diff --git a/app/Http/Controllers/Assets/AssetsController.php b/app/Http/Controllers/Assets/AssetsController.php index 47ae6892aa..a20a4a80d2 100755 --- a/app/Http/Controllers/Assets/AssetsController.php +++ b/app/Http/Controllers/Assets/AssetsController.php @@ -279,7 +279,7 @@ class AssetsController extends Controller * @param int $assetId * @since [v1.0] */ - public function destroy(Asset $asset, $request): RedirectResponse + public function destroy(Asset $asset): RedirectResponse { $this->authorize('delete', $asset); try { diff --git a/tests/Feature/Assets/Ui/DeleteAssetTest.php b/tests/Feature/Assets/Ui/DeleteAssetTest.php new file mode 100644 index 0000000000..915247109e --- /dev/null +++ b/tests/Feature/Assets/Ui/DeleteAssetTest.php @@ -0,0 +1,31 @@ +deleteAssets()->create(); + + $asset = Asset::factory()->create(); + $this->actingAs($user) + ->delete(route('hardware.destroy', $asset)) + ->assertRedirect(route('hardware.index')); + } + + public function test_asset_cannot_be_deleted_without_permissions() + { + $user = User::factory()->create(); + + $asset = Asset::factory()->create(); + $this->actingAs($user) + ->delete(route('hardware.destroy', $asset)) + ->assertForbidden(); + } + +} \ No newline at end of file