From aee0025ca3b1158f4da85282a10bec9fad41c4ee Mon Sep 17 00:00:00 2001
From: Matt Jankowski <matt@jankowski.online>
Date: Wed, 6 May 2026 04:36:42 -0400
Subject: [PATCH] Add system spec for managing everyone user role 2FA (#38911)

---
 spec/system/admin/roles_spec.rb | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/spec/system/admin/roles_spec.rb b/spec/system/admin/roles_spec.rb
index 8765bc9967..36a72d1f3c 100644
--- a/spec/system/admin/roles_spec.rb
+++ b/spec/system/admin/roles_spec.rb
@@ -74,5 +74,19 @@ RSpec.describe 'Admin::Roles' do
       expect(page)
         .to have_title(I18n.t('admin.roles.title'))
     end
+
+    it 'Manages the `everyone` user role' do
+      role = UserRole.everyone
+
+      visit edit_admin_role_path(role)
+      expect(page)
+        .to have_title(I18n.t('admin.roles.edit', name: I18n.t('admin.roles.everyone')))
+        .and have_text('This is the base role affecting all users')
+
+      # Update role attribute
+      check 'user_role_require_2fa' # Require 2FA for everyone
+      expect { click_on submit_button }
+        .to(change { role.reload.require_2fa }.to(true))
+    end
   end
 end