Nyan Lin Paing
99 lines
3.3 KiB
PHP
99 lines
3.3 KiB
PHP
<?php
|
|
|
|
use App\Models\User;
|
|
use Modules\Booking\Enums\BookingStatus;
|
|
use Modules\Booking\Models\Booking;
|
|
use Modules\Catalog\Models\EvCompany;
|
|
use Spatie\Activitylog\Models\Activity;
|
|
use Spatie\Permission\Models\Permission;
|
|
use Spatie\Permission\Models\Role;
|
|
|
|
/**
|
|
* T6.2 — LogsActivity is attached to Booking status transitions and to
|
|
* catalog admin CRUD; the read-only AuditLogResource (Filament) is gated by
|
|
* view_audit_log.
|
|
*/
|
|
test('a booking status transition is recorded in the audit log', function () {
|
|
$booking = Booking::factory()->create(['status' => BookingStatus::PendingPayment]);
|
|
|
|
$booking->update(['status' => BookingStatus::Confirmed]);
|
|
|
|
$activity = Activity::where('subject_type', Booking::class)
|
|
->where('subject_id', $booking->id)
|
|
->where('log_name', 'booking')
|
|
->latest('id')
|
|
->first();
|
|
|
|
expect($activity)->not->toBeNull();
|
|
expect($activity->attribute_changes->get('attributes'))->toMatchArray(['status' => BookingStatus::Confirmed->value]);
|
|
});
|
|
|
|
test('assigning a driver is recorded in the audit log with who and when', function () {
|
|
$dispatcher = User::factory()->create();
|
|
$booking = Booking::factory()->create(['status' => BookingStatus::Confirmed]);
|
|
|
|
$this->actingAs($dispatcher);
|
|
|
|
$booking->update([
|
|
'driver_name' => 'U Aung',
|
|
'driver_phone' => '+959111222333',
|
|
'car_plate_number' => 'YGN-1234',
|
|
'car_model' => 'Tesla Model Y',
|
|
]);
|
|
|
|
$activity = Activity::where('subject_type', Booking::class)
|
|
->where('subject_id', $booking->id)
|
|
->where('log_name', 'booking')
|
|
->latest('id')
|
|
->first();
|
|
|
|
expect($activity)->not->toBeNull();
|
|
expect($activity->attribute_changes->get('attributes'))->toMatchArray([
|
|
'driver_name' => 'U Aung',
|
|
'driver_phone' => '+959111222333',
|
|
'car_plate_number' => 'YGN-1234',
|
|
'car_model' => 'Tesla Model Y',
|
|
]);
|
|
expect($activity->causer_type)->toBe(User::class);
|
|
expect($activity->causer_id)->toBe($dispatcher->id);
|
|
expect($activity->created_at)->not->toBeNull();
|
|
});
|
|
|
|
test('a catalog CRUD write is recorded in the audit log', function () {
|
|
$company = EvCompany::factory()->create(['name' => 'Original Name']);
|
|
|
|
$company->update(['name' => 'Renamed Company']);
|
|
|
|
$activity = Activity::where('subject_type', EvCompany::class)
|
|
->where('subject_id', $company->id)
|
|
->where('log_name', 'catalog')
|
|
->latest('id')
|
|
->first();
|
|
|
|
expect($activity)->not->toBeNull();
|
|
expect($activity->attribute_changes->get('attributes')['name'])->toBe('Renamed Company');
|
|
});
|
|
|
|
test('a user without view_audit_log cannot list the audit log via Filament', function () {
|
|
Permission::findOrCreate('view_audit_log', 'web');
|
|
$role = Role::findOrCreate('support', 'web');
|
|
$user = User::factory()->create();
|
|
$user->assignRole($role);
|
|
|
|
$this->actingAs($user)
|
|
->get('/admin/audit-logs')
|
|
->assertForbidden();
|
|
});
|
|
|
|
test('a user with view_audit_log can list the audit log via Filament', function () {
|
|
Permission::findOrCreate('view_audit_log', 'web');
|
|
$role = Role::findOrCreate('support', 'web');
|
|
$role->givePermissionTo('view_audit_log');
|
|
$user = User::factory()->create();
|
|
$user->assignRole($role);
|
|
|
|
$this->actingAs($user)
|
|
->get('/admin/audit-logs')
|
|
->assertSuccessful();
|
|
});
|