68 lines
2.3 KiB
PHP
68 lines
2.3 KiB
PHP
|
<?php
|
||
|
|
|
||
|
|
use App\Models\User;
|
||
|
|
use Modules\Booking\Enums\BookingStatus;
|
||
|
|
use Modules\Booking\Models\Booking;
|
||
|
|
use Modules\Catalog\Models\EvCompany;
|
||
|
|
use Spatie\Activitylog\Models\Activity;
|
||
|
|
use Spatie\Permission\Models\Permission;
|
||
|
|
use Spatie\Permission\Models\Role;
|
||
|
|
|
||
|
|
/**
|
||
|
|
* T6.2 — LogsActivity is attached to Booking status transitions and to
|
||
|
|
* catalog admin CRUD; the read-only AuditLogResource (Filament) is gated by
|
||
|
|
* view_audit_log.
|
||
|
|
*/
|
||
|
|
test('a booking status transition is recorded in the audit log', function () {
|
||
|
|
$booking = Booking::factory()->create(['status' => BookingStatus::PendingPayment]);
|
||
|
|
|
||
|
|
$booking->update(['status' => BookingStatus::Confirmed]);
|
||
|
|
|
||
|
|
$activity = Activity::where('subject_type', Booking::class)
|
||
|
|
->where('subject_id', $booking->id)
|
||
|
|
->where('log_name', 'booking')
|
||
|
|
->latest('id')
|
||
|
|
->first();
|
||
|
|
|
||
|
|
expect($activity)->not->toBeNull();
|
||
|
|
expect($activity->attribute_changes->get('attributes'))->toMatchArray(['status' => BookingStatus::Confirmed->value]);
|
||
|
|
});
|
||
|
|
|
||
|
|
test('a catalog CRUD write is recorded in the audit log', function () {
|
||
|
|
$company = EvCompany::factory()->create(['name' => 'Original Name']);
|
||
|
|
|
||
|
|
$company->update(['name' => 'Renamed Company']);
|
||
|
|
|
||
|
|
$activity = Activity::where('subject_type', EvCompany::class)
|
||
|
|
->where('subject_id', $company->id)
|
||
|
|
->where('log_name', 'catalog')
|
||
|
|
->latest('id')
|
||
|
|
->first();
|
||
|
|
|
||
|
|
expect($activity)->not->toBeNull();
|
||
|
|
expect($activity->attribute_changes->get('attributes')['name'])->toBe('Renamed Company');
|
||
|
|
});
|
||
|
|
|
||
|
|
test('a user without view_audit_log cannot list the audit log via Filament', function () {
|
||
|
|
Permission::findOrCreate('view_audit_log', 'web');
|
||
|
|
$role = Role::findOrCreate('support', 'web');
|
||
|
|
$user = User::factory()->create();
|
||
|
|
$user->assignRole($role);
|
||
|
|
|
||
|
|
$this->actingAs($user)
|
||
|
|
->get('/admin/audit-logs')
|
||
|
|
->assertForbidden();
|
||
|
|
});
|
||
|
|
|
||
|
|
test('a user with view_audit_log can list the audit log via Filament', function () {
|
||
|
|
Permission::findOrCreate('view_audit_log', 'web');
|
||
|
|
$role = Role::findOrCreate('support', 'web');
|
||
|
|
$role->givePermissionTo('view_audit_log');
|
||
|
|
$user = User::factory()->create();
|
||
|
|
$user->assignRole($role);
|
||
|
|
|
||
|
|
$this->actingAs($user)
|
||
|
|
->get('/admin/audit-logs')
|
||
|
|
->assertSuccessful();
|
||
|
|
});
|