Implement project memberships teams and permission model

2026-03-25 01:10:08 +01:00
parent 7d4b0733b3
commit 840d01f6fc
27 changed files with 1722 additions and 7 deletions
@@ -0,0 +1,130 @@
+<?php
+
+namespace Tests\Feature\Teams;
+
+use App\Models\Team;
+use App\Models\User;
+use Illuminate\Foundation\Testing\RefreshDatabase;
+use Inertia\Testing\AssertableInertia as Assert;
+use Tests\TestCase;
+
+class TeamControllerTest extends TestCase
+{
+    use RefreshDatabase;
+
+    /**
+     * Ensure admins can view the teams management page.
+     */
+    public function test_admins_can_view_the_teams_management_page(): void
+    {
+        $admin = User::factory()->admin()->create();
+        $member = User::factory()->create([
+            'name' => 'Regular User',
+            'email' => 'member@example.com',
+        ]);
+        $team = Team::factory()->create([
+            'name' => 'Platform Team',
+        ]);
+        $team->users()->attach($member);
+
+        $this->actingAs($admin)
+            ->get(route('admin.teams.index'))
+            ->assertOk()
+            ->assertInertia(fn (Assert $page) => $page
+                ->component('teams/Index')
+                ->where('teams.0.name', 'Platform Team')
+                ->where('teams.0.user_ids.0', $member->id)
+                ->where('teams.0.users.0.email', 'member@example.com'),
+            );
+    }
+
+    /**
+     * Ensure admins can create teams.
+     */
+    public function test_admins_can_create_teams(): void
+    {
+        $admin = User::factory()->admin()->create();
+
+        $this->actingAs($admin)
+            ->post(route('admin.teams.store'), [
+                'name' => 'Delivery Team',
+            ])
+            ->assertRedirect(route('admin.teams.index'))
+            ->assertSessionHas('status', 'Delivery Team was created.');
+
+        $this->assertDatabaseHas('teams', [
+            'name' => 'Delivery Team',
+        ]);
+    }
+
+    /**
+     * Ensure admins can update team memberships.
+     */
+    public function test_admins_can_update_team_memberships(): void
+    {
+        $admin = User::factory()->admin()->create();
+        $firstMember = User::factory()->create();
+        $secondMember = User::factory()->create();
+        $team = Team::factory()->create([
+            'name' => 'Platform Team',
+        ]);
+
+        $this->actingAs($admin)
+            ->patch(route('admin.teams.members.update', $team), [
+                'user_ids' => [$firstMember->id, $secondMember->id],
+            ])
+            ->assertRedirect(route('admin.teams.index'))
+            ->assertSessionHas('status', 'Platform Team members were updated.');
+
+        $this->assertDatabaseHas('team_user', [
+            'team_id' => $team->id,
+            'user_id' => $firstMember->id,
+        ]);
+
+        $this->assertDatabaseHas('team_user', [
+            'team_id' => $team->id,
+            'user_id' => $secondMember->id,
+        ]);
+    }
+
+    /**
+     * Ensure non-admin users cannot view the teams management page.
+     */
+    public function test_non_admins_cannot_view_the_teams_management_page(): void
+    {
+        $user = User::factory()->create();
+
+        $this->actingAs($user)
+            ->get(route('admin.teams.index'))
+            ->assertForbidden();
+    }
+
+    /**
+     * Ensure non-admin users cannot create teams.
+     */
+    public function test_non_admins_cannot_create_teams(): void
+    {
+        $user = User::factory()->create();
+
+        $this->actingAs($user)
+            ->post(route('admin.teams.store'), [
+                'name' => 'Platform Team',
+            ])
+            ->assertForbidden();
+    }
+
+    /**
+     * Ensure non-admin users cannot update team memberships.
+     */
+    public function test_non_admins_cannot_update_team_memberships(): void
+    {
+        $user = User::factory()->create();
+        $team = Team::factory()->create();
+
+        $this->actingAs($user)
+            ->patch(route('admin.teams.members.update', $team), [
+                'user_ids' => [],
+            ])
+            ->assertForbidden();
+    }
+}