admin()->create(); $member = User::factory()->create([ 'name' => 'Regular User', 'email' => 'member@example.com', ]); $team = Team::factory()->create([ 'name' => 'Platform Team', ]); $team->users()->attach($member); $this->actingAs($admin) ->get(route('teams.index')) ->assertOk() ->assertInertia(fn (Assert $page) => $page ->component('teams/Index') ->where('canCreateTeams', true) ->where('teams.0.name', 'Platform Team') ->where('teams.0.user_ids.0', $member->id) ->where('teams.0.users.0.email', 'member@example.com'), ); } /** * Ensure admins can create teams. */ public function test_admins_can_create_teams(): void { $admin = User::factory()->admin()->create(); $this->actingAs($admin) ->post(route('teams.store'), [ 'name' => 'Delivery Team', ]) ->assertRedirect(route('teams.index')) ->assertSessionHas('status', 'Delivery Team was created.'); $this->assertDatabaseHas('teams', [ 'name' => 'Delivery Team', ]); } /** * Ensure admins can update team memberships. */ public function test_admins_can_update_team_memberships(): void { $admin = User::factory()->admin()->create(); $firstMember = User::factory()->create(); $secondMember = User::factory()->create(); $team = Team::factory()->create([ 'name' => 'Platform Team', ]); $this->actingAs($admin) ->patch(route('teams.members.update', $team), [ 'user_ids' => [$firstMember->id, $secondMember->id], ]) ->assertRedirect(route('teams.index')) ->assertSessionHas('status', 'Platform Team members were updated.'); $this->assertDatabaseHas('team_user', [ 'team_id' => $team->id, 'user_id' => $firstMember->id, ]); $this->assertDatabaseHas('team_user', [ 'team_id' => $team->id, 'user_id' => $secondMember->id, ]); } /** * Ensure admins can view the teams management page. */ public function test_non_admins_with_team_create_permission_can_view_the_teams_management_page(): void { $createTeamUser = User::factory()->create(); $member = User::factory()->create([ 'name' => 'Regular User', 'email' => 'member@example.com', ]); $team = Team::factory()->create([ 'name' => 'Platform Team', ]); $team->users()->attach($member); $this->syncGlobalPermissions($createTeamUser, ['team:create']); $this->actingAs($createTeamUser) ->get(route('teams.index')) ->assertOk() ->assertInertia(fn (Assert $page) => $page ->component('teams/Index') ->where('canCreateTeams', true) ); } /** * Ensure admins can create teams. */ public function test_non_admins_with_team_create_permission_can_create_teams(): void { $createTeamUser = User::factory()->create(); $this->syncGlobalPermissions($createTeamUser, ['team:create']); $this->actingAs($createTeamUser) ->post(route('teams.store'), [ 'name' => 'Delivery Team', ]) ->assertRedirect(route('teams.index')) ->assertSessionHas('status', 'Delivery Team was created.'); $this->assertDatabaseHas('teams', [ 'name' => 'Delivery Team', ]); } /** * Ensure users without team management access cannot view the teams page. */ public function test_non_admins_cannot_view_the_teams_management_page(): void { $user = User::factory()->create(); $this->actingAs($user) ->get(route('teams.index')) ->assertForbidden(); } /** * Ensure non-admin users cannot create teams. */ public function test_non_admins_cannot_create_teams(): void { $user = User::factory()->create(); $this->actingAs($user) ->post(route('teams.store'), [ 'name' => 'Platform Team', ]) ->assertForbidden(); } /** * Ensure non-admin users cannot update team memberships. */ public function test_non_admins_cannot_update_team_memberships(): void { $user = User::factory()->create(); $team = Team::factory()->create(); $this->actingAs($user) ->patch(route('teams.members.update', $team), [ 'user_ids' => [], ]) ->assertForbidden(); } /** * Ensure users with team manage access can view and update their assigned teams. */ public function test_team_managers_can_view_and_update_their_team(): void { $manager = User::factory()->create(); $member = User::factory()->create(); $team = Team::factory()->create([ 'name' => 'Platform Team', ]); $this->syncTeamPermissions($team, $manager, ['team:manage']); $this->actingAs($manager) ->get(route('teams.index')) ->assertOk() ->assertInertia(fn (Assert $page) => $page ->component('teams/Index') ->where('canCreateTeams', false) ->where('teams.0.name', 'Platform Team') ->where("teamPermissions.{$team->id}.{$manager->id}.0", 'team:manage'), ); $this->actingAs($manager) ->patch(route('teams.permissions.users.update', [$team, $member]), [ 'permissions' => ['team:invite'], ]) ->assertRedirect(route('teams.index')) ->assertSessionHas('status', "{$member->name} permissions on {$team->name} were updated."); $this->assertDatabaseHas('permission_assignments', [ 'assignee_id' => $member->id, 'assignee_type' => $member->getMorphClass(), 'permission' => 'team:invite', 'scope_id' => $team->id, 'scope_type' => $team->getMorphClass(), ]); } }