for(Artist::factory()) ->for(ExternalResource::factory(), ArtistResource::RELATION_RESOURCE) ->createOne(); $parameters = ArtistResource::factory()->raw(); $response = $this->put(route('api.artistresource.update', ['artist' => $artistResource->artist, 'resource' => $artistResource->resource] + $parameters)); $response->assertUnauthorized(); } /** * The Artist Resource Update Endpoint shall forbid users without the update artist & update resource permissions. * * @return void */ public function testForbidden(): void { $artistResource = ArtistResource::factory() ->for(Artist::factory()) ->for(ExternalResource::factory(), ArtistResource::RELATION_RESOURCE) ->createOne(); $parameters = ArtistResource::factory()->raw(); $user = User::factory()->createOne(); Sanctum::actingAs($user); $response = $this->put(route('api.artistresource.update', ['artist' => $artistResource->artist, 'resource' => $artistResource->resource] + $parameters)); $response->assertForbidden(); } /** * The Artist Resource Update Endpoint shall update an artist resource. * * @return void */ public function testUpdate(): void { $artistResource = ArtistResource::factory() ->for(Artist::factory()) ->for(ExternalResource::factory(), ArtistResource::RELATION_RESOURCE) ->createOne(); $parameters = ArtistResource::factory()->raw(); $user = User::factory() ->withPermissions( CrudPermission::UPDATE->format(Artist::class), CrudPermission::UPDATE->format(ExternalResource::class) ) ->createOne(); Sanctum::actingAs($user); $response = $this->put(route('api.artistresource.update', ['artist' => $artistResource->artist, 'resource' => $artistResource->resource] + $parameters)); $response->assertOk(); } }