From aa6ab2df60be0c1904edf265763993ae0c1576ed Mon Sep 17 00:00:00 2001
From: Marcus Moore <contact@marcusmoore.io>
Date: Mon, 9 Sep 2024 14:35:38 -0700
Subject: [PATCH] Add permission tests for some accessory api endpoints

---
 .../Accessories/Api/AccessoryDeleteTest.php   | 19 +++++++++++++++++++
 .../Accessories/Api/AccessoryIndexTest.php    | 16 ++++++++++++++++
 .../Accessories/Api/AccessoryShowTest.php     | 19 +++++++++++++++++++
 .../Accessories/Api/AccessoryStoreTest.php    | 16 ++++++++++++++++
 .../Accessories/Api/AccessoryUpdateTest.php   | 19 +++++++++++++++++++
 5 files changed, 89 insertions(+)
 create mode 100644 tests/Feature/Accessories/Api/AccessoryDeleteTest.php
 create mode 100644 tests/Feature/Accessories/Api/AccessoryIndexTest.php
 create mode 100644 tests/Feature/Accessories/Api/AccessoryShowTest.php
 create mode 100644 tests/Feature/Accessories/Api/AccessoryStoreTest.php
 create mode 100644 tests/Feature/Accessories/Api/AccessoryUpdateTest.php

diff --git a/tests/Feature/Accessories/Api/AccessoryDeleteTest.php b/tests/Feature/Accessories/Api/AccessoryDeleteTest.php
new file mode 100644
index 0000000000..86c916a470
--- /dev/null
+++ b/tests/Feature/Accessories/Api/AccessoryDeleteTest.php
@@ -0,0 +1,19 @@
+<?php
+
+namespace Tests\Feature\Accessories\Api;
+
+use App\Models\Accessory;
+use App\Models\User;
+use Tests\TestCase;
+
+class AccessoryDeleteTest extends TestCase
+{
+    public function testPermissionRequiredToDeleteAccessory()
+    {
+        $accessory = Accessory::factory()->create();
+
+        $this->actingAsForApi(User::factory()->create())
+            ->deleteJson(route('api.accessories.destroy', $accessory))
+            ->assertForbidden();
+    }
+}
diff --git a/tests/Feature/Accessories/Api/AccessoryIndexTest.php b/tests/Feature/Accessories/Api/AccessoryIndexTest.php
new file mode 100644
index 0000000000..cdc097ff4a
--- /dev/null
+++ b/tests/Feature/Accessories/Api/AccessoryIndexTest.php
@@ -0,0 +1,16 @@
+<?php
+
+namespace Tests\Feature\Accessories\Api;
+
+use App\Models\User;
+use Tests\TestCase;
+
+class AccessoryIndexTest extends TestCase
+{
+    public function testPermissionRequiredToViewAccessoriesIndex()
+    {
+        $this->actingAsForApi(User::factory()->create())
+            ->getJson(route('api.accessories.index'))
+            ->assertForbidden();
+    }
+}
diff --git a/tests/Feature/Accessories/Api/AccessoryShowTest.php b/tests/Feature/Accessories/Api/AccessoryShowTest.php
new file mode 100644
index 0000000000..71a74dd768
--- /dev/null
+++ b/tests/Feature/Accessories/Api/AccessoryShowTest.php
@@ -0,0 +1,19 @@
+<?php
+
+namespace Tests\Feature\Accessories\Api;
+
+use App\Models\Accessory;
+use App\Models\User;
+use Tests\TestCase;
+
+class AccessoryShowTest extends TestCase
+{
+    public function testPermissionRequiredToShowAccessory()
+    {
+        $accessory = Accessory::factory()->create();
+
+        $this->actingAsForApi(User::factory()->create())
+            ->getJson(route('api.accessories.show', $accessory))
+            ->assertForbidden();
+    }
+}
diff --git a/tests/Feature/Accessories/Api/AccessoryStoreTest.php b/tests/Feature/Accessories/Api/AccessoryStoreTest.php
new file mode 100644
index 0000000000..804d5fcb4f
--- /dev/null
+++ b/tests/Feature/Accessories/Api/AccessoryStoreTest.php
@@ -0,0 +1,16 @@
+<?php
+
+namespace Tests\Feature\Accessories\Api;
+
+use App\Models\User;
+use Tests\TestCase;
+
+class AccessoryStoreTest extends TestCase
+{
+    public function testPermissionRequiredToStoreAccessory()
+    {
+        $this->actingAsForApi(User::factory()->create())
+            ->postJson(route('api.accessories.store'))
+            ->assertForbidden();
+    }
+}
diff --git a/tests/Feature/Accessories/Api/AccessoryUpdateTest.php b/tests/Feature/Accessories/Api/AccessoryUpdateTest.php
new file mode 100644
index 0000000000..43b3c6e36b
--- /dev/null
+++ b/tests/Feature/Accessories/Api/AccessoryUpdateTest.php
@@ -0,0 +1,19 @@
+<?php
+
+namespace Tests\Feature\Accessories\Api;
+
+use App\Models\Accessory;
+use App\Models\User;
+use Tests\TestCase;
+
+class AccessoryUpdateTest extends TestCase
+{
+    public function testPermissionRequiredToUpdateAccessory()
+    {
+        $accessory = Accessory::factory()->create();
+
+        $this->actingAsForApi(User::factory()->create())
+            ->patchJson(route('api.accessories.update', $accessory))
+            ->assertForbidden();
+    }
+}