einundzwanzig/einundzwanzig-app
1
0
Fork 0
mirror of https://github.com/HolgerHatGarKeineNode/einundzwanzig-app.git synced 2026-06-18 04:50:30 +00:00
Code Issues Packages Projects Releases Wiki Activity

✨ Add leader-based permissions to Meetup event tests and editable scope

Browse Source 
- 🔒 Ensure leader users are required for Meetup event tests to simulate accurate permissions.
- ➕ Add `editableBy` scope to `MeetupEvent` model for consistent editable event handling.
- 🛠️ Refactor `mine` API endpoint and MCP tool to leverage `editableBy` scope.
- 🧪 Update tests to verify leader-based accessibility for Meetup events.
This commit is contained in:
HolgerHatGarKeineNode
2026-06-17 20:05:39 +02:00
parent 7c142fb37a
commit dc1d679e4b
8 changed files with 61 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tests/Feature/Api/MeetupEventWriteApiTest.php
+13 -2
View File
@@ -106,17 +106,28 @@ it('forbids updating someone elses', function () {
$response->assertForbidden();
});
it('returns only own in mine index', function () {
it('returns own and led-meetup events in mine index', function () {
Sanctum::actingAs($user = User::factory()->create());
// 2 selbst angelegt
MeetupEvent::factory()->count(2)->create(['created_by' => $user->id]);
// 1 Termin eines Co-Leaders im selben (von $user geführten) Meetup -> sichtbar
$ledMeetup = Meetup::factory()->create();
$ledMeetup->users()->syncWithoutDetaching([$user->id => ['is_leader' => true]]);
MeetupEvent::factory()->create([
'meetup_id' => $ledMeetup->id,
'created_by' => User::factory()->create()->id,
]);
// 1 fremder Termin in einem Meetup ohne Leaderschaft -> NICHT sichtbar
MeetupEvent::factory()->create(['created_by' => User::factory()->create()->id]);
$response = $this->getJson('/api/my-meetup-events');
$response->assertSuccessful();
expect($response->json('data'))->toHaveCount(2);
expect($response->json('data'))->toHaveCount(3);
});
it('forbids viewing someone elses in mine show', function () {