Suggestions for Additional Testing (Optional)
If you want to strengthen your test suite even more:

Input validation

What happens with empty fields, SQL injection attempts, or special characters in login?

Concurrent logins

Can a user log in twice from two browsers? Any risk of session leakage?

Edge role conditions

What happens if a user is somehow assigned both roles or none?

Performance check

Does the report page load gracefully with many login attempts?

Accessibility & Responsiveness

Are your pages navigable via keyboard? Mobile-friendly?