createOne(); $response = $this->delete(route('api.studio.forceDelete', ['studio' => $studio])); $response->assertUnauthorized(); } /** * The Studio Force Delete Endpoint shall forbid users without the force delete studio permission. * * @return void */ public function testForbidden(): void { $studio = Studio::factory()->createOne(); $user = User::factory()->createOne(); Sanctum::actingAs($user); $response = $this->delete(route('api.studio.forceDelete', ['studio' => $studio])); $response->assertForbidden(); } /** * The Studio Force Delete Endpoint shall force delete the studio. * * @return void */ public function testDeleted(): void { $studio = Studio::factory()->createOne(); $user = User::factory()->withPermissions(ExtendedCrudPermission::FORCE_DELETE->format(Studio::class))->createOne(); Sanctum::actingAs($user); $response = $this->delete(route('api.studio.forceDelete', ['studio' => $studio])); $response->assertOk(); static::assertModelMissing($studio); } }