Refactor architecture test contracts
This commit is contained in:
98
tests/Architecture/AuthzAdminUsersContractTest.php
Normal file
98
tests/Architecture/AuthzAdminUsersContractTest.php
Normal file
@@ -0,0 +1,98 @@
|
||||
<?php
|
||||
|
||||
namespace MintyPHP\Tests\Architecture;
|
||||
|
||||
use PHPUnit\Framework\TestCase;
|
||||
|
||||
class AuthzAdminUsersContractTest extends TestCase
|
||||
{
|
||||
use ProjectFileAssertionSupport;
|
||||
|
||||
public function testUsersDataActionRequiresUsersViewPermission(): void
|
||||
{
|
||||
$content = $this->readProjectFile('pages/admin/users/data().php');
|
||||
$this->assertStringContainsString('Guard::requireLogin();', $content);
|
||||
$this->assertStringContainsString('Guard::requireAbilityOrForbidden(UserAuthorizationPolicy::ABILITY_ADMIN_USERS_VIEW);', $content);
|
||||
$this->assertStringContainsString('UserAuthorizationPolicy::ABILITY_ADMIN_USERS_VIEW', $content);
|
||||
}
|
||||
|
||||
public function testUsersExportActionRequiresUsersViewPermission(): void
|
||||
{
|
||||
$content = $this->readProjectFile('pages/admin/users/export().php');
|
||||
$this->assertStringContainsString('Guard::requireLogin();', $content);
|
||||
$this->assertStringContainsString('AuthorizationService::class', $content);
|
||||
$this->assertStringContainsString('UserAuthorizationPolicy::ABILITY_ADMIN_USERS_VIEW', $content);
|
||||
}
|
||||
|
||||
public function testUsersActivateActionRequiresUsersUpdatePermission(): void
|
||||
{
|
||||
$content = $this->readProjectFile('pages/admin/users/activate($id).php');
|
||||
$this->assertStringContainsString('AuthorizationService::class', $content);
|
||||
$this->assertStringContainsString('UserAuthorizationPolicy::ABILITY_ADMIN_USERS_ACTIVATE', $content);
|
||||
}
|
||||
|
||||
public function testUsersDeactivateActionRequiresUsersUpdatePermission(): void
|
||||
{
|
||||
$content = $this->readProjectFile('pages/admin/users/deactivate($id).php');
|
||||
$this->assertStringContainsString('AuthorizationService::class', $content);
|
||||
$this->assertStringContainsString('UserAuthorizationPolicy::ABILITY_ADMIN_USERS_DEACTIVATE', $content);
|
||||
}
|
||||
|
||||
public function testUsersBulkActionPermissionMappingIsConsistent(): void
|
||||
{
|
||||
$content = $this->readProjectFile('pages/admin/users/bulk($action).php');
|
||||
$this->assertStringContainsString('AuthorizationService::class', $content);
|
||||
$this->assertStringContainsString('UserAuthorizationPolicy::ABILITY_ADMIN_USERS_BULK', $content);
|
||||
$this->assertStringContainsString("'bulk_action' => \$action", $content);
|
||||
}
|
||||
|
||||
public function testAdditionalAdminUserActionsUseCentralPolicy(): void
|
||||
{
|
||||
$indexContent = $this->readProjectFile('pages/admin/users/index().php');
|
||||
$this->assertStringContainsString('UserAuthorizationPolicy::ABILITY_ADMIN_USERS_VIEW', $indexContent);
|
||||
|
||||
$createContent = $this->readProjectFile('pages/admin/users/create().php');
|
||||
$this->assertStringContainsString('UserAuthorizationPolicy::ABILITY_ADMIN_USERS_CREATE', $createContent);
|
||||
|
||||
$deleteContent = $this->readProjectFile('pages/admin/users/delete($id).php');
|
||||
$this->assertStringContainsString('UserAuthorizationPolicy::ABILITY_ADMIN_USERS_DELETE', $deleteContent);
|
||||
|
||||
$accessPdfContent = $this->readProjectFile('pages/admin/users/access-pdf($id).php');
|
||||
$this->assertStringContainsString('UserAuthorizationPolicy::ABILITY_ADMIN_USERS_ACCESS_PDF', $accessPdfContent);
|
||||
|
||||
$accessPdfBulkContent = $this->readProjectFile('pages/admin/users/access-pdf-bulk().php');
|
||||
$this->assertStringContainsString('UserAuthorizationPolicy::ABILITY_ADMIN_USERS_ACCESS_PDF_BULK', $accessPdfBulkContent);
|
||||
|
||||
$tokenCreateContent = $this->readProjectFile('pages/admin/users/api-token-create($id).php');
|
||||
$this->assertStringContainsString('UserAuthorizationPolicy::ABILITY_ADMIN_USERS_API_TOKENS_MANAGE', $tokenCreateContent);
|
||||
|
||||
$tokenRevokeContent = $this->readProjectFile('pages/admin/users/api-token-revoke($id).php');
|
||||
$this->assertStringContainsString('UserAuthorizationPolicy::ABILITY_ADMIN_USERS_API_TOKENS_MANAGE', $tokenRevokeContent);
|
||||
|
||||
$sendAccessContent = $this->readProjectFile('pages/admin/users/send-access($id).php');
|
||||
$this->assertStringContainsString('UserAuthorizationPolicy::ABILITY_ADMIN_USERS_SEND_ACCESS', $sendAccessContent);
|
||||
|
||||
$forgetTokensContent = $this->readProjectFile('pages/admin/users/forget-tokens($id).php');
|
||||
$this->assertStringContainsString('UserAuthorizationPolicy::ABILITY_ADMIN_USERS_FORGET_TOKENS', $forgetTokensContent);
|
||||
}
|
||||
|
||||
public function testAdminUserEditUsesContextAndSubmitPolicies(): void
|
||||
{
|
||||
$content = $this->readProjectFile('pages/admin/users/edit($id).php');
|
||||
$this->assertStringContainsString('AuthorizationService::class', $content);
|
||||
$this->assertStringContainsString('UserAuthorizationPolicy::ABILITY_ADMIN_USERS_EDIT_CONTEXT', $content);
|
||||
$this->assertStringContainsString('UserAuthorizationPolicy::ABILITY_ADMIN_USERS_EDIT_SUBMIT', $content);
|
||||
}
|
||||
|
||||
public function testAdminUserAvatarEndpointsUseCentralPolicies(): void
|
||||
{
|
||||
$uploadContent = $this->readProjectFile('pages/admin/users/avatar($id).php');
|
||||
$this->assertStringContainsString('UserAuthorizationPolicy::ABILITY_ADMIN_USERS_AVATAR_UPLOAD', $uploadContent);
|
||||
|
||||
$deleteContent = $this->readProjectFile('pages/admin/users/avatar-delete($id).php');
|
||||
$this->assertStringContainsString('UserAuthorizationPolicy::ABILITY_ADMIN_USERS_AVATAR_DELETE', $deleteContent);
|
||||
|
||||
$viewContent = $this->readProjectFile('pages/admin/users/avatar-file().php');
|
||||
$this->assertStringContainsString('UserAuthorizationPolicy::ABILITY_ADMIN_USERS_AVATAR_VIEW', $viewContent);
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user