Repository navigation
QA (#2410): Folder security panel identities + properties in Explorer #2600
Description
Parent
Parent: #2410 (slice of epic #2400)
PR
base_branch
main
Summary
Verify Folder Security panel in product Explorer: real identities for self-lockout, folder properties (community/locale/display format/workflow), ADMIN can edit ACL from Explorer shell.
Test plan
- Start QA H2 (
perc-devctl qa-up) or use installed CMS; log in as Admin. - Open SPA Explorer:
/Rhythmyx/cm/app/spa.jsp?entry=explorer(optionally?path=/Sites). - Confirm view tools show Folder Security toggle; click it.
- With an open/selected folder, confirm panel mounts with:
- Folder properties fields (community, community id, locale, display format, workflow id)
- ACL principal lists (Admin/Write/Read/View)
- As Admin on a folder with ADMIN access: add a principal, change locale, Save — expect success / dirty clears.
- Self-lockout: remove your user (or Admin role) from admin principals and Save — expect confirm warning; cancel aborts; OK saves.
- As a non-ADMIN folder user (if available): properties/ACL controls disabled or read-only banner.
- Optional: pilot page
folderSecurityModern.jsp?folderId=<id>still loads.
Pass / fail criteria
- Pass: Admin can open security from Explorer shell for current folder; properties visible; ACL edit + save works; lockout warning when removing own identity.
- Fail: Empty identities prevent lockout; panel never mounts for current folder; properties missing; save broken; Finder chrome appears.
Out of scope
- Multi-select / clipboard
- Full community/workflow catalog combo boxes (free-text DTO fields in this PR)
Evidence already collected by agent
- Vitest:
currentUserIdentities.test.ts,FolderSecurityPanel.test.tsx(18),ContentExplorerShell.test.tsx(security mount) — 31 focused tests green cd WebUI && ../mvnw.cmd clean installBUILD SUCCESS- Playwright extended:
modules/perc-qa-automation/frontend/tests/us4-acl.spec.js(shell toggle tests) — run withnpm run test:surface -- --path tests/us4-acl.spec.jsafter qa-up
Co-Authored by Grok Build using grok-4.5 with agent main.
Activity
vijaya-boddipudi commentedon Aug 10, 2026
natechadwick-intsof commentedon Aug 10, 2026
Update from #2749: Folder Security server null-validation path is addressed in #2780 (Jackson FolderProperties wrap + server null-safe gates). Human retest tracked as #2781.
fix(explorer): #2749 folder security null validation / Jackson root w…
natechadwick-intsof commentedon Aug 12, 2026
Implement residual opened (QA Failed → agent queue)
Human QA remains Failed. Prior closed residuals are not enough for retest-green.
qa taskPlease re-run this QA plan only after #3206 lands (or is closed as not-repro with evidence).
vijaya-boddipudi commentedon Aug 17, 2026
Human QA retest — 2026-08-17
Environment:
http://localhost:9992/cm/app/explorer(local install)Verdict: QA: Fail
Summary
Folder Security works end-to-end on
/Folders/New-Folder-3(properties, ACL lists, locale save, self-lockout confirm). It does not mount for site-folder navigation (e.g. selecting Corporate_Investments under Sites) — Folder Security toggle is on but the side panel stays on the hint "Open or select a folder to edit security and properties."Test plan
/Sites/Corporate_Investments/; full panel on/Folders/New-Folder-3en-us→de-de, dirty clears)New-Folder-3folderSecurityModern.jspScreenshots
Local evidence:
tmp/qa-17-08/2600/(11 PNGs +qa-results.md).Key captures:
2600-05-corporate-selected-hint.png,2600-07-folder-security-panel.png,2600-08-locale-dirty.png,2600-11-contributor-panel.png.Notes vs prior fail (#2749)
Identities and save/lockout paths appear fixed on
/Folders/folders; remaining gap is panel mount for site/current-folder browsing and non-ADMIN read-only verification.