From 8609e4bca0b2b2527be2c1365d589147d3ce33e0 Mon Sep 17 00:00:00 2001
From: Alex Holliday <ajhollid@gmail.com>
Date: Tue, 8 Sep 2026 10:46:36 -0700
Subject: [PATCH] add admin guard to test all button, fix tests

---
 .../monitors/HeaderMonitorControls.tsx        | 30 ++++++++++---------
 server/test/unit/middleware/isAllowed.test.ts |  6 ++--
 2 files changed, 19 insertions(+), 17 deletions(-)

diff --git a/client/src/Components/monitors/HeaderMonitorControls.tsx b/client/src/Components/monitors/HeaderMonitorControls.tsx
index 7f6968f0b..c907b96bc 100644
--- a/client/src/Components/monitors/HeaderMonitorControls.tsx
+++ b/client/src/Components/monitors/HeaderMonitorControls.tsx
@@ -60,20 +60,22 @@ export const HeaderMonitorControls = ({
 				direction={{ xs: "column", md: "row" }}
 				gap={theme.spacing(2)}
 			>
-				<Button
-					variant="contained"
-					color="secondary"
-					loading={isPosting}
-					startIcon={<Icon icon={Mail} />}
-					onClick={async () => {
-						await post(`/notifications/test/all`, { monitorId: monitor.id });
-					}}
-					sx={{
-						whiteSpace: "nowrap",
-					}}
-				>
-					{t("common.buttons.testNotifications")}
-				</Button>
+				{isAdmin && (
+					<Button
+						variant="contained"
+						color="secondary"
+						loading={isPosting}
+						startIcon={<Icon icon={Mail} />}
+						onClick={async () => {
+							await post(`/notifications/test/all`, { monitorId: monitor.id });
+						}}
+						sx={{
+							whiteSpace: "nowrap",
+						}}
+					>
+						{t("common.buttons.testNotifications")}
+					</Button>
+				)}
 				<Button
 					variant="contained"
 					color="secondary"
diff --git a/server/test/unit/middleware/isAllowed.test.ts b/server/test/unit/middleware/isAllowed.test.ts
index 6354889b1..24449dcde 100644
--- a/server/test/unit/middleware/isAllowed.test.ts
+++ b/server/test/unit/middleware/isAllowed.test.ts
@@ -8,7 +8,7 @@ describe("isAllowed middleware", () => {
 		const middleware = isAllowed(["admin", "superadmin"]);
 		const req = {
 			user: {
-				userId: "user-1",
+				id: "user-1",
 				teamId: "team-1",
 				email: "admin@example.com",
 				role: ["admin"],
@@ -26,7 +26,7 @@ describe("isAllowed middleware", () => {
 		const middleware = isAllowed(["admin", "superadmin"]);
 		const req = {
 			user: {
-				userId: "user-2",
+				id: "user-2",
 				teamId: "team-1",
 				email: "user@example.com",
 				role: ["user"],
@@ -63,7 +63,7 @@ describe("isAllowed middleware", () => {
 		const middleware = isAllowed(["admin", "superadmin"]);
 		const req = {
 			user: {
-				userId: "user-3",
+				id: "user-3",
 				teamId: "team-1",
 				email: "multi@example.com",
 				role: ["user", "admin"],