From cf38f74e058e19b11b5e9489efb9118a69dab8fb Mon Sep 17 00:00:00 2001
From: Frederick Muriuki Muriithi
Date: Wed, 9 Jul 2025 09:15:52 -0500
Subject: Update expected privileges for group-leader users.

---
 tests/unit/auth/test_privileges.py | 10 +++++++++-
 tests/unit/auth/test_roles.py      |  9 +++++++++
 2 files changed, 18 insertions(+), 1 deletion(-)

diff --git a/tests/unit/auth/test_privileges.py b/tests/unit/auth/test_privileges.py
index 9b2ea04..41dae7f 100644
--- a/tests/unit/auth/test_privileges.py
+++ b/tests/unit/auth/test_privileges.py
@@ -27,7 +27,15 @@ PRIVILEGES = sorted(
      Privilege("group:resource:delete-resource", "Delete a resource"),
 
      Privilege("group:data:link-to-group",
-               "Allow linking data to only one specific group.")),
+               "Allow linking data to only one specific group."),
+
+     # Role-management privileges
+     Privilege("resource:role:create-role",
+               "Create a new role on a specific resource"),
+     Privilege("resource:role:delete-role",
+               "Delete an existing role from a specific resource"),
+     Privilege("resource:role:edit-role",
+               "Edit an existing role on a specific resource")),
     key=sort_key_privileges)
 
 @pytest.mark.unit_test
diff --git a/tests/unit/auth/test_roles.py b/tests/unit/auth/test_roles.py
index 43d84e4..b7512ef 100644
--- a/tests/unit/auth/test_roles.py
+++ b/tests/unit/auth/test_roles.py
@@ -136,6 +136,15 @@ def test_create_role_raises_exception_for_unauthorised_users(# pylint: disable=[
                     Privilege(
                         privilege_id="group:user:remove-group-member",
                         privilege_description="Remove a user from a group"),
+                    Privilege(
+                        privilege_id="resource:role:create-role",
+                        privilege_description="Create a new role on a specific resource"),
+                    Privilege(
+                        privilege_id="resource:role:delete-role",
+                        privilege_description="Delete an existing role from a specific resource"),
+                    Privilege(
+                        privilege_id="resource:role:edit-role",
+                        privilege_description="Edit an existing role on a specific resource"),
                     Privilege(
                         privilege_id="system:group:delete-group",
                         privilege_description="Delete a group"),
-- 
cgit v1.2.3