98 lines
4.9 KiB
PHP
98 lines
4.9 KiB
PHP
<?php
|
|
|
|
it('exposes chauffeur management endpoints on the subusers route', function (): void {
|
|
$routeFile = app_path('routes/subusersRoute.php');
|
|
expect(is_file($routeFile))->toBeTrue();
|
|
|
|
$code = (string)file_get_contents($routeFile);
|
|
$normalized = preg_replace('/\s+/', ' ', $code);
|
|
|
|
expect($normalized)->toContain("\$this->post('/subusers/invite', function () {");
|
|
expect($normalized)->toContain("\$this->post('/subusers/invite/resend', function () {");
|
|
expect($normalized)->toContain("\$this->get('/superuser/subusers', function () {");
|
|
expect($normalized)->toContain("\$this->post('/superuser/subusers/invite', function () {");
|
|
expect($normalized)->toContain("\$this->post('/superuser/subusers/invite/resend', function () {");
|
|
expect($normalized)->toContain("\$this->put('/subusers', function () {");
|
|
expect($normalized)->toContain("\$this->put('/subusers/me', function () {");
|
|
});
|
|
|
|
it('includes grant management fields in the subusers payload builder', function (): void {
|
|
$routeFile = app_path('routes/subusersRoute.php');
|
|
expect(is_file($routeFile))->toBeTrue();
|
|
|
|
$code = (string)file_get_contents($routeFile);
|
|
$normalized = preg_replace('/\s+/', ' ', $code);
|
|
|
|
expect($normalized)->toContain("'grant_id' =>");
|
|
expect($normalized)->toContain("'grant_enabled' =>");
|
|
expect($normalized)->toContain("'grant_note' =>");
|
|
expect($normalized)->toContain("'grant_permissions' =>");
|
|
expect($normalized)->toContain("'setup_required' =>");
|
|
expect($normalized)->toContain("'invite_accepted' =>");
|
|
expect($normalized)->toContain("'can_resend_invite' =>");
|
|
expect($normalized)->toContain("'profile_editable_by_manager' => false");
|
|
expect($normalized)->toContain("'access_state' =>");
|
|
});
|
|
|
|
it('resolves subuser customer names without external lookups during list requests', function (): void {
|
|
$routeFile = app_path('routes/subusersRoute.php');
|
|
expect(is_file($routeFile))->toBeTrue();
|
|
|
|
$code = (string)file_get_contents($routeFile);
|
|
$normalized = preg_replace('/\s+/', ' ', $code);
|
|
|
|
expect($normalized)->toContain('getCustomerNames($customerNumbers, false)');
|
|
expect($normalized)->toContain('$customerName = $this->resolveCustomerName($customerNumber);');
|
|
expect($normalized)->toContain('buildSubuserManagementPayload($subuser, $customerNumber, $customerName)');
|
|
expect($normalized)->not->toContain("'customer_name' => (new users_o())->getCustomerName(\$customerNumber)");
|
|
expect($normalized)->not->toContain("'name' => (new users_o())->getCustomerName((int)\$grant['billing_customer_number'])");
|
|
});
|
|
|
|
it('links grant disable operations to SUBUSERS_DELETE for own-customer managers', function (): void {
|
|
$routeFile = app_path('routes/subusersRoute.php');
|
|
expect(is_file($routeFile))->toBeTrue();
|
|
|
|
$code = (string)file_get_contents($routeFile);
|
|
$normalized = preg_replace('/\s+/', ' ', $code);
|
|
|
|
expect($normalized)->toContain("definePermission('delete_own_subusers', subusers_permission_node_key::SUBUSERS_DELETE)");
|
|
expect($normalized)->toContain("requireManagedCustomerScope(subusers_permission_node_key::SUBUSERS_DELETE, \$targetCustomer);");
|
|
});
|
|
|
|
it('prevents own-customer managers from editing driver-owned account profiles', function (): void {
|
|
$routeFile = app_path('routes/subusersRoute.php');
|
|
expect(is_file($routeFile))->toBeTrue();
|
|
|
|
$code = (string)file_get_contents($routeFile);
|
|
$normalized = preg_replace('/\s+/', ' ', $code);
|
|
|
|
expect($normalized)->toContain("Customers can only manage subuser grants. Drivers own their account profile.");
|
|
});
|
|
|
|
it('scopes superuser invite resend to a selected customer grant', function (): void {
|
|
$routeFile = app_path('routes/subusersRoute.php');
|
|
expect(is_file($routeFile))->toBeTrue();
|
|
|
|
$code = (string)file_get_contents($routeFile);
|
|
$normalized = preg_replace('/\s+/', ' ', $code);
|
|
|
|
expect($normalized)->toContain("\$this->post('/superuser/subusers/invite/resend', function () {");
|
|
expect($normalized)->toContain("self::requireParameters(['id', 'customer_number']);");
|
|
expect($normalized)->toContain("\$customerNumber = (int)self::getParameter('customer_number');");
|
|
expect($normalized)->toContain("getGrantForSubuserAndCustomer(\$subuserId, \$customerNumber, true)");
|
|
expect($normalized)->toContain("Subuser grant not found for selected customer");
|
|
expect($normalized)->toContain("'subuser' => \$this->buildSubuserManagementPayload(\$subuser, \$customerNumber)");
|
|
expect($normalized)->toContain("'grant' => \$grant->asArray()");
|
|
});
|
|
|
|
it('only allows invite resend while setup is still pending', function (): void {
|
|
$routeFile = app_path('routes/subusersRoute.php');
|
|
expect(is_file($routeFile))->toBeTrue();
|
|
|
|
$code = (string)file_get_contents($routeFile);
|
|
$normalized = preg_replace('/\s+/', ' ', $code);
|
|
|
|
expect($normalized)->toContain("Driver account already accepted the invitation.");
|
|
expect($normalized)->toContain("if (!\$subuser->requiresSetup()) {");
|
|
});
|