TenantAtlas/tests/Feature/Filament/WorkspaceOverviewAuthorizationTest.php
2026-03-09 22:52:00 +01:00

25 lines
750 B
PHP

<?php
declare(strict_types=1);
use App\Models\User;
use App\Models\Workspace;
use App\Models\WorkspaceMembership;
use App\Support\Workspaces\WorkspaceContext;
it('returns 404 when the active workspace is outside the users membership scope', function (): void {
$user = User::factory()->create();
$workspace = Workspace::factory()->create(['name' => 'Hidden Workspace']);
WorkspaceMembership::factory()->create([
'workspace_id' => (int) Workspace::factory()->create()->getKey(),
'user_id' => (int) $user->getKey(),
'role' => 'owner',
]);
$this->actingAs($user)
->withSession([WorkspaceContext::SESSION_KEY => (int) $workspace->getKey()])
->get('/admin')
->assertNotFound();
});