ahmido
bda1d90fc4
Implements spec 094 (assignment fetch/restore observability hardening): - Adds OperationRun tracking for assignment fetch (during backup) and assignment restore (during restore execution) - Normalizes failure codes/reason_code and sanitizes failure messages - Ensures exactly one audit log entry per assignment restore execution - Enforces correct guard/membership vs capability semantics on affected admin surfaces - Switches assignment Graph services to depend on GraphClientInterface Also includes Postgres-only FK defense-in-depth check and a discoverable `composer test:pgsql` runner (scoped to the FK constraint test). Tests: - `vendor/bin/sail artisan test --compact` (passed) - `vendor/bin/sail composer test:pgsql` (passed) Co-authored-by: Ahmed Darrazi <ahmed.darrazi@live.de> Reviewed-on: #113
22 lines
574 B
PHP
22 lines
574 B
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
use App\Models\PlatformUser;
|
|
use App\Models\Tenant;
|
|
|
|
it('returns 404 for platform-guard sessions on admin workspace-scoped routes', function (): void {
|
|
$tenant = Tenant::factory()->create();
|
|
$workspace = $tenant->workspace;
|
|
|
|
expect($workspace)->not->toBeNull();
|
|
|
|
$platformUser = PlatformUser::factory()->create();
|
|
|
|
$workspaceRouteKey = (string) ($workspace->slug ?? $workspace->getKey());
|
|
|
|
$this->actingAs($platformUser, 'platform')
|
|
->get("/admin/w/{$workspaceRouteKey}/ping")
|
|
->assertNotFound();
|
|
});
|