lablup
diff --git a/‎e2e/E2E_COVERAGE_REPORT.md‎
Lines changed: 42 additions & 3 deletions b/‎e2e/E2E_COVERAGE_REPORT.md‎
Lines changed: 42 additions & 3 deletions
diff --git a/‎e2e/admin-model-card/admin-model-card-access-control.spec.ts‎
Lines changed: 49 additions & 0 deletions b/‎e2e/admin-model-card/admin-model-card-access-control.spec.ts‎
Lines changed: 49 additions & 0 deletions
@@ -1,6 +1,6 @@
 # E2E Test Coverage Report
 
-> **Last Updated:** 2026-04-01
+> **Last Updated:** 2026-04-09
 > **Router Source:** [`react/src/routes.tsx`](../react/src/routes.tsx)
 > **E2E Root:** [`e2e/`](.)
 >
@@ -12,7 +12,7 @@
 
 **Scope:** Coverage metrics apply only to the routes listed below and do **not** include all entries from `react/src/routes.tsx`. Routes such as `/admin-dashboard` (not yet exposed in menu) and `/ai-agent` (experimental) are currently out of scope.
 
-**Overall (in-scope routes): 231 / 388 features covered (60%)**
+**Overall (in-scope routes): 253 / 410 features covered (62%)**
 
 | Page | Route | Features | Covered | Status |
 |------|-------|:--------:|:-------:|:------:|
@@ -27,6 +27,7 @@
 | Service Launcher | `/service/start` | 5 | 0 | ❌ 0% |
 | VFolder / Data | `/data` | 45 | 32 | 🔶 71% |
 | Model Store | `/model-store` | 6 | 0 | ❌ 0% |
+| Admin Model Store | `/admin-model-store` | 22 | 22 | ✅ 100% |
 | Storage Host | `/storage-settings/:hostname` | 3 | 0 | ❌ 0% |
 | My Environment | `/my-environment` | 2 | 2 | ✅ 100% |
 | Environment | `/environment` | 27 | 21 | 🔶 78% |
@@ -45,7 +46,7 @@
 | App Launcher | (modal) | 18 | 10 | 🔶 56% |
 | Chat | `/chat/:id?` | 6 | 6 | ✅ 100% |
 | Plugin System | (config-based) | 12 | 12 | ✅ 100% |
-| **Total** | | **335** | **181** | **54%** |
+| **Total** | | **357** | **203** | **57%** |
 
 ---
 
@@ -377,6 +378,44 @@
 
 ---
 
+### 10b. Admin Model Store (`/admin-model-store`)
+
+**Test files:** [`e2e/admin-model-card/admin-model-card-page-load.spec.ts`](admin-model-card/admin-model-card-page-load.spec.ts), [`e2e/admin-model-card/admin-model-card-filter.spec.ts`](admin-model-card/admin-model-card-filter.spec.ts), [`e2e/admin-model-card/admin-model-card-create.spec.ts`](admin-model-card/admin-model-card-create.spec.ts), [`e2e/admin-model-card/admin-model-card-edit.spec.ts`](admin-model-card/admin-model-card-edit.spec.ts), [`e2e/admin-model-card/admin-model-card-delete.spec.ts`](admin-model-card/admin-model-card-delete.spec.ts), [`e2e/admin-model-card/admin-model-card-access-control.spec.ts`](admin-model-card/admin-model-card-access-control.spec.ts), [`e2e/admin-model-card/admin-model-card-sort-refresh.spec.ts`](admin-model-card/admin-model-card-sort-refresh.spec.ts), [`e2e/admin-model-card/admin-model-card-url-state.spec.ts`](admin-model-card/admin-model-card-url-state.spec.ts)
+
+**Requires:** Superadmin login
+**Primary action:** "Create Model Card" → modal
+**Row actions:** Edit (setting icon), Delete (trash icon)
+**Bulk actions:** Bulk delete via header checkbox selection
+
+| Feature | Status | Test |
+|---------|--------|------|
+| Page load and table rendering | ✅ | `admin-model-card-page-load.spec.ts` |
+| Column visibility and pagination | ✅ | `admin-model-card-page-load.spec.ts` |
+| Name filter search | ✅ | `admin-model-card-filter.spec.ts` |
+| Filter clear and empty state | ✅ | `admin-model-card-filter.spec.ts` |
+| Open create modal | ✅ | `admin-model-card-create.spec.ts` |
+| Create with required fields only | ✅ | `admin-model-card-create.spec.ts` |
+| Create with all fields | ✅ | `admin-model-card-create.spec.ts` |
+| Create validation (name required) | ✅ | `admin-model-card-create.spec.ts` |
+| Create validation (VFolder required) | ✅ | `admin-model-card-create.spec.ts` |
+| Cancel create modal | ✅ | `admin-model-card-create.spec.ts` |
+| Open edit modal | ✅ | `admin-model-card-edit.spec.ts` |
+| Update model card fields | ✅ | `admin-model-card-edit.spec.ts` |
+| Edit validation | ✅ | `admin-model-card-edit.spec.ts` |
+| Cancel edit modal | ✅ | `admin-model-card-edit.spec.ts` |
+| Single delete with confirmation | ✅ | `admin-model-card-delete.spec.ts` |
+| Cancel single delete | ✅ | `admin-model-card-delete.spec.ts` |
+| Bulk select and delete | ✅ | `admin-model-card-delete.spec.ts` |
+| Cancel bulk delete | ✅ | `admin-model-card-delete.spec.ts` |
+| Clear selection | ✅ | `admin-model-card-delete.spec.ts` |
+| Select all via header checkbox | ✅ | `admin-model-card-delete.spec.ts` |
+| Non-admin access blocked | ✅ | `admin-model-card-access-control.spec.ts` |
+| URL state persistence (filter/sort/pagination) | ✅ | `admin-model-card-url-state.spec.ts` |
+
+**Coverage: ✅ 22/22 features**
+
+---
+
 ### 11. Storage Host Settings (`/storage-settings/:hostname`)
 
 **Test files:** None
 
@@ -0,0 +1,49 @@
+// spec: e2e/.agent-output/test-plan-admin-model-card.md
+// section: 9. Access Control
+import { loginAsUser, webuiEndpoint } from '../utils/test-util';
+import { test, expect } from '@playwright/test';
+
+test.describe(
+  'Admin Model Card Management - Access Control',
+  { tag: ['@admin-model-card', '@admin', '@functional'] },
+  () => {
+    // 9.1 Non-superadmin user cannot access the Admin Model Store page
+    test('Non-superadmin user cannot access the Admin Model Store page', async ({
+      page,
+      request,
+    }) => {
+      // Login as a regular user
+      await loginAsUser(page, request);
+
+      // Attempt to navigate directly to /admin-serving?tab=model-store
+      await page.goto(`${webuiEndpoint}/admin-serving?tab=model-store`);
+
+      // Verify the page does NOT show the Admin Model Card management table
+      // The page should either redirect or show an access denied state
+      await expect(
+        page.getByRole('button', { name: 'Create Model Card' }),
+      ).toBeHidden({ timeout: 5000 });
+    });
+
+    // 9.2 The Admin Model Store menu item is not visible to non-superadmin users
+    test('Non-superadmin user does not see the Admin Model Store menu item in the sidebar', async ({
+      page,
+      request,
+    }) => {
+      // Login as a regular user
+      await loginAsUser(page, request);
+
+      // Wait for the sidebar to appear
+      await page.waitForSelector('[data-testid="user-dropdown-button"]');
+
+      // Verify no admin model store link appears in the navigation
+      await expect(
+        page.getByRole('link', { name: 'Model Cards' }),
+      ).toBeHidden();
+
+      await expect(
+        page.getByRole('link', { name: 'Model Store Management' }),
+      ).toBeHidden();
+    });
+  },
+);