ahmido
0dc79520a4
Implements provider access hardening for Intune write operations: - RBAC-based write gate with configurable staleness thresholds - Gate enforced at restore start and in jobs (execute + assignments) - UI affordances: disabled rerun action, tenant RBAC status card, refresh RBAC action - Audit logging for blocked writes - Ops UX label: `rbac.health_check` now displays as “RBAC health check” - Adds/updates Pest tests and SpecKit artifacts for feature 108 Notes: - Filament v5 / Livewire v4 compliant. - Destructive actions require confirmation. - Assets: no new global assets. Tested: - `vendor/bin/sail artisan test --compact` (suite previously green) + focused OpsUx tests for OperationCatalog labels. - `vendor/bin/sail bin pint --dirty`. Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de> Reviewed-on: #132
58 lines
1.8 KiB
PHP
58 lines
1.8 KiB
PHP
<?php
|
|
|
|
use App\Support\Badges\BadgeSpec;
|
|
use App\Support\Badges\Domains\TenantRbacStatusBadge;
|
|
|
|
test('all rbac status values map to valid badge specs', function (string $status) {
|
|
$badge = new TenantRbacStatusBadge;
|
|
$spec = $badge->spec($status);
|
|
|
|
expect($spec)->toBeInstanceOf(BadgeSpec::class)
|
|
->and($spec->label)->not->toBeEmpty()
|
|
->and($spec->color)->not->toBeEmpty();
|
|
})->with([
|
|
'null' => 'null',
|
|
'not_configured' => 'not_configured',
|
|
'ok' => 'ok',
|
|
'degraded' => 'degraded',
|
|
'failed' => 'failed',
|
|
'stale' => 'stale',
|
|
]);
|
|
|
|
test('null status maps to unknown badge', function () {
|
|
$badge = new TenantRbacStatusBadge;
|
|
$spec = $badge->spec(null);
|
|
|
|
expect($spec->label)->toBe('Unknown')
|
|
->and($spec->color)->toBe('gray');
|
|
});
|
|
|
|
test('stale status has warning color and clock icon', function () {
|
|
$badge = new TenantRbacStatusBadge;
|
|
$spec = $badge->spec('stale');
|
|
|
|
expect($spec->label)->toBe('Stale')
|
|
->and($spec->color)->toBe('warning')
|
|
->and($spec->icon)->toBe('heroicon-m-clock');
|
|
});
|
|
|
|
test('degraded status has warning color and exclamation icon', function () {
|
|
$badge = new TenantRbacStatusBadge;
|
|
$spec = $badge->spec('degraded');
|
|
|
|
expect($spec->label)->toBe('Degraded')
|
|
->and($spec->color)->toBe('warning')
|
|
->and($spec->icon)->toBe('heroicon-m-exclamation-triangle');
|
|
});
|
|
|
|
test('all configured statuses map to specific badges (not unknown)', function () {
|
|
$badge = new TenantRbacStatusBadge;
|
|
|
|
$configuredStatuses = ['not_configured', 'ok', 'configured', 'degraded', 'failed', 'error', 'stale', 'manual_assignment_required'];
|
|
|
|
foreach ($configuredStatuses as $status) {
|
|
$spec = $badge->spec($status);
|
|
expect($spec->label)->not->toBe('Unknown', "Status '{$status}' should not fall through to Unknown");
|
|
}
|
|
});
|