44 lines
1.8 KiB
PHP
44 lines
1.8 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
use App\Filament\Resources\ManagedEnvironmentResource\Pages\EditManagedEnvironment;
|
|
use App\Filament\Resources\ManagedEnvironmentResource\RelationManagers\ManagedEnvironmentMembershipsRelationManager;
|
|
use App\Models\ManagedEnvironment;
|
|
use App\Models\User;
|
|
use Filament\Actions\Action;
|
|
use Filament\Facades\Filament;
|
|
use Illuminate\Foundation\Testing\RefreshDatabase;
|
|
use Livewire\Livewire;
|
|
|
|
uses(RefreshDatabase::class);
|
|
|
|
describe('ManagedEnvironment memberships relation manager UI enforcement', function () {
|
|
it('shows membership actions as visible but disabled for operator members', function () {
|
|
$tenant = ManagedEnvironment::factory()->create();
|
|
[$user] = createUserWithTenant(tenant: $tenant, role: 'operator', workspaceRole: 'operator');
|
|
|
|
$this->actingAs($user);
|
|
$tenant->makeCurrent();
|
|
Filament::setTenant($tenant, true);
|
|
|
|
$otherUser = User::factory()->create();
|
|
createUserWithTenant(tenant: $tenant, user: $otherUser, role: 'readonly');
|
|
|
|
Livewire::test(ManagedEnvironmentMembershipsRelationManager::class, [
|
|
'ownerRecord' => $tenant,
|
|
'pageClass' => EditManagedEnvironment::class,
|
|
])
|
|
->assertTableActionVisible('add_member')
|
|
->assertTableActionDisabled('add_member')
|
|
->assertTableActionExists('add_member', function (Action $action): bool {
|
|
return $action->getTooltip() === 'You do not have permission to manage environment access scopes.';
|
|
})
|
|
->assertTableActionVisible('remove')
|
|
->assertTableActionDisabled('remove')
|
|
->assertTableActionExists('remove', function (Action $action): bool {
|
|
return $action->getTooltip() === 'You do not have permission to manage environment access scopes.';
|
|
});
|
|
});
|
|
});
|