/api/operations/check")
     assert response.status_code == 200, (role, response.text)  # type: ignore[union-attr]
     assert response.json()["connectors"]  # type: ignore[union-attr]
+    assert {"id": "knowledge-default", "name": "Knowledge Default"} in response.json()[
+        "connectors"
+    ]["itworx-knowledge"]["connectorRefs"]  # type: ignore[union-attr]
 
 
 # --- Audit read: auditor+ only, viewer denied ---------------------------
@@ -457,7 +463,7 @@ def test_client_create_allowed_for_admin(role_sessions: dict[ManagementRole, Rol
     assert response.status_code == 201, response.text  # type: ignore[union-attr]
 
 
-@pytest.mark.parametrize("action", ["bootstrap", "disable", "revoke"])
+@pytest.mark.parametrize("action", ["bootstrap", "verify", "disable", "revoke"])
 @pytest.mark.parametrize("role", [ManagementRole.VIEWER, ManagementRole.AUDITOR])
 def test_client_lifecycle_actions_denied_below_operator(
     role_sessions: dict[ManagementRole, RoleSession], role: ManagementRole, action: str
@@ -470,7 +476,7 @@ def test_client_lifecycle_actions_denied_below_operator(
     assert response.status_code == 403, (role, action, response.text)  # type: ignore[union-attr]
 
 
-@pytest.mark.parametrize("action", ["bootstrap", "disable"])
+@pytest.mark.parametrize("action", ["bootstrap", "verify", "disable"])
 def test_client_lifecycle_actions_allowed_for_operator(
     role_sessions: dict[ManagementRole, RoleSession], action: str
 ) -> None: