http: GET /api/users (list)

internal/server/http/rbac_test.go

@@ -144,10 +144,6 @@ func TestLoginRejectsDisabledUser(t *testing.T) {
 
 func TestAdminBandRejectsOperator(t *testing.T) {
 	t.Parallel()
-	// This test will start asserting 403 once Task B4 mounts /api/users
-	// inside the admin band and Task E1 lands the handler. Until then,
-	// the route 404s — we skip rather than red-flag the suite.
-	t.Skip("re-enable after B4 route grouping + E1 /api/users handler land")
 	srv, urlBase := newTestServer(t, false)
 	makeUser(t, srv, "admin1", store.RoleAdmin)
 	opID := makeUser(t, srv, "op1", store.RoleOperator)