createOne(); $parameters = array_merge( ExternalResource::factory()->raw(), [ExternalResource::ATTRIBUTE_SITE => ResourceSite::OFFICIAL_SITE->localize()] ); $response = $this->put(route('api.resource.update', ['resource' => $resource] + $parameters)); $response->assertUnauthorized(); } /** * The External Resource Update Endpoint shall forbid users without the update external resource permission. * * @return void */ public function testForbidden(): void { $resource = ExternalResource::factory()->createOne(); $parameters = array_merge( ExternalResource::factory()->raw(), [ExternalResource::ATTRIBUTE_SITE => ResourceSite::OFFICIAL_SITE->localize()] ); $user = User::factory()->createOne(); Sanctum::actingAs($user); $response = $this->put(route('api.resource.update', ['resource' => $resource] + $parameters)); $response->assertForbidden(); } /** * The External Resource Update Endpoint shall forbid users from updating a resource that is trashed. * * @return void */ public function testTrashed(): void { $resource = ExternalResource::factory() ->trashed() ->createOne([ ExternalResource::ATTRIBUTE_SITE => ResourceSite::OFFICIAL_SITE, ]); $parameters = array_merge( ExternalResource::factory()->raw(), [ExternalResource::ATTRIBUTE_SITE => ResourceSite::OFFICIAL_SITE->localize()] ); $user = User::factory()->withPermissions(CrudPermission::UPDATE->format(ExternalResource::class))->createOne(); Sanctum::actingAs($user); $response = $this->put(route('api.resource.update', ['resource' => $resource] + $parameters)); $response->assertForbidden(); } /** * The External Resource Update Endpoint shall update a resource. * * @return void */ public function testUpdate(): void { $resource = ExternalResource::factory()->createOne([ ExternalResource::ATTRIBUTE_SITE => ResourceSite::OFFICIAL_SITE, ]); $parameters = array_merge( ExternalResource::factory()->raw(), [ExternalResource::ATTRIBUTE_SITE => ResourceSite::OFFICIAL_SITE->localize()] ); $user = User::factory()->withPermissions(CrudPermission::UPDATE->format(ExternalResource::class))->createOne(); Sanctum::actingAs($user); $response = $this->put(route('api.resource.update', ['resource' => $resource] + $parameters)); $response->assertOk(); } }