DRCIT/snipe-it
1
0
Fork 0
mirror of https://github.com/snipe/snipe-it.git synced 2025-03-05 20:52:15 -08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

Add assertion to ensure user cannot perform bulk actions on self

Browse source
This commit is contained in:
Marcus Moore 2024-08-05 16:17:24 -07:00
parent fc405d9d73
commit 5cd9dd4a67
No known key found for this signature in database
1 changed files with 17 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

17
tests/Feature/Users/Ui/BulkDeleteUsersTest.php
View file

@ -48,6 +48,23 @@ class BulkDeleteUsersTest extends TestCase
])->assertSessionHas('error')->assertRedirect(); ])->assertSessionHas('error')->assertRedirect();
} }
public function testCannotPerformBulkActionsOnSelf()
{
$actor = User::factory()->editUsers()->create();
$this->actingAs($actor)
->post(route('users/bulksave'), [
'ids' => [
$actor->id,
],
'delete_user' => '1',
])
->assertRedirect(route('users.index'))
->assertSessionHas('success', trans('general.bulk_checkin_delete_success'));
$this->assertNotSoftDeleted($actor);
}
public function testAccessoriesCanBeBulkCheckedIn() public function testAccessoriesCanBeBulkCheckedIn()
{ {
[$accessoryA, $accessoryB] = Accessory::factory()->count(2)->create(); [$accessoryA, $accessoryB] = Accessory::factory()->count(2)->create();