TenantAtlas/apps/platform/tests/Feature/Rbac/PolicyVersionMaintenanceAuthorizationTest.php
ahmido e64bae9cfc feat: cut over tenant core to managed environments (#335)
## Summary
- replace the legacy Tenant and TenantMembership core models with ManagedEnvironment and ManagedEnvironmentMembership
- propagate the managed environment naming and key changes across Filament resources, pages, controllers, jobs, models, and supporting runtime paths
- add feature 279 spec artifacts and focused managed-environment test coverage for model behavior, route binding, panel context, authorization, and legacy guardrails

## Validation
- `cd apps/platform && ./vendor/bin/sail artisan test --compact tests/Feature/ManagedEnvironment/LegacyTenantCoreGuardTest.php tests/Feature/ManagedEnvironment/ManagedEnvironmentAuthorizationTest.php tests/Feature/ManagedEnvironment/ManagedEnvironmentPanelContextTest.php tests/Feature/ManagedEnvironment/ManagedEnvironmentRouteBindingTest.php tests/Unit/ManagedEnvironment/ManagedEnvironmentContextResolverTest.php tests/Unit/ManagedEnvironment/ManagedEnvironmentModelTest.php`
- `cd apps/platform && ./vendor/bin/sail bin pint --dirty --format agent`

## Notes
- branch pushed from commit `1123b122`
- browser smoke test file was added but not run in this pass

Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de>
Reviewed-on: #335
2026-05-07 06:38:14 +00:00

61 lines
1.8 KiB
PHP

<?php
use App\Filament\Resources\PolicyVersionResource\Pages\ListPolicyVersions;
use App\Models\OperationRun;
use App\Models\Policy;
use App\Models\PolicyVersion;
use Filament\Facades\Filament;
use Illuminate\Foundation\Testing\RefreshDatabase;
use Livewire\Livewire;
uses(RefreshDatabase::class);
test('readonly users cannot archive policy versions', function () {
[$user, $tenant] = createUserWithTenant(role: 'readonly');
Filament::setTenant($tenant, true);
$policy = Policy::factory()->create(['managed_environment_id' => $tenant->id]);
$version = PolicyVersion::factory()->create([
'managed_environment_id' => $tenant->id,
'policy_id' => $policy->id,
'version_number' => 1,
]);
Livewire::actingAs($user)
->test(ListPolicyVersions::class)
->assertTableActionDisabled('archive', $version)
->callTableAction('archive', $version);
expect($version->refresh()->trashed())->toBeFalse();
});
test('readonly users cannot bulk prune policy versions', function () {
[$user, $tenant] = createUserWithTenant(role: 'readonly');
Filament::setTenant($tenant, true);
$policy = Policy::factory()->create(['managed_environment_id' => $tenant->id]);
$version = PolicyVersion::factory()->create([
'managed_environment_id' => $tenant->id,
'policy_id' => $policy->id,
'version_number' => 1,
'captured_at' => now()->subDays(120),
]);
Livewire::actingAs($user)
->test(ListPolicyVersions::class)
->callTableBulkAction('bulk_prune_versions', collect([$version]), data: [
'retention_days' => 90,
]);
expect(OperationRun::query()
->where('managed_environment_id', $tenant->id)
->where('type', 'policy_version.prune')
->exists())->toBeFalse();
expect($version->refresh()->trashed())->toBeFalse();
});