Feature: Role Management

  Scenario: List all roles
    Given I login as "admin@perauset.org"
    When I send a GET request to "/roles"
    Then the response status should be 200
    And the response body should be a list with field "roles"

  Scenario: Set user roles
    Given I login as "admin@perauset.org"
    And a user "vol@test.org" exists
    When I set roles "volunteer" for user "vol@test.org"
    Then the response status should be 200
    And the response body field "memberRoles" should contain "volunteer"

  Scenario: Unpermissioned user cannot set roles
    Given a user "norole@test.org" exists with roles "guest"
    And I login as "norole@test.org"
    When I set roles "admin" for user "norole@test.org"
    Then the response status should be 403