einundzwanzig/einundzwanzig-app
1
0
Fork 0
mirror of https://github.com/HolgerHatGarKeineNode/einundzwanzig-app.git synced 2026-06-17 16:40:31 +00:00
Code Issues Packages Projects Releases Wiki Activity

✨ Implement leadership-based permissions for Meetup management

Browse Source 
- 🔒 Restrict event creation, editing, and deletion to Meetup leaders (`is_leader`) and creators for consistency across APIs, frontend, and MCP.
- ➕ Add new APIs for leader delegation: assign/remove Meetup leaders via `meetup_user.is_leader`.
- 🛠️ Replace loose member checks with specific leadership checks in policies, controllers, and views.
- 🧪 Add exhaustive tests to ensure only eligible leaders execute critical actions (e.g., event creation/edit, Meetup updates).
- 🔄 Refactor pivot relationships and models (`leadByMe`, `isLeader`) for explicit leadership handling.
- ✨ Introduce artisan command `meetups:promote-existing-leaders` to transition legacy data.
This commit is contained in:
HolgerHatGarKeineNode
2026-06-16 22:04:34 +02:00
parent 39af153f52
commit 9f8fda294a
26 changed files with 691 additions and 70 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tests/Feature/Api/MeetupEventSeriesTest.php
+9 -9
View File
@@ -7,7 +7,7 @@ use Laravel\Sanctum\Sanctum;
it('creates a weekly series of individual events', function () {
Sanctum::actingAs($user = User::factory()->create());
$meetup = Meetup::factory()->create();
$meetup = Meetup::factory()->create(['created_by' => $user->id]);
$response = $this->postJson('/api/meetup-events', [
'meetup_id' => $meetup->id,
@@ -32,8 +32,8 @@ it('creates a weekly series of individual events', function () {
});
it('creates a monthly series of individual events', function () {
Sanctum::actingAs(User::factory()->create());
$meetup = Meetup::factory()->create();
Sanctum::actingAs($user = User::factory()->create());
$meetup = Meetup::factory()->create(['created_by' => $user->id]);
$response = $this->postJson('/api/meetup-events', [
'meetup_id' => $meetup->id,
@@ -48,8 +48,8 @@ it('creates a monthly series of individual events', function () {
});
it('caps the series at 100 occurrences', function () {
Sanctum::actingAs(User::factory()->create());
$meetup = Meetup::factory()->create();
Sanctum::actingAs($user = User::factory()->create());
$meetup = Meetup::factory()->create(['created_by' => $user->id]);
$response = $this->postJson('/api/meetup-events', [
'meetup_id' => $meetup->id,
@@ -63,8 +63,8 @@ it('caps the series at 100 occurrences', function () {
});
it('still creates a single event without recurrence fields', function () {
Sanctum::actingAs(User::factory()->create());
$meetup = Meetup::factory()->create();
Sanctum::actingAs($user = User::factory()->create());
$meetup = Meetup::factory()->create(['created_by' => $user->id]);
$response = $this->postJson('/api/meetup-events', [
'meetup_id' => $meetup->id,
@@ -78,8 +78,8 @@ it('still creates a single event without recurrence fields', function () {
});
it('creates a single event when recurrence_type is set but no end date', function () {
Sanctum::actingAs(User::factory()->create());
$meetup = Meetup::factory()->create();
Sanctum::actingAs($user = User::factory()->create());
$meetup = Meetup::factory()->create(['created_by' => $user->id]);
$response = $this->postJson('/api/meetup-events', [
'meetup_id' => $meetup->id,