create(); $this->actingAsForApi(User::factory()->create()) ->deleteJson(route('api.maintenances.destroy', $assetMaintenance)) ->assertForbidden(); $this->assertNotSoftDeleted($assetMaintenance); } public function testAdheresToFullMultipleCompaniesSupportScoping() { [$companyA, $companyB] = Company::factory()->count(2)->create(); $assetMaintenanceA = AssetMaintenance::factory()->create(); $assetMaintenanceB = AssetMaintenance::factory()->create(); $assetMaintenanceC = AssetMaintenance::factory()->create(); $assetMaintenanceA->asset->update(['company_id' => $companyA->id]); $assetMaintenanceB->asset->update(['company_id' => $companyB->id]); $assetMaintenanceC->asset->update(['company_id' => $companyB->id]); $superUser = $companyA->users()->save(User::factory()->superuser()->make()); $userInCompanyA = $companyA->users()->save(User::factory()->editAssets()->make()); $userInCompanyB = $companyB->users()->save(User::factory()->editAssets()->make()); $this->settings->enableMultipleFullCompanySupport(); $this->actingAsForApi($userInCompanyA) ->deleteJson(route('api.maintenances.destroy', $assetMaintenanceB)) ->assertStatusMessageIs('error'); $this->actingAsForApi($userInCompanyB) ->deleteJson(route('api.maintenances.destroy', $assetMaintenanceA)) ->assertStatusMessageIs('error'); $this->actingAsForApi($superUser) ->deleteJson(route('api.maintenances.destroy', $assetMaintenanceC)) ->assertStatusMessageIs('success'); $this->assertNotSoftDeleted($assetMaintenanceA); $this->assertNotSoftDeleted($assetMaintenanceB); $this->assertSoftDeleted($assetMaintenanceC); } public function testCanDeleteAssetMaintenance() { $assetMaintenance = AssetMaintenance::factory()->create(); $this->actingAsForApi(User::factory()->editAssets()->create()) ->deleteJson(route('api.maintenances.destroy', $assetMaintenance)) ->assertStatusMessageIs('success'); $this->assertSoftDeleted($assetMaintenance); } }