fix: allow project admins to delete projects (KAN-64)

2026-09-30 11:20:09 +02:00
parent ce36060ba1
commit 78e321f665
5 changed files with 91 additions and 7 deletions
@@ -291,7 +291,14 @@ class ProjectApiTest extends TestCase
            ->assertOk()
            ->assertJsonPath('data.key', 'CORE');

-        $this->syncGlobalPermissions($admin, ['admin']);
+        $this->withApplicationKey($user)
+            ->deleteJson(route('api.projects.destroy', $project), [
+                'confirmation_key' => 'CORE',
+            ])
+            ->assertForbidden();
+
+        $this->syncProjectPermissions($project, $admin, ['admin']);
+        $this->assertTrue($admin->can('admin-project', $project));

        $this->withApplicationKey($admin)
            ->deleteJson(route('api.projects.destroy', $project), [