ahmido
e64bae9cfc
## Summary - replace the legacy Tenant and TenantMembership core models with ManagedEnvironment and ManagedEnvironmentMembership - propagate the managed environment naming and key changes across Filament resources, pages, controllers, jobs, models, and supporting runtime paths - add feature 279 spec artifacts and focused managed-environment test coverage for model behavior, route binding, panel context, authorization, and legacy guardrails ## Validation - `cd apps/platform && ./vendor/bin/sail artisan test --compact tests/Feature/ManagedEnvironment/LegacyTenantCoreGuardTest.php tests/Feature/ManagedEnvironment/ManagedEnvironmentAuthorizationTest.php tests/Feature/ManagedEnvironment/ManagedEnvironmentPanelContextTest.php tests/Feature/ManagedEnvironment/ManagedEnvironmentRouteBindingTest.php tests/Unit/ManagedEnvironment/ManagedEnvironmentContextResolverTest.php tests/Unit/ManagedEnvironment/ManagedEnvironmentModelTest.php` - `cd apps/platform && ./vendor/bin/sail bin pint --dirty --format agent` ## Notes - branch pushed from commit `1123b122` - browser smoke test file was added but not run in this pass Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de> Reviewed-on: #335
125 lines
4.8 KiB
PHP
125 lines
4.8 KiB
PHP
<?php
|
|
|
|
use App\Models\BaselineProfile;
|
|
use App\Models\BaselineTenantAssignment;
|
|
use App\Models\ManagedEnvironment;
|
|
|
|
// --- T039: Assignment CRUD tests (RBAC + uniqueness) ---
|
|
|
|
it('creates a tenant assignment with workspace context', function () {
|
|
[$user, $tenant] = createUserWithTenant(role: 'owner');
|
|
|
|
$profile = BaselineProfile::factory()->active()->create([
|
|
'workspace_id' => $tenant->workspace_id,
|
|
'scope_jsonb' => ['policy_types' => ['deviceConfiguration']],
|
|
]);
|
|
|
|
$assignment = BaselineTenantAssignment::create([
|
|
'workspace_id' => (int) $tenant->workspace_id,
|
|
'managed_environment_id' => (int) $tenant->getKey(),
|
|
'baseline_profile_id' => (int) $profile->getKey(),
|
|
'assigned_by_user_id' => (int) $user->getKey(),
|
|
]);
|
|
|
|
expect($assignment)->toBeInstanceOf(BaselineTenantAssignment::class);
|
|
expect($assignment->workspace_id)->toBe((int) $tenant->workspace_id);
|
|
expect($assignment->managed_environment_id)->toBe((int) $tenant->getKey());
|
|
expect($assignment->baseline_profile_id)->toBe((int) $profile->getKey());
|
|
expect($assignment->assigned_by_user_id)->toBe((int) $user->getKey());
|
|
});
|
|
|
|
it('prevents duplicate assignments for the same workspace+tenant', function () {
|
|
[$user, $tenant] = createUserWithTenant(role: 'owner');
|
|
|
|
$profile1 = BaselineProfile::factory()->active()->create([
|
|
'workspace_id' => $tenant->workspace_id,
|
|
]);
|
|
$profile2 = BaselineProfile::factory()->active()->create([
|
|
'workspace_id' => $tenant->workspace_id,
|
|
]);
|
|
|
|
BaselineTenantAssignment::create([
|
|
'workspace_id' => (int) $tenant->workspace_id,
|
|
'managed_environment_id' => (int) $tenant->getKey(),
|
|
'baseline_profile_id' => (int) $profile1->getKey(),
|
|
'assigned_by_user_id' => (int) $user->getKey(),
|
|
]);
|
|
|
|
// Attempting to assign the same tenant in the same workspace should fail
|
|
// due to the unique constraint on (workspace_id, managed_environment_id)
|
|
expect(fn () => BaselineTenantAssignment::create([
|
|
'workspace_id' => (int) $tenant->workspace_id,
|
|
'managed_environment_id' => (int) $tenant->getKey(),
|
|
'baseline_profile_id' => (int) $profile2->getKey(),
|
|
'assigned_by_user_id' => (int) $user->getKey(),
|
|
]))->toThrow(\Illuminate\Database\QueryException::class);
|
|
});
|
|
|
|
it('allows the same tenant to be assigned in different workspaces', function () {
|
|
[$user1, $tenant1] = createUserWithTenant(role: 'owner');
|
|
[$user2, $tenant2] = createUserWithTenant(role: 'owner');
|
|
|
|
$profile1 = BaselineProfile::factory()->active()->create([
|
|
'workspace_id' => $tenant1->workspace_id,
|
|
]);
|
|
$profile2 = BaselineProfile::factory()->active()->create([
|
|
'workspace_id' => $tenant2->workspace_id,
|
|
]);
|
|
|
|
$a1 = BaselineTenantAssignment::create([
|
|
'workspace_id' => (int) $tenant1->workspace_id,
|
|
'managed_environment_id' => (int) $tenant1->getKey(),
|
|
'baseline_profile_id' => (int) $profile1->getKey(),
|
|
]);
|
|
$a2 = BaselineTenantAssignment::create([
|
|
'workspace_id' => (int) $tenant2->workspace_id,
|
|
'managed_environment_id' => (int) $tenant2->getKey(),
|
|
'baseline_profile_id' => (int) $profile2->getKey(),
|
|
]);
|
|
|
|
expect($a1->exists)->toBeTrue();
|
|
expect($a2->exists)->toBeTrue();
|
|
});
|
|
|
|
it('deletes an assignment without deleting related models', function () {
|
|
[$user, $tenant] = createUserWithTenant(role: 'owner');
|
|
|
|
$profile = BaselineProfile::factory()->active()->create([
|
|
'workspace_id' => $tenant->workspace_id,
|
|
]);
|
|
|
|
$assignment = BaselineTenantAssignment::create([
|
|
'workspace_id' => (int) $tenant->workspace_id,
|
|
'managed_environment_id' => (int) $tenant->getKey(),
|
|
'baseline_profile_id' => (int) $profile->getKey(),
|
|
'assigned_by_user_id' => (int) $user->getKey(),
|
|
]);
|
|
|
|
$assignmentId = $assignment->getKey();
|
|
$assignment->delete();
|
|
|
|
expect(BaselineTenantAssignment::query()->find($assignmentId))->toBeNull();
|
|
expect(BaselineProfile::query()->find($profile->getKey()))->not->toBeNull();
|
|
expect(ManagedEnvironment::query()->find($tenant->getKey()))->not->toBeNull();
|
|
});
|
|
|
|
it('loads the baseline profile relationship from assignment', function () {
|
|
[$user, $tenant] = createUserWithTenant(role: 'owner');
|
|
|
|
$profile = BaselineProfile::factory()->active()->create([
|
|
'workspace_id' => $tenant->workspace_id,
|
|
'name' => 'Test Profile',
|
|
]);
|
|
|
|
$assignment = BaselineTenantAssignment::create([
|
|
'workspace_id' => (int) $tenant->workspace_id,
|
|
'managed_environment_id' => (int) $tenant->getKey(),
|
|
'baseline_profile_id' => (int) $profile->getKey(),
|
|
]);
|
|
|
|
$loaded = $assignment->baselineProfile;
|
|
|
|
expect($loaded)->not->toBeNull();
|
|
expect($loaded->name)->toBe('Test Profile');
|
|
});
|