A new extension release changes data entry and service calls. What should be tested before production?

1. Representative authorized and unauthorized workflows in the target-like environment
2. Only whether one administrator can open the first page
3. Only whether all source files have the same timestamp
4. Only whether the application logo appears