ahmido
ce0615a9c1
## Summary - move the Laravel application into `apps/platform` and keep the repository root for orchestration, docs, and tooling - update the local command model, Sail/Docker wiring, runtime paths, and ignore rules around the new platform location - add relocation quickstart/contracts plus focused smoke coverage for bootstrap, command model, routes, and runtime behavior ## Validation - `cd apps/platform && ./vendor/bin/sail artisan test --compact tests/Feature/PlatformRelocation` - integrated browser smoke validated `/up`, `/`, `/admin`, `/admin/choose-workspace`, and tenant route semantics for `200`, `403`, and `404` ## Remaining Rollout Checks - validate Dokploy build context and working-directory assumptions against the new `apps/platform` layout - confirm web, queue, and scheduler processes all start from the expected working directory in staging/production - verify no legacy volume mounts or asset-publish paths still point at the old root-level `public/` or `storage/` locations Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de> Reviewed-on: #213
64 lines
2.3 KiB
PHP
64 lines
2.3 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
use App\Filament\Resources\BaselineProfileResource\Pages\CreateBaselineProfile;
|
|
use App\Models\BaselineProfile;
|
|
use Filament\Forms\Components\Select;
|
|
use Livewire\Livewire;
|
|
|
|
it('shows only baseline-supported foundation types in the baseline profile scope picker', function (): void {
|
|
[$user] = createUserWithTenant(role: 'owner');
|
|
|
|
Livewire::actingAs($user)
|
|
->test(CreateBaselineProfile::class)
|
|
->assertOk()
|
|
->assertFormFieldExists('scope_jsonb.foundation_types', function (Select $field): bool {
|
|
$options = $field->getOptions();
|
|
|
|
return $field->isMultiple()
|
|
&& ($options['assignmentFilter'] ?? null) === 'Assignment Filter'
|
|
&& ($options['intuneRoleDefinition'] ?? null) === 'Intune RBAC Role Definition'
|
|
&& ! array_key_exists('intuneRoleAssignment', $options);
|
|
});
|
|
});
|
|
|
|
it('persists baseline-supported foundation types on baseline profile create', function (): void {
|
|
[$user, $tenant] = createUserWithTenant(role: 'owner');
|
|
|
|
Livewire::actingAs($user)
|
|
->test(CreateBaselineProfile::class)
|
|
->fillForm([
|
|
'name' => 'RBAC baseline',
|
|
'scope_jsonb.policy_types' => [],
|
|
'scope_jsonb.foundation_types' => ['intuneRoleDefinition'],
|
|
])
|
|
->call('create')
|
|
->assertHasNoFormErrors()
|
|
->assertNotified();
|
|
|
|
$profile = BaselineProfile::query()
|
|
->where('workspace_id', (int) $tenant->workspace_id)
|
|
->where('name', 'RBAC baseline')
|
|
->sole();
|
|
|
|
expect(data_get($profile->scope_jsonb, 'foundation_types'))
|
|
->toBe(['intuneRoleDefinition']);
|
|
});
|
|
|
|
it('rejects unsupported foundation types when baseline profile scope is submitted', function (): void {
|
|
[$user] = createUserWithTenant(role: 'owner');
|
|
|
|
Livewire::actingAs($user)
|
|
->test(CreateBaselineProfile::class)
|
|
->fillForm([
|
|
'name' => 'Invalid RBAC baseline',
|
|
'scope_jsonb.policy_types' => [],
|
|
'scope_jsonb.foundation_types' => ['intuneRoleAssignment'],
|
|
])
|
|
->call('create')
|
|
->assertHasFormErrors(['scope_jsonb.foundation_types.0' => ['in']]);
|
|
|
|
expect(BaselineProfile::query()->where('name', 'Invalid RBAC baseline')->exists())->toBeFalse();
|
|
});
|