SWAMPy

✎ CARVE FLESH

EDITING: acceptances.feature

@tool @tool_policy
Feature: Viewing acceptances reports and accepting on behalf of other users
  In order to manage user acceptances
  As a manager
  I need to be able to view acceptances and accept on behalf of other users

Scenario: View acceptances made by users on their own, single policy
    When I log in as "user1"
    Then I should see "This site policy"
    And I should not see "Course overview"
    And I press "Next"
    And I set the field "I agree to the This site policy." to "1"
    And I press "Next"
    And I should see "Calendar"
    And I log out
    And I log in as "manager"
    And I press "Next"
    And I set the field "I agree to the This site policy." to "1"
    And I press "Next"
    And I navigate to "Users > Privacy and policies > User agreements" in site administration
    And "Accepted" "text" should exist in the "User One" "table_row"
    And "Accepted" "text" should exist in the "Max Manager" "table_row"
    And "Pending" "text" should exist in the "User Two" "table_row"

Scenario: Agree on behalf of another user as a manager, single policy, javascript off
    Given the following "role capability" exists:
      | role                     | manager |
      | tool/policy:acceptbehalf | allow   |
    When I log in as "manager"
    And I press "Next"
    And I set the field "I agree to the This site policy." to "1"
    And I press "Next"
    And I navigate to "Users > Privacy and policies > Manage policies" in site administration
    And I click on "1 of 4 (25%)" "link" in the "This site policy" "table_row"
    And I click on "Accept This site policy" "link" in the "User One" "table_row"
    Then I should see "Accepting policy"
    And I should see "User One"
    And I should see "This site policy"
    And I should see "I acknowledge that I have received a request to give consent on behalf of the above user(s)."
    And I set the field "Remarks" to "Consent received from a parent"
    And I press "Give consent"
    And "Accepted on user's behalf" "text" should exist in the "User One" "table_row"
    And "Max Manager" "link" should exist in the "User One" "table_row"
    And "Consent received from a parent" "text" should exist in the "User One" "table_row"
    And "Pending" "text" should exist in the "User Two" "table_row"

@javascript
  Scenario: Agree on behalf of another user as a manager, single policy, javascript on
    Given the following "role capability" exists:
      | role                     | manager |
      | tool/policy:acceptbehalf | allow   |
    When I log in as "manager"
    And I press "Next"
    And I set the field "I agree to the This site policy." to "1"
    And I press "Next"
    And I should see "Calendar"
    And I navigate to "Users > Privacy and policies > Manage policies" in site administration
    And I click on "1 of 4 (25%)" "link" in the "This site policy" "table_row"
    And I click on "Accept This site policy" "link" in the "User One" "table_row"
    Then I should see "Give consent"
    And I should see "User One"
    And I should see "This site policy"
    And I should see "I acknowledge that I have received a request to give consent on behalf of the above user(s)."
    And I set the field "Remarks" to "Consent received from a parent"
    And I press "Give consent"
    And "Accepted on user's behalf" "text" should exist in the "User One" "table_row"
    And "Max Manager" "link" should exist in the "User One" "table_row"
    And "Consent received from a parent" "text" should exist in the "User One" "table_row"
    And "Pending" "text" should exist in the "User Two" "table_row"

Scenario: View acceptances made by users on their own, multiple policies
    Given I log in as "admin"
    And I navigate to "Users > Privacy and policies > Manage policies" in site administration
    And I click on "Set status to \"Active\"" "link" in the "This privacy policy" "table_row"
    And I press "Continue"
    And I log out
    When I log in as "user1"
    Then I should see "This site policy"
    And I press "Next"
    And I should see "This privacy policy"
    And I press "Next"
    And I set the field "I agree to the This site policy." to "1"
    And I set the field "I agree to the This privacy policy." to "1"
    And I press "Next"
    And I should see "Calendar"
    And I log out
    And I log in as "manager"
    And I press "Next"
    And I press "Next"
    And I set the field "I agree to the This site policy." to "1"
    And I set the field "I agree to the This privacy policy." to "1"
    And I press "Next"
    And I navigate to "Users > Privacy and policies > User agreements" in site administration
    And "Accepted" "text" should exist in the "User One" "table_row"
    And "Pending" "text" should not exist in the "User One" "table_row"
    And "Accepted" "text" should exist in the "Max Manager" "table_row"
    And "Pending" "text" should exist in the "User Two" "table_row"
    And "Accepted" "text" should not exist in the "User Two" "table_row"
    And I click on "Details" "link" in the "User One" "table_row"
    And "Accepted" "text" should exist in the "This site policy" "table_row"
    And "Accepted" "text" should exist in the "This privacy policy" "table_row"
    And I am on site homepage
    And I navigate to "Users > Privacy and policies > User agreements" in site administration
    And I click on "Details" "link" in the "User Two" "table_row"
    And "Pending" "text" should exist in the "This site policy" "table_row"
    And "Pending" "text" should exist in the "This privacy policy" "table_row"

Scenario: Agree on behalf of another user as a manager, multiple policies, javascript off
    Given the following "role capability" exists:
      | role                     | manager |
      | tool/policy:acceptbehalf | allow   |
    And I log in as "admin"
    And I navigate to "Users > Privacy and policies > Manage policies" in site administration
    And I click on "Set status to \"Active\"" "link" in the "This privacy policy" "table_row"
    And I press "Continue"
    And I log out
    When I log in as "manager"
    And I press "Next"
    And I press "Next"
    And I set the field "I agree to the This site policy." to "1"
    And I set the field "I agree to the This privacy policy." to "1"
    And I press "Next"
    And I navigate to "Users > Privacy and policies > User agreements" in site administration
    And I click on "Accept This site policy" "link" in the "User One" "table_row"
    Then I should see "Accepting policy"
    And I should see "User One"
    And I should see "This site policy"
    And I should see "I acknowledge that I have received a request to give consent on behalf of the above user(s)."
    And I set the field "Remarks" to "Consent received from a parent"
    And I press "Give consent"
    And "Accepted on user's behalf" "text" should exist in the "User One" "table_row"
    And "Pending" "text" should exist in the "User One" "table_row"
    And I click on "Details" "link" in the "User One" "table_row"
    And "Accepted on user's behalf" "text" should exist in the "This site policy" "table_row"
    And "Max Manager" "link" should exist in the "This site policy" "table_row"
    And "Consent received from a parent" "text" should exist in the "This site policy" "table_row"
    And "Pending" "text" should exist in the "This privacy policy" "table_row"

@javascript
  Scenario: Agree on behalf of another user as a manager, multiple policies, javascript on
    Given the following "role capability" exists:
      | role                     | manager |
      | tool/policy:acceptbehalf | allow   |
    And I log in as "admin"
    And I navigate to "Users > Privacy and policies > Manage policies" in site administration
    And I click on "Actions" "link_or_button" in the "This privacy policy" "table_row"
    And I click on "Set status to \"Active\"" "link" in the "This privacy policy" "table_row"
    And I wait until "Activate" "button" exists
    And I press "Activate"
    And I log out
    When I log in as "manager"
    And I press "Next"
    And I press "Next"
    And I set the field "I agree to the This site policy." to "1"
    And I set the field "I agree to the This privacy policy." to "1"
    And I press "Next"
    And I navigate to "Users > Privacy and policies > User agreements" in site administration
    And I click on "Accept This site policy" "link" in the "User One" "table_row"
    Then I should see "Give consent"
    And I should see "User One"
    And I should see "This site policy"
    And I should see "I acknowledge that I have received a request to give consent on behalf of the above user(s)."
    And I set the field "Remarks" to "Consent received from a parent"
    And I press "Give consent"
    And "Accepted on user's behalf" "text" should exist in the "User One" "table_row"
    And "Pending" "text" should exist in the "User One" "table_row"
    And I click on "Details" "link" in the "User One" "table_row"
    And "Accepted on user's behalf" "text" should exist in the "This site policy" "table_row"
    And "Max Manager" "link" should exist in the "This site policy" "table_row"
    And "Consent received from a parent" "text" should exist in the "This site policy" "table_row"
    And "Pending" "text" should exist in the "This privacy policy" "table_row"

Scenario: Policies and agreements profile link visible for current user
    Given I log in as "user1"
    And I press "Next"
    And I set the field "I agree to the This site policy." to "1"
    And I press "Next"
    When I follow "Profile" in the user menu
    # User can see his own agreements link in the profile.
    Then I should see "Policies and agreements"
    And I follow "Policies and agreements"
    And "Accepted" "text" should exist in the "This site policy" "table_row"
    # User can't see agreements link in other user profiles.
    And I am on "Course1" course homepage
    And I navigate to course participants
    And I follow "User Two"
    And I should not see "Policies and agreements"

Scenario: Policies and agreements profile link visible also for users who can access on behalf of others
    Given the following "role capability" exists:
      | role                     | manager |
      | tool/policy:acceptbehalf | allow   |
    And I log in as "manager"
    And I press "Next"
    And I set the field "I agree to the This site policy." to "1"
    And I press "Next"
    # User can see agreements link in other user profiles because has the capability for accepting on behalf of them.
    When I am on "Course1" course homepage
    And I navigate to course participants
    And I follow "User Two"
    Then I should see "Policies and agreements"

Scenario: Agree on behalf of another user as an admin who is logged in as a manager
    Given the following "role capability" exists:
      | role                     | manager |
      | tool/policy:acceptbehalf | allow   |
    When I log in as "manager"
    And I press "Next"
    And I set the field "I agree to the This site policy." to "1"
    And I press "Next"
    And I log out
    And I am on the "manager" "user > profile" page logged in as "admin"
    And I follow "Log in as"
    And I press "Continue"
    And I navigate to "Users > Privacy and policies > Manage policies" in site administration
    And I click on "1 of 4 (25%)" "link" in the "This site policy" "table_row"
    And I click on "Accept This site policy" "link" in the "User One" "table_row"
    Then I should see "Accepting policy"
    And I should see "User One"
    And I should see "This site policy"
    And I should see "I acknowledge that I have received a request to give consent on behalf of the above user(s)."
    And I set the field "Remarks" to "Consent received from a parent"
    And I press "Give consent"
    And "Accepted on user's behalf" "text" should exist in the "User One" "table_row"
    And "Max Manager" "link" should not exist in the "User One" "table_row"
    And "Admin User" "link" should exist in the "User One" "table_row"
    And "Consent received from a parent" "text" should exist in the "User One" "table_row"
    And "Pending" "text" should exist in the "User Two" "table_row"

@javascript
  Scenario: Bulk agree on behalf of another users as a manager, multiple policies, javascript on
    Given the following "role capability" exists:
      | role                     | manager |
      | tool/policy:acceptbehalf | allow   |
    And I log in as "admin"
    And I navigate to "Users > Privacy and policies > Manage policies" in site administration
    And I click on "Actions" "link_or_button" in the "This privacy policy" "table_row"
    And I click on "Set status to \"Active\"" "link" in the "This privacy policy" "table_row"
    And I wait until "Activate" "button" exists
    And I press "Activate"
    And I log out
    When I log in as "manager"
    And I press "Next"
    And I press "Next"
    And I set the field "I agree to the This site policy." to "1"
    And I set the field "I agree to the This privacy policy." to "1"
    And I press "Next"
    And I navigate to "Users > Privacy and policies > User agreements" in site administration
    And I click on "Select" "checkbox" in the "User One" "table_row"
    And I press "Consent"
    And I should see "Accepting policy"
    And I should see "One"
    And I click on "Cancel" "button" in the "Accepting policy" "dialogue"
    And I should not see "Accepting policy"
    And I click on "Select" "checkbox" in the "User Two" "table_row"
    And I press "Consent"
    And I should see "Accepting policy"
    And I should see "User One, User Two"
    When I press "Give consent"
    Then "Accepted on user's behalf" "text" should exist in the "User One" "table_row"
    And "Accepted on user's behalf" "text" should exist in the "User Two" "table_row"

Scenario: View acceptances made by users on their own after inactivating a policy
    Given I log in as "user1"
    And I should see "This site policy"
    And I should not see "Course overview"
    And I press "Next"
    And I set the field "I agree to the This site policy." to "1"
    And I press "Next"
    And I should see "Calendar"
    And I log out
    And I log in as "admin"
    And I navigate to "Users > Privacy and policies > Manage policies" in site administration
    And I click on "Actions" "link_or_button" in the "This privacy policy" "table_row"
    And I click on "Set status to \"Active\"" "link" in the "This privacy policy" "table_row"
    And I press "Continue"
    And I click on "Set status to \"Inactive\"" "link" in the "This privacy policy" "table_row"
    And I press "Continue"
    And I log out
    When I log in as "user1"
    Then I should see "Calendar"

Scenario: Policy acceptance is prioritised when MFA is enabled
    Given the following config values are set as admin:
      | enabled | 1 | tool_mfa |
    And I log in as "user1"
    And I press "Next"
    And I set the field "I agree to the This site policy" to "1"
    When I press "Next"
    Then I should see "2-step verification"

CANCEL

Name	Type	Size	Modified	Actions
↩ ..	DIR	—	—
📄 acceptances.feature	FEATURE	15.9 KB	2026-02-11 01:44	EDIT
📄 behat_tool_policy.php	PHP	4.7 KB	2026-02-11 01:44	EDIT
📄 consent.feature	FEATURE	43.8 KB	2026-02-11 01:44	EDIT
📄 managepolicies.feature	FEATURE	13.2 KB	2026-02-11 01:44	EDIT
📄 optional.feature	FEATURE	15.2 KB	2026-02-11 01:44	EDIT