permissions refactoring

2026-04-12 19:21:04 +02:00
parent 51014395a2
commit 9dcdfb981a
64 changed files with 1842 additions and 656 deletions
@@ -0,0 +1,66 @@
+<?php
+
+namespace Tests\Feature\Models;
+
+use App\Models\PermissionAssignment;
+use App\Models\Project;
+use App\Models\Team;
+use App\Models\User;
+use Illuminate\Foundation\Testing\RefreshDatabase;
+use Tests\TestCase;
+
+class PermissionAssignmentTest extends TestCase
+{
+    use RefreshDatabase;
+
+    /**
+     * Ensure the permission assignment factory creates a user-to-project assignment.
+     */
+    public function test_permission_assignment_factory_creates_a_project_assignment(): void
+    {
+        $assignment = PermissionAssignment::factory()->create();
+
+        $this->assertInstanceOf(User::class, $assignment->assignee);
+        $this->assertInstanceOf(Project::class, $assignment->scope);
+        $this->assertSame('project:read', $assignment->permission->value);
+    }
+
+    /**
+     * Ensure deleting users, teams, and projects removes related permission assignments.
+     */
+    public function test_related_permission_assignments_are_removed_when_parent_models_are_deleted(): void
+    {
+        $user = User::factory()->create();
+        $team = Team::factory()->create();
+        $project = Project::factory()->create();
+
+        $userAssignment = PermissionAssignment::factory()
+            ->forAssignee($user)
+            ->globalAdmin()
+            ->create();
+        $teamAssignment = PermissionAssignment::factory()
+            ->forAssignee($team)
+            ->forScope($project)
+            ->projectWrite()
+            ->create();
+        $teamScopeAssignment = PermissionAssignment::factory()
+            ->forAssignee($user)
+            ->forScope($team)
+            ->teamManage()
+            ->create();
+
+        $user->delete();
+        $project->delete();
+        $team->delete();
+
+        $this->assertDatabaseMissing('permission_assignments', [
+            'id' => $userAssignment->id,
+        ]);
+        $this->assertDatabaseMissing('permission_assignments', [
+            'id' => $teamAssignment->id,
+        ]);
+        $this->assertDatabaseMissing('permission_assignments', [
+            'id' => $teamScopeAssignment->id,
+        ]);
+    }
+}