Repro/dashboard searchbox permissions (#12219)

* Add repro for #8472 
* Update test file location
* Add additional XHR assertion for "nodata" user

Co-authored-by: Nemanja <31325167+nemanjaglumac@users.noreply.github.com>

frontend/test/__support__/cypress.js

@@ -72,6 +72,12 @@ export function sidebar() {
 }
 
 // Metabase utility functions for commonly-used patterns
+export function selectDashboardFilter(selection, filterName) {
+  selection.contains("Select…").click();
+  popover()
+    .contains(filterName)
+    .click({ force: true });
+}
 
 export function openOrdersTable() {
   cy.visit("/question/new?database=1&table=2");

frontend/test/metabase/scenarios/dashboard/dashboard_data_permissions.cy.spec.js

+import {
+  signIn,
+  restore,
+  popover,
+  selectDashboardFilter,
+} from "__support__/cypress";
+
+function filterDashboard(suggests = true) {
+  cy.visit("/dashboard/1");
+  cy.contains("Orders");
+
+  // We should get a suggested response and be able to click it if we're an admin
+  if (suggests) {
+    cy.contains("Category").type("Aero");
+    cy.contains("Aerodynamic").click();
+  } else {
+    cy.contains("Category").type("Aerodynamic Bronze Hat");
+    cy.wait("@search").should(xhr => {
+      expect(xhr.status).to.equal(403);
+    });
+  }
+  cy.contains("Add filter").click();
+  cy.contains("Aerodynamic Bronze Hat");
+  cy.contains(/Rows \d-\d of 96/);
+}
+
+describe("support > permissions (metabase#8472)", () => {
+  before(() => {
+    restore();
+    signIn("admin");
+
+    // Setup a dashboard with a text filter
+    cy.visit("/dashboard/1");
+    // click pencil icon to edit
+    cy.get(".Icon-pencil").click();
+
+    cy.get(".Icon-filter").click();
+    popover()
+      .contains("Other Categories")
+      .click();
+
+    // Filter the first card by product category
+    selectDashboardFilter(cy.get(".DashCard").first(), "Title");
+
+    cy.contains("Done").click();
+    cy.contains("Save").click();
+    cy.contains("Orders in a dashboard").click();
+  });
+
+  it("should allow an admin user to select the filter", () => {
+    signIn("admin");
+    filterDashboard();
+  });
+
+  it("should allow a nodata user to select the filter", () => {
+    cy.server();
+    cy.route(
+      "GET",
+      "/api/dashboard/1/params/*/search/Aerodynamic Bronze Hat",
+    ).as("search");
+
+    signIn("nodata");
+    filterDashboard(false);
+  });
+});