for(Studio::factory()) ->for(Image::factory()) ->createOne(); $response = $this->delete(route('api.studioimage.destroy', ['studio' => $studioImage->studio, 'image' => $studioImage->image])); $response->assertUnauthorized(); } /** * The Studio Image Destroy Endpoint shall forbid users without the delete studio & delete image permissions. * * @return void */ public function testForbidden(): void { $studioImage = StudioImage::factory() ->for(Studio::factory()) ->for(Image::factory()) ->createOne(); $user = User::factory()->createOne(); Sanctum::actingAs($user); $response = $this->delete(route('api.studioimage.destroy', ['studio' => $studioImage->studio, 'image' => $studioImage->image])); $response->assertForbidden(); } /** * The Studio Image Destroy Endpoint shall return an error if the studio image does not exist. * * @return void */ public function testNotFound(): void { $studio = Studio::factory()->createOne(); $image = Image::factory()->createOne(); $user = User::factory() ->withPermissions( CrudPermission::DELETE->format(Studio::class), CrudPermission::DELETE->format(Image::class) ) ->createOne(); Sanctum::actingAs($user); $response = $this->delete(route('api.studioimage.destroy', ['studio' => $studio, 'image' => $image])); $response->assertNotFound(); } /** * The Studio Image Destroy Endpoint shall delete the studio image. * * @return void */ public function testDeleted(): void { $studioImage = StudioImage::factory() ->for(Studio::factory()) ->for(Image::factory()) ->createOne(); $user = User::factory() ->withPermissions( CrudPermission::DELETE->format(Studio::class), CrudPermission::DELETE->format(Image::class) ) ->createOne(); Sanctum::actingAs($user); $response = $this->delete(route('api.studioimage.destroy', ['studio' => $studioImage->studio, 'image' => $studioImage->image])); $response->assertOk(); static::assertModelMissing($studioImage); } }