Files
animethemes-server/tests/Feature/Http/Api/Wiki/Video/Script/ScriptUpdateTest.php
T
paranarimasuandGitHub da02b741e1 feat(auth): adding patron role with new permission to bypass feature flags (#542)
* feat(auth): adding patron role with new permission to bypass feature flags

* style: fix StyleCI finding

* fix: wiki editors shouldn't have extended CRUD permissions
2023-03-10 00:36:21 -06:00

99 lines
2.5 KiB
PHP

<?php
declare(strict_types=1);
namespace Tests\Feature\Http\Api\Wiki\Video\Script;
use App\Enums\Auth\CrudPermission;
use App\Models\Auth\User;
use App\Models\Wiki\Video\VideoScript;
use Illuminate\Foundation\Testing\WithoutEvents;
use Laravel\Sanctum\Sanctum;
use Tests\TestCase;
/**
* Class ScriptUpdateTest.
*/
class ScriptUpdateTest extends TestCase
{
use WithoutEvents;
/**
* The Script Update Endpoint shall be protected by sanctum.
*
* @return void
*/
public function testProtected(): void
{
$script = VideoScript::factory()->createOne();
$parameters = VideoScript::factory()->raw();
$response = $this->put(route('api.videoscript.update', ['videoscript' => $script] + $parameters));
$response->assertUnauthorized();
}
/**
* The Script Update Endpoint shall forbid users without the update video script permission.
*
* @return void
*/
public function testForbidden(): void
{
$script = VideoScript::factory()->createOne();
$parameters = VideoScript::factory()->raw();
$user = User::factory()->createOne();
Sanctum::actingAs($user);
$response = $this->put(route('api.videoscript.update', ['videoscript' => $script] + $parameters));
$response->assertForbidden();
}
/**
* The Script Update Endpoint shall forbid users from updating a script that is trashed.
*
* @return void
*/
public function testTrashed(): void
{
$script = VideoScript::factory()->createOne();
$script->delete();
$parameters = VideoScript::factory()->raw();
$user = User::factory()->withPermission(CrudPermission::UPDATE()->format(VideoScript::class))->createOne();
Sanctum::actingAs($user);
$response = $this->put(route('api.videoscript.update', ['videoscript' => $script] + $parameters));
$response->assertForbidden();
}
/**
* The Script Update Endpoint shall update a script.
*
* @return void
*/
public function testUpdate(): void
{
$script = VideoScript::factory()->createOne();
$parameters = VideoScript::factory()->raw();
$user = User::factory()->withPermission(CrudPermission::UPDATE()->format(VideoScript::class))->createOne();
Sanctum::actingAs($user);
$response = $this->put(route('api.videoscript.update', ['videoscript' => $script] + $parameters));
$response->assertOk();
}
}