mirror of
https://github.com/coollabsio/coolify.git
synced 2026-03-11 08:55:47 +00:00
fcc58ca08a
Add authorization gates to Project and Server creation buttons in the dashboard to prevent non-admin users from accessing resource creation. Improve team deletion to clear cache before deletion and automatically switch to the user's next available team. - Hide create buttons from non-admin users in dashboard - Clear cache before team deletion to prevent stale session resolution - Switch user session to next available team when current team is deleted - Handle refreshSession when user has no remaining teams - Add tests for dashboard authorization enforcement and team deletion flow
54 lines
1.7 KiB
PHP
54 lines
1.7 KiB
PHP
<?php
|
|
|
|
use App\Livewire\Team\Index;
|
|
use App\Models\InstanceSettings;
|
|
use App\Models\Team;
|
|
use App\Models\User;
|
|
use Illuminate\Foundation\Testing\RefreshDatabase;
|
|
use Livewire\Livewire;
|
|
|
|
uses(RefreshDatabase::class);
|
|
|
|
beforeEach(function () {
|
|
InstanceSettings::updateOrCreate(['id' => 0]);
|
|
|
|
$this->owner = User::factory()->create();
|
|
|
|
// The owner's personal team (created by factory)
|
|
$this->personalTeam = $this->owner->teams()->first();
|
|
$this->owner->teams()->updateExistingPivot($this->personalTeam->id, ['role' => 'owner']);
|
|
|
|
// A second team to delete
|
|
$this->teamToDelete = Team::create(['name' => 'Deletable Team', 'personal_team' => false]);
|
|
$this->teamToDelete->members()->attach($this->owner->id, ['role' => 'owner']);
|
|
});
|
|
|
|
test('deleting a team switches session to another team without error', function () {
|
|
$this->actingAs($this->owner);
|
|
session(['currentTeam' => $this->teamToDelete]);
|
|
|
|
Livewire::test(Index::class)
|
|
->call('delete')
|
|
->assertRedirect(route('team.index'));
|
|
|
|
// Team should be deleted from the database
|
|
expect(Team::find($this->teamToDelete->id))->toBeNull();
|
|
|
|
// Session should now have the personal team
|
|
$sessionTeam = session('currentTeam');
|
|
expect($sessionTeam)->not->toBeNull()
|
|
->and($sessionTeam->id)->toBe($this->personalTeam->id);
|
|
});
|
|
|
|
test('refreshSession clears session when no team exists', function () {
|
|
$user = User::factory()->create();
|
|
// Detach all teams so user has none
|
|
$user->teams()->detach();
|
|
$this->actingAs($user);
|
|
session(['currentTeam' => null]);
|
|
|
|
// Should not throw when no team can be resolved
|
|
refreshSession(null);
|
|
|
|
expect(session('currentTeam'))->toBeNull();
|
|
});
|