commit8

scripts/evaluation-access-check.mjs

@@ -42,7 +42,12 @@ const roles = ['requester','department_head','procurement','finance','warehouse'
 for (const role of roles) await enter(role);
 page = await request('/avaliar');
 assert.equal((await request('/logout','POST',{_token:token(page.text)})).status,204);
-assert.equal((await request('/dashboard')).status,401);
+assert.equal((await request('/empresa')).status,401);
+assert.equal((await request('/dashboard')).status,200);
+assert.equal((await request('/empresa')).status,200);
+assert.equal((await request('/administracao/parametrizacao')).status,200);
+page = await request('/avaliar');
+assert.equal((await request('/logout','POST',{_token:token(page.text)})).status,204);
 assert.equal((await request('/empresa')).status,401);
 const operational = await fetch('http://127.0.0.1:8015/avaliar', {redirect:'manual'}).catch(() => null);
 if (operational) assert.equal(operational.status,404,'Evaluation entry must not exist on the normal installation');
@@ -50,5 +55,5 @@ await fs.mkdir('docs/proofs',{recursive:true});
 await fs.writeFile('docs/proofs/evaluation-access.json',JSON.stringify({checked_at:new Date().toISOString(),base,
     owner_modules:modules,roles,csrf_enforced:true,arbitrary_role_refused:true,arbitrary_user_refused:true,logout:true,
     business_commands:0,real_accounts_changed:false,operational_entry_status:operational?.status??'not running',
-    visual_review:false,guest_report_redirect:true,intended_report_and_filters_preserved:true},null,2)+'\n');
+    visual_review:false,dashboard_auto_entry:true,other_routes_require_session:true,guest_report_redirect:true,intended_report_and_filters_preserved:true},null,2)+'\n');
 console.log('Owner entry, 23 module pages, six roles, report return, CSRF, rejected identifiers and logout passed.');