update hak akses role: view-point-audit terkunci 'Khusus Admin' (badge + kunci di UI, proteksi di backend update()) + test

2026-08-03 09:51:28 +07:00
parent 156841a4e7
commit 465be127ec
3 changed files with 97 additions and 8 deletions
@@ -0,0 +1,55 @@
+<?php
+
+namespace Tests\Feature;
+
+use App\Models\User;
+use Illuminate\Foundation\Testing\RefreshDatabase;
+use Illuminate\Support\Facades\DB;
+use Tests\TestCase;
+
+class PermissionManagementTest extends TestCase
+{
+    use RefreshDatabase;
+
+    protected function setUp(): void
+    {
+        parent::setUp();
+        $this->admin = User::factory()->create(['roles' => ['admin']]);
+    }
+
+    public function test_permission_khusus_admin_tidak_bisa_diberikan_ke_role_lain(): void
+    {
+        $auditId = DB::table('permissions')->where('key', 'view-point-audit')->value('id');
+        $normalId = DB::table('permissions')->where('key', 'input-violations')->value('id');
+
+        $this->actingAs($this->admin)
+            ->post('/settings/permissions', [
+                'permissions' => [
+                    'bk' => [$auditId, $normalId],
+                    'ketua_tim' => [$auditId],
+                ],
+            ])
+            ->assertRedirect()
+            ->assertSessionHas('success');
+
+        // view-point-audit TIDAK boleh jatuh ke role non-admin
+        $this->assertDatabaseMissing('role_permissions', ['role' => 'bk', 'permission_id' => $auditId]);
+        $this->assertDatabaseMissing('role_permissions', ['role' => 'ketua_tim', 'permission_id' => $auditId]);
+
+        // permission normal tetap tersimpan
+        $this->assertDatabaseHas('role_permissions', ['role' => 'bk', 'permission_id' => $normalId]);
+
+        // admin selalu dapat semua
+        $this->assertDatabaseHas('role_permissions', ['role' => 'admin', 'permission_id' => $auditId]);
+    }
+
+    public function test_halaman_hak_akses_menampilkan_permission_khusus_admin(): void
+    {
+        $response = $this->actingAs($this->admin)
+            ->get('/settings/permissions')
+            ->assertOk()
+            ->assertSee('Hak Akses Role')
+            ->assertSee('view-point-audit')
+            ->assertSee('Khusus Admin');
+    }
+}