Feature: User Management

  Scenario: List users as admin
    Given I login as "admin@perauset.org"
    When I send a GET request to "/users"
    Then the response status should be 200
    And the response body should be a list with field "items"

  Scenario: Get own user profile
    Given I login as "admin@perauset.org"
    When I get my own user profile
    Then the response status should be 200
    And the response body field "email" should be "admin@perauset.org"

  Scenario: Update own profile
    Given I login as "admin@perauset.org"
    When I update my profile with displayName "Island Admin"
    Then the response status should be 200

  Scenario: Unpermissioned user cannot list users
    Given a user "guest@test.org" exists with roles "guest"
    And I login as "guest@test.org"
    When I send a GET request to "/users"
    Then the response status should be 403