createOne(); $facet = Arr::random(ImageFacet::cases()); $parameters = array_merge( Image::factory()->raw(), [Image::ATTRIBUTE_FACET => $facet->localize()], ); $response = $this->put(route('api.image.update', ['image' => $image] + $parameters)); $response->assertUnauthorized(); } /** * The Image Update Endpoint shall forbid users without the update image permission. * * @return void */ public function testForbidden(): void { $image = Image::factory()->createOne(); $facet = Arr::random(ImageFacet::cases()); $parameters = array_merge( Image::factory()->raw(), [Image::ATTRIBUTE_FACET => $facet->localize()], ); $user = User::factory()->createOne(); Sanctum::actingAs($user); $response = $this->put(route('api.image.update', ['image' => $image] + $parameters)); $response->assertForbidden(); } /** * The Image Update Endpoint shall forbid users from updating an image that is trashed. * * @return void */ public function testTrashed(): void { $image = Image::factory()->trashed()->createOne(); $facet = Arr::random(ImageFacet::cases()); $parameters = array_merge( Image::factory()->raw(), [Image::ATTRIBUTE_FACET => $facet->localize()], ); $user = User::factory()->withPermissions(CrudPermission::UPDATE->format(Image::class))->createOne(); Sanctum::actingAs($user); $response = $this->put(route('api.image.update', ['image' => $image] + $parameters)); $response->assertForbidden(); } /** * The Image Update Endpoint shall update an image. * * @return void */ public function testUpdate(): void { $image = Image::factory()->createOne(); $facet = Arr::random(ImageFacet::cases()); $parameters = array_merge( Image::factory()->raw(), [Image::ATTRIBUTE_FACET => $facet->localize()], ); $user = User::factory()->withPermissions(CrudPermission::UPDATE->format(Image::class))->createOne(); Sanctum::actingAs($user); $response = $this->put(route('api.image.update', ['image' => $image] + $parameters)); $response->assertOk(); } }