actingAs(User::factory()->create()) ->post(route('users/bulksave'), [ 'ids' => [ User::factory()->create()->id, ], 'status_id' => Statuslabel::factory()->create()->id, ]) ->assertForbidden(); } public function testValidation() { $user = User::factory()->create(); Asset::factory()->assignedToUser($user)->create(); $actor = $this->actingAs(User::factory()->editUsers()->create()); // "ids" required $actor->post(route('users/bulksave'), [ // 'ids' => [ // $user->id, // ], 'status_id' => Statuslabel::factory()->create()->id, ])->assertSessionHas('error')->assertRedirect(); // "status_id" needed when provided users have assets associated $actor->post(route('users/bulksave'), [ 'ids' => [ $user->id, ], // 'status_id' => Statuslabel::factory()->create()->id, ])->assertSessionHas('error')->assertRedirect(); } public function testCannotPerformBulkActionsOnSelf() { $actor = User::factory()->editUsers()->create(); $this->actingAs($actor) ->post(route('users/bulksave'), [ 'ids' => [ $actor->id, ], 'delete_user' => '1', ]) ->assertRedirect(route('users.index')) ->assertSessionHas('success', trans('general.bulk_checkin_delete_success')); $this->assertNotSoftDeleted($actor); } public function testAccessoriesCanBeBulkCheckedIn() { [$accessoryA, $accessoryB] = Accessory::factory()->count(2)->create(); [$userA, $userB, $userC] = User::factory()->count(3)->create(); // Add checkouts for multiple accessories to multiple users to get different ids in the mix $this->attachAccessoryToUsers($accessoryA, [$userA, $userB, $userC]); $this->attachAccessoryToUsers($accessoryB, [$userA, $userB]); $this->assertTrue($userA->accessories->isNotEmpty()); $this->assertTrue($userB->accessories->isNotEmpty()); $this->assertTrue($userC->accessories->isNotEmpty()); $this->actingAs(User::factory()->editUsers()->create()) ->post(route('users/bulksave'), [ 'ids' => [ $userA->id, $userC->id, ], 'status_id' => Statuslabel::factory()->create()->id, ]) ->assertRedirect(route('users.index')); $this->assertTrue($userA->fresh()->accessories->isEmpty()); $this->assertTrue($userB->fresh()->accessories->isNotEmpty()); $this->assertTrue($userC->fresh()->accessories->isEmpty()); // These assertions check against a bug where the wrong value from // accessories_users was being populated in action_logs.item_id. $this->assertActionLogCheckInEntryFor($userA, $accessoryA); $this->assertActionLogCheckInEntryFor($userA, $accessoryB); $this->assertActionLogCheckInEntryFor($userC, $accessoryA); } public function testConsumablesCanBeBulkCheckedIn() { [$consumableA, $consumableB] = Consumable::factory()->count(2)->create(); [$userA, $userB, $userC] = User::factory()->count(3)->create(); // Add checkouts for multiple consumables to multiple users to get different ids in the mix $this->attachConsumableToUsers($consumableA, [$userA, $userB, $userC]); $this->attachConsumableToUsers($consumableB, [$userA, $userB]); $this->assertTrue($userA->consumables->isNotEmpty()); $this->assertTrue($userB->consumables->isNotEmpty()); $this->assertTrue($userC->consumables->isNotEmpty()); $this->actingAs(User::factory()->editUsers()->create()) ->post(route('users/bulksave'), [ 'ids' => [ $userA->id, $userC->id, ], 'status_id' => Statuslabel::factory()->create()->id, ]) ->assertRedirect(route('users.index')); $this->assertTrue($userA->fresh()->consumables->isEmpty()); $this->assertTrue($userB->fresh()->consumables->isNotEmpty()); $this->assertTrue($userC->fresh()->consumables->isEmpty()); // These assertions check against a bug where the wrong value from // consumables_users was being populated in action_logs.item_id. $this->assertActionLogCheckInEntryFor($userA, $consumableA); $this->assertActionLogCheckInEntryFor($userA, $consumableB); $this->assertActionLogCheckInEntryFor($userC, $consumableA); } public function testUsersCanBeDeletedInBulk() { [$userA, $userB, $userC] = User::factory()->count(3)->create(); $this->actingAs(User::factory()->editUsers()->create()) ->post(route('users/bulksave'), [ 'ids' => [ $userA->id, $userC->id, ], 'delete_user' => '1', ]) ->assertRedirect(route('users.index')) ->assertSessionHas('success', trans('general.bulk_checkin_delete_success')); $this->assertSoftDeleted($userA); $this->assertNotSoftDeleted($userB); $this->assertSoftDeleted($userC); } private function attachAccessoryToUsers(Accessory $accessory, array $users): void { foreach ($users as $user) { $accessory->users()->attach($accessory->id, [ 'accessory_id' => $accessory->id, 'assigned_to' => $user->id, ]); } } private function attachConsumableToUsers(Consumable $consumable, array $users): void { foreach ($users as $user) { $consumable->users()->attach($consumable->id, [ 'consumable_id' => $consumable->id, 'assigned_to' => $user->id, ]); } } private function assertActionLogCheckInEntryFor(User $user, Model $model): void { $this->assertDatabaseHas('action_logs', [ 'action_type' => 'checkin from', 'target_id' => $user->id, 'target_type' => User::class, 'note' => 'Bulk checkin items', 'item_type' => get_class($model), 'item_id' => $model->id, ]); } }