Files
InvoiceShelf/tests/Feature/Admin/CompanyTest.php
Darko Gjorgjijoski 00d5abae5f Eliminate Company\CompaniesController, introduce owner role
Redistribute methods:
- show() -> BootstrapController::currentCompany()
- store(), destroy(), userCompanies() -> Admin\CompaniesController
- transferOwnership() -> CompanySettingsController

Security fix: introduce 'owner' role for company-level admin, distinct
from 'super admin' which is now global platform admin only.
- CompanyService::setupRoles() creates 'owner' role per company
- Company creation assigns scoped 'owner' role instead of global 'super admin'
- Seeders updated to assign 'owner'

Migration renames all existing company-scoped 'super admin' roles to
'owner' and ensures every company owner has the role assigned.
2026-04-03 22:33:56 +02:00

73 lines
1.6 KiB
PHP

<?php
use App\Http\Controllers\Admin\CompaniesController;
use App\Http\Requests\CompaniesRequest;
use App\Models\Company;
use App\Models\User;
use Illuminate\Support\Facades\Artisan;
use Laravel\Sanctum\Sanctum;
use function Pest\Laravel\getJson;
use function Pest\Laravel\postJson;
beforeEach(function () {
Artisan::call('db:seed', ['--class' => 'DatabaseSeeder', '--force' => true]);
Artisan::call('db:seed', ['--class' => 'DemoSeeder', '--force' => true]);
$user = User::find(1);
$this->withHeaders([
'company' => $user->companies()->first()->id,
]);
Sanctum::actingAs(
$user,
['*']
);
});
test('store user using a form request', function () {
$this->assertActionUsesFormRequest(
CompaniesController::class,
'store',
CompaniesRequest::class
);
});
test('store company', function () {
$company = Company::factory()->raw([
'currency' => 12,
'address' => [
'country_id' => 12,
],
]);
postJson('/api/v1/companies', $company)
->assertStatus(201);
$company = collect($company)
->only([
'name',
])
->toArray();
$this->assertDatabaseHas('companies', $company);
});
test('delete company', function () {
postJson('/api/v1/companies/delete', ['xyz'])
->assertStatus(422);
});
test('transfer ownership', function () {
$company = Company::factory()->create();
$user = User::factory()->create();
postJson('/api/v1/transfer/ownership/'.$user->id)
->assertOk();
});
test('get companies', function () {
getJson('/api/v1/companies')
->assertOk();
});