From f7687008b78228e0b4a9c4965b32ee089e70ee3a Mon Sep 17 00:00:00 2001
From: snipe <snipe@snipe.net>
Date: Fri, 31 May 2024 23:10:59 +0100
Subject: [PATCH] Added more tests

Signed-off-by: snipe <snipe@snipe.net>
---
 tests/Feature/Users/ViewUserTest.php | 106 +++++++++++++++++++++++++++
 1 file changed, 106 insertions(+)
 create mode 100644 tests/Feature/Users/ViewUserTest.php

diff --git a/tests/Feature/Users/ViewUserTest.php b/tests/Feature/Users/ViewUserTest.php
new file mode 100644
index 0000000000..9d7bbeb15d
--- /dev/null
+++ b/tests/Feature/Users/ViewUserTest.php
@@ -0,0 +1,106 @@
+<?php
+
+namespace Tests\Feature\Users;
+
+use Illuminate\Support\Facades\Notification;
+use App\Models\Company;
+use App\Models\User;
+use Tests\TestCase;
+use App\Notifications\CurrentInventory;
+
+class ViewUserTest extends TestCase
+{
+    public function testUserWithoutPermissionsCannotViewUserDetailPage()
+    {
+        $this->settings->enableMultipleFullCompanySupport();
+
+        [$companyA, $companyB] = Company::factory()->count(2)->create();
+
+        $superuser = User::factory()->superuser()->create();
+        $user = User::factory()->for($companyB)->create();
+
+        $this->actingAs(User::factory()->editUsers()->for($companyA)->create())
+            ->get(route('users.show', ['user' => $user->id]))
+            ->assertStatus(403);
+
+        $this->actingAs($superuser)
+            ->get(route('users.show', ['user' => $user->id]))
+            ->assertOk()
+            ->assertStatus(200);
+    }
+
+    public function testUserWithoutPermissionsCannotViewPrintAllInventoryPage()
+    {
+        $this->settings->enableMultipleFullCompanySupport();
+        //$this->withoutExceptionHandling();
+
+        [$companyA, $companyB] = Company::factory()->count(2)->create();
+
+        $superuser = User::factory()->superuser()->create();
+        $user = User::factory()->for($companyB)->create();
+
+        $this->actingAs(User::factory()->viewUsers()->for($companyA)->create())
+            ->get(route('users.print', ['userId' => $user->id]))
+            ->assertStatus(403);
+
+        $this->actingAs(User::factory()->viewUsers()->for($companyB)->create())
+            ->get(route('users.print', ['userId' => $user->id]))
+            ->assertStatus(200);
+
+        $this->actingAs($superuser)
+            ->get(route('users.print', ['userId' => $user->id]))
+            ->assertOk()
+            ->assertStatus(200);
+    }
+
+    public function testUserWithhoutPermissionsCannotSendInventory()
+    {
+        Notification::fake();
+
+        $this->settings->enableMultipleFullCompanySupport();
+
+        [$companyA, $companyB] = Company::factory()->count(2)->create();
+
+        $superuser = User::factory()->superuser()->create();
+        $user = User::factory()->for($companyB)->create();
+
+        $this->actingAs(User::factory()->viewUsers()->for($companyA)->create())
+            ->post(route('users.email', ['userId' => $user->id]))
+            ->assertStatus(403);
+
+        $this->actingAs(User::factory()->viewUsers()->for($companyB)->create())
+            ->post(route('users.email', ['userId' => $user->id]))
+            ->assertStatus(302);
+
+        $this->actingAs($superuser)
+            ->post(route('users.email', ['userId' => $user->id]))
+            ->assertStatus(302);
+
+        Notification::assertSentTo(
+            [$user], CurrentInventory::class
+        );
+    }
+
+    public function testUserWithhoutPermissionsCannotDeleteUser()
+    {
+
+        $this->settings->enableMultipleFullCompanySupport();
+
+        [$companyA, $companyB] = Company::factory()->count(2)->create();
+
+        $superuser = User::factory()->superuser()->create();
+        $userFromA = User::factory()->for($companyA)->create();
+        $userFromB = User::factory()->for($companyB)->create();
+
+        $this->followingRedirects()->actingAs(User::factory()->deleteUsers()->for($companyA)->create())
+            ->delete(route('users.destroy', ['user' => $userFromB->id]))
+            ->assertStatus(403);
+
+        $this->actingAs(User::factory()->deleteUsers()->for($companyA)->create())
+            ->delete(route('users.destroy', ['user' => $userFromA->id]))
+            ->assertStatus(302)
+            ->assertRedirect(route('users.index'));
+
+    }
+
+}