TenantAtlas/tests/Feature/Drift/DriftBulkAcknowledgeAuthorizationTest.php
2026-02-25 02:45:20 +01:00

59 lines
1.9 KiB
PHP

<?php
use App\Filament\Resources\FindingResource\Pages\ListFindings;
use App\Models\Finding;
use Filament\Facades\Filament;
use Livewire\Livewire;
test('readonly users cannot bulk triage selected findings', function () {
[$user, $tenant] = createUserWithTenant(role: 'readonly');
$this->actingAs($user);
Filament::setTenant($tenant, true);
$findings = Finding::factory()
->count(2)
->for($tenant)
->create([
'finding_type' => Finding::FINDING_TYPE_DRIFT,
'status' => Finding::STATUS_NEW,
]);
$component = Livewire::test(ListFindings::class)
->assertTableBulkActionVisible('triage_selected')
->assertTableBulkActionDisabled('triage_selected');
try {
$component->callTableBulkAction('triage_selected', $findings);
} catch (Throwable) {
// Filament actions may abort/throw when forced to execute.
}
$findings->each(fn (Finding $finding) => expect($finding->refresh()->status)->toBe(Finding::STATUS_NEW));
});
test('readonly users cannot triage all matching findings', function () {
[$user, $tenant] = createUserWithTenant(role: 'readonly');
$this->actingAs($user);
Filament::setTenant($tenant, true);
$findings = Finding::factory()
->count(2)
->for($tenant)
->create([
'finding_type' => Finding::FINDING_TYPE_DRIFT,
'status' => Finding::STATUS_NEW,
]);
$component = Livewire::test(ListFindings::class)
->assertActionVisible('triage_all_matching')
->assertActionDisabled('triage_all_matching');
try {
$component->callAction('triage_all_matching');
} catch (Throwable) {
// Filament actions may abort/throw when forced to execute.
}
$findings->each(fn (Finding $finding) => expect($finding->refresh()->status)->toBe(Finding::STATUS_NEW));
});