Add leader-based permissions to Meetup event tests and editable scope

- 🔒 Ensure leader users are required for Meetup event tests to simulate accurate permissions.
-  Add `editableBy` scope to `MeetupEvent` model for consistent editable event handling.
- 🛠️ Refactor `mine` API endpoint and MCP tool to leverage `editableBy` scope.
- 🧪 Update tests to verify leader-based accessibility for Meetup events.
This commit is contained in:
HolgerHatGarKeineNode
2026-06-17 20:05:39 +02:00
parent 7c142fb37a
commit dc1d679e4b
8 changed files with 61 additions and 15 deletions
+17 -1
View File
@@ -53,11 +53,27 @@ it('makes the creator a leader so the meetup shows in my meetups', function () {
]);
});
it('lets a member add an event to a joined meetup', function () {
it('forbids a non-leader member from adding an event but allows a leader', function () {
$user = User::factory()->create();
$meetup = Meetup::factory()->create(['name' => 'Einundzwanzig Dortmund']);
$meetup->users()->attach($user->id, ['is_leader' => false]);
// Reines Mitglied (is_leader = false) darf keinen Termin anlegen.
EinundzwanzigServer::actingAs($user)
->tool(CreateMeetupEventTool::class, [
'meetup' => 'Einundzwanzig Dortmund',
'start' => '2026-08-01 18:00:00',
])
->assertHasErrors();
$this->assertDatabaseMissing('meetup_events', [
'meetup_id' => $meetup->id,
'created_by' => $user->id,
]);
// Als Leader darf derselbe Nutzer den Termin anlegen.
$meetup->users()->syncWithoutDetaching([$user->id => ['is_leader' => true]]);
EinundzwanzigServer::actingAs($user)
->tool(CreateMeetupEventTool::class, [
'meetup' => 'Einundzwanzig Dortmund',