¶ Dental App — Live Walkthrough — Run Report
¶ Summary
| Field | Value |
|---|---|
| Scene | agents/hermes/demo_scenes/dental_walkthrough |
| Run timestamp (UTC) | 2026-08-03T15:02:00Z |
| Result | PASS |
| Duration | ~3 min 11 s |
| Screenshots captured | 15 |
| Target app | https://test-client-dental.dental.veripath.co.uk |
All four dental roles were demonstrated live in a headed browser on the shared
display, ending with the deliberate RBAC block (receptionist → Financial → 403)
that proves role-based access control. Every verification and assertion passed.
¶ Watch the demo
¶ Step Log
🎙 Front of house — the receptionist manages the practice calendar, appointments and recalls.
| # | Role | Action | Result | Screenshot |
|---|---|---|---|---|
| 1 | — | NOTE | OK | — |
| 2 | RECEPTION | USER | OK | — |
| 3 | RECEPTION | NAVIGATE → | OK | — |
| 4 | RECEPTION | KEYCLOAK_LOGIN | OK | — |
| 5 | RECEPTION | VERIFY_VIEW → /dental/practices/ | OK | — |
| 6 | RECEPTION | VERIFY_TEXT → Test Client Dental Practice | OK | — |
| 7 | RECEPTION | SCREENSHOT | OK |  |
| 8 | RECEPTION | NAVIGATE → {URL}/dental/appointments/ | OK | — |
| 9 | RECEPTION | VERIFY_VIEW → /dental/appointments/ | OK | — |
| 10 | RECEPTION | SCREENSHOT | OK |  |
| 11 | RECEPTION | NAVIGATE → {URL}/dental/recalls/ | OK | — |
| 12 | RECEPTION | VERIFY_TEXT → Recall Management | OK | — |
| 13 | RECEPTION | SCREENSHOT | OK |  |
| 14 | RECEPTION | NAVIGATE → {URL}/dental/financial/ | OK | — |
| 15 | RECEPTION | EXPECT_403 (status=403) | OK — access blocked | — |
| 16 | RECEPTION | SCREENSHOT | OK |  |
🎙 Clinical — the dentist reviews FP17 claims, charting, perio examinations and radiographs.
| # | Role | Action | Result | Screenshot |
|---|---|---|---|---|
| 17 | — | NOTE | OK | — |
| 18 | DENTIST | USER | OK | — |
| 19 | DENTIST | NAVIGATE → | OK | — |
| 20 | DENTIST | KEYCLOAK_LOGIN | OK | — |
| 21 | DENTIST | VERIFY_VIEW → /dental/practices/ | OK | — |
| 22 | DENTIST | NAVIGATE → {URL}/dental/fp17/ | OK | — |
| 23 | DENTIST | VERIFY_TEXT → FP17 | OK | — |
| 24 | DENTIST | SCREENSHOT | OK |  |
| 25 | DENTIST | CLICK → first claim row (Claim #16) | OK | — |
| 26 | DENTIST | SCREENSHOT | OK |  |
| 27 | DENTIST | NAVIGATE → {URL}/dental/charts/ | OK | — |
| 28 | DENTIST | VERIFY_TEXT → Chart | OK | — |
| 29 | DENTIST | CLICK → first chart row (Tooth 27) | OK | — |
| 30 | DENTIST | SCREENSHOT | OK |  |
| 31 | DENTIST | NAVIGATE → {URL}/dental/perio/ | OK | — |
| 32 | DENTIST | CLICK → first perio exam row | OK | — |
| 33 | DENTIST | SCREENSHOT | OK |  |
| 34 | DENTIST | NAVIGATE → {URL}/dental/radiographs/ | OK | — |
| 35 | DENTIST | SCREENSHOT | OK |  |
🎙 Practice Manager — financials, seat management and staff rotas.
| # | Role | Action | Result | Screenshot |
|---|---|---|---|---|
| 36 | — | NOTE | OK | — |
| 37 | MANAGER | USER | OK | — |
| 38 | MANAGER | NAVIGATE → | OK | — |
| 39 | MANAGER | KEYCLOAK_LOGIN | OK | — |
| 40 | MANAGER | VERIFY_VIEW → /dental/practices/ | OK | — |
| 41 | MANAGER | NAVIGATE → {URL}/dental/financial/ | OK | — |
| 42 | MANAGER | VERIFY_VIEW → /dental/financial/ | OK | — |
| 43 | MANAGER | SCREENSHOT | OK |  |
| 44 | MANAGER | NAVIGATE → {URL}/dental/seats/ | OK | — |
| 45 | MANAGER | SCREENSHOT | OK |  |
| 46 | MANAGER | NAVIGATE → {URL}/dental/staff/ | OK | — |
| 47 | MANAGER | SCREENSHOT | OK |  |
🎙 Admin — practice settings, zones and schedules, and provider management.
| # | Role | Action | Result | Screenshot |
|---|---|---|---|---|
| 48 | — | NOTE | OK | — |
| 49 | ADMIN | USER | OK | — |
| 50 | ADMIN | NAVIGATE → | OK | — |
| 51 | ADMIN | KEYCLOAK_LOGIN | OK | — |
| 52 | ADMIN | VERIFY_VIEW → /dental/practices/ | OK | — |
| 53 | ADMIN | NAVIGATE → {URL}/dental/settings/zones/ | OK | — |
| 54 | ADMIN | VERIFY_TEXT → Zone | OK | — |
| 55 | ADMIN | SCREENSHOT | OK |  |
| 56 | ADMIN | NAVIGATE → {URL}/dental/settings/schedules/ | OK | — |
| 57 | ADMIN | SCREENSHOT | OK |  |
| 58 | ADMIN | NAVIGATE → {URL}/dental/providers/ | OK | — |
| 59 | ADMIN | SCREENSHOT | OK |  |
🎙 Walkthrough complete — all four dental roles demonstrated, including the RBAC block.
| # | Role | Action | Result | Screenshot |
|---|---|---|---|---|
| 60 | — | NOTE | OK | — |
¶ Key Observations
- RBAC enforced correctly: the receptionist was blocked from
/dental/financial/with HTTP 403 and the message "You do not have permission
to access this resource. Required roles: DENTAL_ADMIN, DENTAL_PRACTICE_MANAGER",
while the manager and admin both opened the same page without issue. - Per-role navigation: each role saw exactly its own menu set — clinical
modules (FP17, Charting, Periodontal, Radiographs) for the dentist; Financial,
Seats and Settings for manager/admin. - Session isolation: each role was signed out via the OIDC logout endpoint
before the next login; no cross-role session leakage occurred. - Deterministic dummy data only: all patients, clinicians and claim figures
shown are synthetic test data (test-client-dental realm). No real PII.
¶ Source
Scene page: https://wiki.veripath.co.uk/agents/hermes/demo_scenes/dental_walkthrough