7b0a383182
Implements workspace-scoped managed tenant onboarding wizard (Filament v5 / Livewire v4) with strict RBAC (404/403 semantics), resumable sessions, provider connection selection/creation, verification OperationRun, and optional bootstrap. Removes legacy onboarding entrypoints and adds Pest coverage + spec artifacts (073).
123 lines
5.0 KiB
PHP
123 lines
5.0 KiB
PHP
<?php
|
|
|
|
use App\Filament\Resources\PolicyResource;
|
|
use App\Filament\Resources\PolicyVersionResource;
|
|
use App\Models\Policy;
|
|
use App\Models\PolicyVersion;
|
|
use App\Models\Tenant;
|
|
use Carbon\CarbonImmutable;
|
|
use Illuminate\Foundation\Testing\RefreshDatabase;
|
|
|
|
uses(RefreshDatabase::class);
|
|
|
|
test('configuration policy types render a normalized settings table', function (string $policyType) {
|
|
$tenant = Tenant::create([
|
|
'tenant_id' => 'local-tenant',
|
|
'name' => 'Tenant One',
|
|
'metadata' => [],
|
|
'is_current' => true,
|
|
]);
|
|
|
|
$tenant->makeCurrent();
|
|
|
|
$policy = Policy::create([
|
|
'tenant_id' => $tenant->id,
|
|
'external_id' => 'scp-policy-1',
|
|
'policy_type' => $policyType,
|
|
'display_name' => 'Settings Catalog Policy',
|
|
'platform' => 'windows',
|
|
]);
|
|
|
|
$version = PolicyVersion::create([
|
|
'tenant_id' => $tenant->id,
|
|
'policy_id' => $policy->id,
|
|
'version_number' => 1,
|
|
'policy_type' => $policyType,
|
|
'platform' => $policy->platform,
|
|
'created_by' => 'tester@example.com',
|
|
'captured_at' => CarbonImmutable::now(),
|
|
'snapshot' => [
|
|
'@odata.type' => '#microsoft.graph.deviceManagementConfigurationPolicy',
|
|
'id' => 'scp-policy-1',
|
|
'name' => 'Settings Catalog Policy',
|
|
'platforms' => 'windows10',
|
|
'technologies' => 'mdm',
|
|
'settings' => [
|
|
[
|
|
'id' => 's1',
|
|
'settingInstance' => [
|
|
'@odata.type' => '#microsoft.graph.deviceManagementConfigurationSimpleSettingInstance',
|
|
'settingDefinitionId' => 'device_vendor_msft_policy_config_system_minimumpinlength',
|
|
'simpleSettingValue' => [
|
|
'@odata.type' => '#microsoft.graph.deviceManagementConfigurationIntegerSettingValue',
|
|
'value' => 12,
|
|
],
|
|
],
|
|
],
|
|
[
|
|
'id' => 's2',
|
|
'settingInstance' => [
|
|
'@odata.type' => '#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance',
|
|
'settingDefinitionId' => 'device_vendor_msft_policy_config_system_usebiometrics',
|
|
'choiceSettingValue' => [
|
|
'value' => 'device_vendor_msft_policy_config_system_usebiometrics_true',
|
|
],
|
|
],
|
|
],
|
|
[
|
|
'id' => 'group',
|
|
'settingInstance' => [
|
|
'@odata.type' => '#microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance',
|
|
'settingDefinitionId' => 'device_vendor_msft_policy_config_system_group',
|
|
'groupSettingCollectionValue' => [
|
|
[
|
|
'children' => [
|
|
[
|
|
'@odata.type' => '#microsoft.graph.deviceManagementConfigurationSimpleSettingInstance',
|
|
'settingDefinitionId' => 'device_vendor_msft_policy_config_system_child',
|
|
'simpleSettingValue' => [
|
|
'value' => true,
|
|
],
|
|
],
|
|
],
|
|
],
|
|
],
|
|
],
|
|
],
|
|
],
|
|
],
|
|
]);
|
|
|
|
[$user, $tenant] = createUserWithTenant($tenant, role: 'owner');
|
|
|
|
$policyResponse = $this->actingAs($user)
|
|
->get(PolicyResource::getUrl('view', ['record' => $policy], tenant: $tenant));
|
|
|
|
$policyResponse->assertOk();
|
|
$policyResponse->assertSee('Definition');
|
|
$policyResponse->assertSee('Type');
|
|
$policyResponse->assertSee('Value');
|
|
$policyResponse->assertSee('device_vendor_msft_policy_config_system_minimumpinlength');
|
|
$policyResponse->assertSee('12');
|
|
$policyResponse->assertSee('SimpleSettingInstance');
|
|
$policyResponse->assertSee('tp-policy-general-card');
|
|
|
|
$versionResponse = $this->actingAs($user)
|
|
->get(PolicyVersionResource::getUrl('view', ['record' => $version], tenant: $tenant));
|
|
|
|
$versionResponse->assertOk();
|
|
$versionResponse->assertSee('Normalized settings');
|
|
$versionResponse->assertSee('device_vendor_msft_policy_config_system_usebiometrics');
|
|
$versionResponse->assertSee('Enabled');
|
|
$versionResponse->assertSee('device_vendor_msft_policy_config_system_child');
|
|
|
|
$versionGeneralSection = [];
|
|
preg_match('/<section[^>]*data-block="general"[^>]*>.*?<\/section>/is', $versionResponse->getContent(), $versionGeneralSection);
|
|
expect($versionGeneralSection)->not->toBeEmpty();
|
|
expect($versionGeneralSection[0])->toContain('x-cloak');
|
|
})->with([
|
|
'settingsCatalogPolicy',
|
|
'endpointSecurityPolicy',
|
|
'securityBaselinePolicy',
|
|
]);
|