actingAs(User::factory()->create()) ->get(route('accessories.show', Accessory::factory()->create()->id)) ->assertForbidden(); } public function testCannotViewAccessoryFromAnotherCompany() { $this->settings->enableMultipleFullCompanySupport(); [$companyA, $companyB] = Company::factory()->count(2)->create(); $accessoryForCompanyA = Accessory::factory()->for($companyA)->create(); $userForCompanyB = User::factory()->for($companyB)->viewAccessories()->create(); $this->actingAs($userForCompanyB) ->get(route('accessories.show', $accessoryForCompanyA->id)) ->assertForbidden(); } public function testCanViewAccessory() { $accessory = Accessory::factory()->create(); $this->actingAs(User::factory()->viewAccessories()->create()) ->get(route('accessories.show', $accessory->id)) ->assertOk() ->assertViewIs('accessories.view') ->assertViewHas(['accessory' => $accessory]); } public function testPageRenders() { $this->actingAs(User::factory()->superuser()->create()) ->get(route('accessories.show', Accessory::factory()->create()->id)) ->assertOk(); } }