74c6442728
- Refactor WorkspacePolicy to use pivot role instead of workspace.user_id - Add manageBilling policy (owner only) to BillingController - Fix ApiKeyController authorization (view → manageTeam for store/destroy) - Fix WorkspaceInviteController using workspace.user_id for owner checks - Fix WorkspaceController settings is_owner using workspace.user_id - Create PostAction enum for UpdatePost/PostController action strings - Create ApiToken\Status enum - Add User::SUBSCRIPTION_NAME constant, replace all hardcoded 'default' - Convert wantsEmailFor to accept NotificationType enum - Convert all $data[] to data_get() across publishers, controllers, jobs - Fix SocialLoginController callback missing try/catch - Fix SocialController::toggleActive missing workspace null check - Fix UpdatePost NPE on meta merge when postPlatform not found - Remove HTML5 required attributes from form inputs - Convert function declarations to arrow functions in Vue components - Replace hardcoded URLs with Wayfinder route helpers - Replace new Date() with dayjs - Add 16 new test files covering policies, authorization, publishing
67 lines
2.2 KiB
PHP
67 lines
2.2 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
use App\Enums\User\Setup;
|
|
use App\Enums\UserWorkspace\Role;
|
|
use App\Models\SocialAccount;
|
|
use App\Models\User;
|
|
use App\Models\Workspace;
|
|
|
|
beforeEach(function () {
|
|
$this->user = User::factory()->create(['setup' => Setup::Completed]);
|
|
$this->workspace = Workspace::factory()->create(['user_id' => $this->user->id]);
|
|
$this->user->workspaces()->attach($this->workspace->id, ['role' => Role::Owner->value]);
|
|
$this->user->update(['current_workspace_id' => $this->workspace->id]);
|
|
});
|
|
|
|
test('toggle active account to inactive', function () {
|
|
$account = SocialAccount::factory()->create([
|
|
'workspace_id' => $this->workspace->id,
|
|
'is_active' => true,
|
|
]);
|
|
|
|
$response = $this->actingAs($this->user)->put(route('app.accounts.toggle', $account));
|
|
|
|
$response->assertRedirect();
|
|
expect($account->fresh()->is_active)->toBeFalse();
|
|
});
|
|
|
|
test('toggle inactive account to active', function () {
|
|
$account = SocialAccount::factory()->create([
|
|
'workspace_id' => $this->workspace->id,
|
|
'is_active' => false,
|
|
]);
|
|
|
|
$response = $this->actingAs($this->user)->put(route('app.accounts.toggle', $account));
|
|
|
|
$response->assertRedirect();
|
|
expect($account->fresh()->is_active)->toBeTrue();
|
|
});
|
|
|
|
test('cannot toggle account from another workspace', function () {
|
|
$otherWorkspace = Workspace::factory()->create();
|
|
$account = SocialAccount::factory()->create([
|
|
'workspace_id' => $otherWorkspace->id,
|
|
'is_active' => true,
|
|
]);
|
|
|
|
$response = $this->actingAs($this->user)->put(route('app.accounts.toggle', $account));
|
|
|
|
$response->assertForbidden();
|
|
});
|
|
|
|
test('member cannot toggle account', function () {
|
|
$member = User::factory()->create(['setup' => Setup::Completed]);
|
|
$this->workspace->members()->attach($member->id, ['role' => Role::Member->value]);
|
|
$member->update(['current_workspace_id' => $this->workspace->id]);
|
|
|
|
$account = SocialAccount::factory()->create([
|
|
'workspace_id' => $this->workspace->id,
|
|
'is_active' => true,
|
|
]);
|
|
|
|
$response = $this->actingAs($member)->put(route('app.accounts.toggle', $account));
|
|
|
|
$response->assertForbidden();
|
|
});
|