Roles and Permissions

Default roles

Four default roles are created when you run python manage.py create_default_roles: Tester, Test Creator, Test Manager, and Admin. These roles can be fully customized, and new ones can be created (currently only via the Django admin at /admin/).

The default roles have the following permissions:

Tester

Test Creator

All Tester permissions, plus:

Admin

All Tester, Test Creator and Test Manager permissions, plus:

When setting up MozTrap, running the command python manage.py create_default_roles will ask to create an admin user. This special first admin has all these privileges:

  • Admin role in the MozTrap UI: This gives the user the ability to visit the Manage | Users area of the product. This user can edit other users to:
    • assign roles
    • create api keys
    • delete or deactivate
  • Staff Status: This gives the user access to the /admin/ url. This is a special behind the scenes access to the data in MozTrap. It is also where items that were deleted can be undeleted.
  • Superuser Status: A user that has this status will always have admin privileges in the MozTrap UI, even if their role is changed to something other than Admin.

So you can see that this first admin user is special, and also the gateway to providing access for all other users to be admins.

Permissions

execute

Can run tests and report the results.

create_cases

Can create new test cases and edit them (but not edit test cases created by others). Allows tagging of these test cases with existing tags, but not creation of new tags.

manage_suite_cases

Can add and remove test cases from suites.

manage_cases

Can add, edit, and delete test cases and test case versions.

manage_suites

Can add, edit, and delete test suites.

manage_tags

Can add, edit, and delete tags.

manage_runs

Can add, edit, and delete test runs.

review_results

Can review submitted test results and mark them reviewed.

manage_environments

Can create, edit, and delete environment profiles, categories, elements, and environments.

manage_products

Can create, edit, and delete products and product versions.

manage_user

Can create, edit, and delete users.