ahmido
ce0615a9c1
## Summary - move the Laravel application into `apps/platform` and keep the repository root for orchestration, docs, and tooling - update the local command model, Sail/Docker wiring, runtime paths, and ignore rules around the new platform location - add relocation quickstart/contracts plus focused smoke coverage for bootstrap, command model, routes, and runtime behavior ## Validation - `cd apps/platform && ./vendor/bin/sail artisan test --compact tests/Feature/PlatformRelocation` - integrated browser smoke validated `/up`, `/`, `/admin`, `/admin/choose-workspace`, and tenant route semantics for `200`, `403`, and `404` ## Remaining Rollout Checks - validate Dokploy build context and working-directory assumptions against the new `apps/platform` layout - confirm web, queue, and scheduler processes all start from the expected working directory in staging/production - verify no legacy volume mounts or asset-publish paths still point at the old root-level `public/` or `storage/` locations Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de> Reviewed-on: #213
125 lines
4.6 KiB
PHP
125 lines
4.6 KiB
PHP
<?php
|
|
|
|
use App\Models\BaselineProfile;
|
|
use App\Models\BaselineTenantAssignment;
|
|
use App\Models\Tenant;
|
|
|
|
// --- T039: Assignment CRUD tests (RBAC + uniqueness) ---
|
|
|
|
it('creates a tenant assignment with workspace context', function () {
|
|
[$user, $tenant] = createUserWithTenant(role: 'owner');
|
|
|
|
$profile = BaselineProfile::factory()->active()->create([
|
|
'workspace_id' => $tenant->workspace_id,
|
|
'scope_jsonb' => ['policy_types' => ['deviceConfiguration']],
|
|
]);
|
|
|
|
$assignment = BaselineTenantAssignment::create([
|
|
'workspace_id' => (int) $tenant->workspace_id,
|
|
'tenant_id' => (int) $tenant->getKey(),
|
|
'baseline_profile_id' => (int) $profile->getKey(),
|
|
'assigned_by_user_id' => (int) $user->getKey(),
|
|
]);
|
|
|
|
expect($assignment)->toBeInstanceOf(BaselineTenantAssignment::class);
|
|
expect($assignment->workspace_id)->toBe((int) $tenant->workspace_id);
|
|
expect($assignment->tenant_id)->toBe((int) $tenant->getKey());
|
|
expect($assignment->baseline_profile_id)->toBe((int) $profile->getKey());
|
|
expect($assignment->assigned_by_user_id)->toBe((int) $user->getKey());
|
|
});
|
|
|
|
it('prevents duplicate assignments for the same workspace+tenant', function () {
|
|
[$user, $tenant] = createUserWithTenant(role: 'owner');
|
|
|
|
$profile1 = BaselineProfile::factory()->active()->create([
|
|
'workspace_id' => $tenant->workspace_id,
|
|
]);
|
|
$profile2 = BaselineProfile::factory()->active()->create([
|
|
'workspace_id' => $tenant->workspace_id,
|
|
]);
|
|
|
|
BaselineTenantAssignment::create([
|
|
'workspace_id' => (int) $tenant->workspace_id,
|
|
'tenant_id' => (int) $tenant->getKey(),
|
|
'baseline_profile_id' => (int) $profile1->getKey(),
|
|
'assigned_by_user_id' => (int) $user->getKey(),
|
|
]);
|
|
|
|
// Attempting to assign the same tenant in the same workspace should fail
|
|
// due to the unique constraint on (workspace_id, tenant_id)
|
|
expect(fn () => BaselineTenantAssignment::create([
|
|
'workspace_id' => (int) $tenant->workspace_id,
|
|
'tenant_id' => (int) $tenant->getKey(),
|
|
'baseline_profile_id' => (int) $profile2->getKey(),
|
|
'assigned_by_user_id' => (int) $user->getKey(),
|
|
]))->toThrow(\Illuminate\Database\QueryException::class);
|
|
});
|
|
|
|
it('allows the same tenant to be assigned in different workspaces', function () {
|
|
[$user1, $tenant1] = createUserWithTenant(role: 'owner');
|
|
[$user2, $tenant2] = createUserWithTenant(role: 'owner');
|
|
|
|
$profile1 = BaselineProfile::factory()->active()->create([
|
|
'workspace_id' => $tenant1->workspace_id,
|
|
]);
|
|
$profile2 = BaselineProfile::factory()->active()->create([
|
|
'workspace_id' => $tenant2->workspace_id,
|
|
]);
|
|
|
|
$a1 = BaselineTenantAssignment::create([
|
|
'workspace_id' => (int) $tenant1->workspace_id,
|
|
'tenant_id' => (int) $tenant1->getKey(),
|
|
'baseline_profile_id' => (int) $profile1->getKey(),
|
|
]);
|
|
$a2 = BaselineTenantAssignment::create([
|
|
'workspace_id' => (int) $tenant2->workspace_id,
|
|
'tenant_id' => (int) $tenant2->getKey(),
|
|
'baseline_profile_id' => (int) $profile2->getKey(),
|
|
]);
|
|
|
|
expect($a1->exists)->toBeTrue();
|
|
expect($a2->exists)->toBeTrue();
|
|
});
|
|
|
|
it('deletes an assignment without deleting related models', function () {
|
|
[$user, $tenant] = createUserWithTenant(role: 'owner');
|
|
|
|
$profile = BaselineProfile::factory()->active()->create([
|
|
'workspace_id' => $tenant->workspace_id,
|
|
]);
|
|
|
|
$assignment = BaselineTenantAssignment::create([
|
|
'workspace_id' => (int) $tenant->workspace_id,
|
|
'tenant_id' => (int) $tenant->getKey(),
|
|
'baseline_profile_id' => (int) $profile->getKey(),
|
|
'assigned_by_user_id' => (int) $user->getKey(),
|
|
]);
|
|
|
|
$assignmentId = $assignment->getKey();
|
|
$assignment->delete();
|
|
|
|
expect(BaselineTenantAssignment::query()->find($assignmentId))->toBeNull();
|
|
expect(BaselineProfile::query()->find($profile->getKey()))->not->toBeNull();
|
|
expect(Tenant::query()->find($tenant->getKey()))->not->toBeNull();
|
|
});
|
|
|
|
it('loads the baseline profile relationship from assignment', function () {
|
|
[$user, $tenant] = createUserWithTenant(role: 'owner');
|
|
|
|
$profile = BaselineProfile::factory()->active()->create([
|
|
'workspace_id' => $tenant->workspace_id,
|
|
'name' => 'Test Profile',
|
|
]);
|
|
|
|
$assignment = BaselineTenantAssignment::create([
|
|
'workspace_id' => (int) $tenant->workspace_id,
|
|
'tenant_id' => (int) $tenant->getKey(),
|
|
'baseline_profile_id' => (int) $profile->getKey(),
|
|
]);
|
|
|
|
$loaded = $assignment->baselineProfile;
|
|
|
|
expect($loaded)->not->toBeNull();
|
|
expect($loaded->name)->toBe('Test Profile');
|
|
});
|