ahmido
38523814c2
## Summary - restore broad full-suite green-signal coverage across platform governance, operations, onboarding, dashboard/productization, and customer review flows - align related platform tests and supporting behavior with the current expected state for this restoration pass - update the spec-candidates queue as part of the same suite-restoration sweep ## Validation - `cd apps/platform && ./vendor/bin/sail artisan test --compact tests/Browser/Dashboard/TenantDashboardProductizationSmokeTest.php tests/Browser/Reviews/CustomerReviewWorkspaceSmokeTest.php tests/Browser/Spec194GovernanceFrictionSmokeTest.php tests/Browser/Spec265DecisionRegisterSmokeTest.php` Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de> Reviewed-on: #351
47 lines
1.6 KiB
PHP
47 lines
1.6 KiB
PHP
<?php
|
|
|
|
use App\Models\ManagedEnvironmentMembership;
|
|
use App\Models\WorkspaceMembership;
|
|
use App\Services\Auth\TenantMembershipManager;
|
|
use Illuminate\Foundation\Testing\RefreshDatabase;
|
|
|
|
uses(RefreshDatabase::class);
|
|
|
|
it('rejects role changes on managed-environment access scopes', function () {
|
|
[$actor, $tenant] = createUserWithTenant(role: 'owner');
|
|
|
|
$membership = ManagedEnvironmentMembership::query()
|
|
->where('managed_environment_id', $tenant->getKey())
|
|
->where('user_id', $actor->getKey())
|
|
->firstOrFail();
|
|
|
|
$manager = app(TenantMembershipManager::class);
|
|
|
|
$callback = fn () => $manager->changeRole($tenant, $actor, $membership, 'readonly');
|
|
|
|
expect($callback)->toThrow(
|
|
DomainException::class,
|
|
'Managed-environment access scopes do not manage roles. Change the workspace role instead.',
|
|
);
|
|
});
|
|
|
|
it('removes an environment access scope without removing workspace owner authority', function () {
|
|
[$actor, $tenant] = createUserWithTenant(role: 'owner');
|
|
|
|
$membership = ManagedEnvironmentMembership::query()
|
|
->where('managed_environment_id', $tenant->getKey())
|
|
->where('user_id', $actor->getKey())
|
|
->firstOrFail();
|
|
|
|
$manager = app(TenantMembershipManager::class);
|
|
|
|
$manager->removeMember($tenant, $actor, $membership);
|
|
|
|
expect(ManagedEnvironmentMembership::query()->whereKey($membership->getKey())->exists())->toBeFalse()
|
|
->and(WorkspaceMembership::query()
|
|
->where('workspace_id', (int) $tenant->workspace_id)
|
|
->where('user_id', (int) $actor->getKey())
|
|
->where('role', 'owner')
|
|
->exists())->toBeTrue();
|
|
});
|