mirror of
https://github.com/snipe/snipe-it.git
synced 2024-12-25 21:54:14 -08:00
Added view permissions for the redirects
Signed-off-by: snipe <snipe@snipe.net>
This commit is contained in:
parent
a2346e4666
commit
c5cbe37007
|
@ -17,7 +17,7 @@ class DeleteUserTest extends TestCase
|
|||
$manager = User::factory()->create();
|
||||
User::factory()->count(1)->create(['manager_id' => $manager->id]);
|
||||
|
||||
$this->actingAs(User::factory()->deleteUsers()->create())->assertFalse($manager->isDeletable());
|
||||
$this->actingAs(User::factory()->deleteUsers()->viewUsers()->create())->assertFalse($manager->isDeletable());
|
||||
|
||||
$response = $this->actingAs(User::factory()->deleteUsers()->viewUsers()->create())
|
||||
->delete(route('users.destroy', $manager->id))
|
||||
|
@ -32,7 +32,7 @@ class DeleteUserTest extends TestCase
|
|||
$manager = User::factory()->create();
|
||||
Location::factory()->count(2)->create(['manager_id' => $manager->id]);
|
||||
|
||||
$this->actingAs(User::factory()->deleteUsers()->create())->assertFalse($manager->isDeletable());
|
||||
$this->actingAs(User::factory()->deleteUsers()->viewUsers()->create())->assertFalse($manager->isDeletable());
|
||||
|
||||
$response = $this->actingAs(User::factory()->deleteUsers()->viewUsers()->create())
|
||||
->delete(route('users.destroy', $manager->id))
|
||||
|
@ -47,7 +47,7 @@ class DeleteUserTest extends TestCase
|
|||
$user = User::factory()->create();
|
||||
Accessory::factory()->count(3)->checkedOutToUser($user)->create();
|
||||
|
||||
$this->actingAs(User::factory()->deleteUsers()->create())->assertFalse($user->isDeletable());
|
||||
$this->actingAs(User::factory()->deleteUsers()->viewUsers()->create())->assertFalse($user->isDeletable());
|
||||
|
||||
$response = $this->actingAs(User::factory()->deleteUsers()->viewUsers()->create())
|
||||
->delete(route('users.destroy', $user->id))
|
||||
|
@ -62,7 +62,7 @@ class DeleteUserTest extends TestCase
|
|||
$user = User::factory()->create();
|
||||
LicenseSeat::factory()->count(4)->create(['assigned_to' => $user->id]);
|
||||
|
||||
$this->actingAs(User::factory()->deleteUsers()->create())->assertFalse($user->isDeletable());
|
||||
$this->actingAs(User::factory()->deleteUsers()->viewUsers()->create())->assertFalse($user->isDeletable());
|
||||
|
||||
$response = $this->actingAs(User::factory()->deleteUsers()->viewUsers()->create())
|
||||
->delete(route('users.destroy', $user->id))
|
||||
|
@ -76,7 +76,7 @@ class DeleteUserTest extends TestCase
|
|||
public function testAllowUserDeletionIfNotManagingLocations()
|
||||
{
|
||||
$manager = User::factory()->create();
|
||||
$this->actingAs(User::factory()->deleteUsers()->create())->assertTrue($manager->isDeletable());
|
||||
$this->actingAs(User::factory()->deleteUsers()->viewUsers()->create())->assertTrue($manager->isDeletable());
|
||||
|
||||
$response = $this->actingAs(User::factory()->deleteUsers()->viewUsers()->create())
|
||||
->delete(route('users.destroy', $manager->id))
|
||||
|
@ -91,13 +91,13 @@ class DeleteUserTest extends TestCase
|
|||
{
|
||||
$manager = User::factory()->create();
|
||||
Location::factory()->create(['manager_id' => $manager->id]);
|
||||
$this->actingAs(User::factory()->editUsers()->create())->assertFalse($manager->isDeletable());
|
||||
$this->actingAs(User::factory()->editUsers()->viewUsers()->create())->assertFalse($manager->isDeletable());
|
||||
}
|
||||
|
||||
public function testUsersCannotDeleteThemselves()
|
||||
{
|
||||
$manager = User::factory()->deleteUsers()->create();
|
||||
$this->actingAs(User::factory()->deleteUsers()->create())->assertTrue($manager->isDeletable());
|
||||
$manager = User::factory()->deleteUsers()->viewUsers()->create();
|
||||
$this->actingAs(User::factory()->deleteUsers()->viewUsers()->create())->assertTrue($manager->isDeletable());
|
||||
|
||||
$response = $this->actingAs($manager)
|
||||
->delete(route('users.destroy', $manager->id))
|
||||
|
|
Loading…
Reference in a new issue