create(); $this->actingAsForApi(User::factory()->create()) ->deleteJson(route('api.accessories.destroy', $accessory)) ->assertForbidden(); $this->assertNotSoftDeleted($accessory); } public function testAdheresToFullMultipleCompaniesSupportScoping() { [$companyA, $companyB] = Company::factory()->count(2)->create(); $accessoryA = Accessory::factory()->for($companyA)->create(); $accessoryB = Accessory::factory()->for($companyB)->create(); $accessoryC = Accessory::factory()->for($companyB)->create(); $superUser = $companyA->users()->save(User::factory()->superuser()->make()); $userInCompanyA = $companyA->users()->save(User::factory()->deleteAccessories()->make()); $userInCompanyB = $companyB->users()->save(User::factory()->deleteAccessories()->make()); $this->settings->enableMultipleFullCompanySupport(); $this->actingAsForApi($userInCompanyA) ->deleteJson(route('api.accessories.destroy', $accessoryB)) ->assertStatusMessageIs('error'); $this->actingAsForApi($userInCompanyB) ->deleteJson(route('api.accessories.destroy', $accessoryA)) ->assertStatusMessageIs('error'); $this->actingAsForApi($superUser) ->deleteJson(route('api.accessories.destroy', $accessoryC)) ->assertStatusMessageIs('success'); $this->assertNotSoftDeleted($accessoryA); $this->assertNotSoftDeleted($accessoryB); $this->assertSoftDeleted($accessoryC); } public function testCannotDeleteAccessoryThatHasCheckouts() { $accessory = Accessory::factory()->checkedOutToUser()->create(); $this->actingAsForApi(User::factory()->deleteAccessories()->create()) ->deleteJson(route('api.accessories.destroy', $accessory)) ->assertStatusMessageIs('error'); $this->assertNotSoftDeleted($accessory); } public function testCanDeleteAccessory() { $accessory = Accessory::factory()->create(); $this->actingAsForApi(User::factory()->deleteAccessories()->create()) ->deleteJson(route('api.accessories.destroy', $accessory)) ->assertStatusMessageIs('success'); $this->assertSoftDeleted($accessory); } }