first
This commit is contained in:
Saufi
257
tests/Feature/Admin/Phase5Test.php
Normal file
257
tests/Feature/Admin/Phase5Test.php
Normal file
@@ -0,0 +1,257 @@
|
||||
<?php
|
||||
|
||||
namespace Tests\Feature\Admin;
|
||||
|
||||
use App\Models\AuditLog;
|
||||
use App\Models\Department;
|
||||
use App\Models\TranscriptionProject;
|
||||
use App\Models\User;
|
||||
use Illuminate\Foundation\Testing\RefreshDatabase;
|
||||
use Tests\TestCase;
|
||||
|
||||
class Phase5Test extends TestCase
|
||||
{
|
||||
use RefreshDatabase;
|
||||
|
||||
private function makeAdmin(): User
|
||||
{
|
||||
return User::factory()->admin()->create();
|
||||
}
|
||||
|
||||
private function makeUser(): User
|
||||
{
|
||||
return User::factory()->create();
|
||||
}
|
||||
|
||||
private function makeProject(User $owner, array $attrs = []): TranscriptionProject
|
||||
{
|
||||
return TranscriptionProject::factory()->create(array_merge([
|
||||
'owner_user_id' => $owner->id,
|
||||
], $attrs));
|
||||
}
|
||||
|
||||
// -------------------------------------------------------
|
||||
// Dashboard
|
||||
// -------------------------------------------------------
|
||||
|
||||
public function test_admin_dashboard_loads_with_full_stats(): void
|
||||
{
|
||||
$admin = $this->makeAdmin();
|
||||
|
||||
$this->actingAs($admin)
|
||||
->get(route('admin.dashboard'))
|
||||
->assertOk()
|
||||
->assertViewIs('admin.dashboard')
|
||||
->assertViewHas('stats')
|
||||
->assertViewHas('topUsers')
|
||||
->assertViewHas('trendRaw')
|
||||
->assertViewHas('deptStats');
|
||||
}
|
||||
|
||||
public function test_user_cannot_access_admin_dashboard(): void
|
||||
{
|
||||
$user = $this->makeUser();
|
||||
|
||||
$this->actingAs($user)
|
||||
->get(route('admin.dashboard'))
|
||||
->assertForbidden();
|
||||
}
|
||||
|
||||
public function test_dashboard_shows_storage_stats(): void
|
||||
{
|
||||
$admin = $this->makeAdmin();
|
||||
$owner = $this->makeUser();
|
||||
|
||||
TranscriptionProject::factory()->create([
|
||||
'owner_user_id' => $owner->id,
|
||||
'file_size' => 10485760, // 10 MB
|
||||
]);
|
||||
|
||||
$response = $this->actingAs($admin)
|
||||
->get(route('admin.dashboard'))
|
||||
->assertOk();
|
||||
|
||||
$stats = $response->viewData('stats');
|
||||
$this->assertGreaterThanOrEqual(10485760, $stats['storage_bytes']);
|
||||
}
|
||||
|
||||
// -------------------------------------------------------
|
||||
// Transfer Ownership
|
||||
// -------------------------------------------------------
|
||||
|
||||
public function test_admin_can_transfer_project_ownership(): void
|
||||
{
|
||||
$admin = $this->makeAdmin();
|
||||
$owner = $this->makeUser();
|
||||
$newOwner = $this->makeUser();
|
||||
$project = $this->makeProject($owner);
|
||||
|
||||
$this->actingAs($admin)
|
||||
->post(route('admin.projects.transfer-owner', $project), [
|
||||
'new_owner_id' => $newOwner->id,
|
||||
'justification' => 'Pekerja telah berpindah jabatan dan projek perlu dipindahkan.',
|
||||
])->assertRedirect(route('admin.projects.index'));
|
||||
|
||||
$project->refresh();
|
||||
$this->assertEquals($newOwner->id, $project->owner_user_id);
|
||||
}
|
||||
|
||||
public function test_transfer_ownership_creates_audit_log(): void
|
||||
{
|
||||
$admin = $this->makeAdmin();
|
||||
$owner = $this->makeUser();
|
||||
$newOwner = $this->makeUser();
|
||||
$project = $this->makeProject($owner);
|
||||
|
||||
$this->actingAs($admin)
|
||||
->post(route('admin.projects.transfer-owner', $project), [
|
||||
'new_owner_id' => $newOwner->id,
|
||||
'justification' => 'Sebab pemindahan yang sah dan lengkap.',
|
||||
]);
|
||||
|
||||
$this->assertDatabaseHas('audit_logs', [
|
||||
'action' => 'project_ownership_transferred',
|
||||
'project_id' => $project->id,
|
||||
'target_user_id' => $newOwner->id,
|
||||
]);
|
||||
|
||||
$log = AuditLog::where('action', 'project_ownership_transferred')->first();
|
||||
$this->assertStringContainsString('Sebab pemindahan', $log->justification);
|
||||
}
|
||||
|
||||
public function test_user_cannot_transfer_ownership(): void
|
||||
{
|
||||
$user = $this->makeUser();
|
||||
$owner = $this->makeUser();
|
||||
$newOwner = $this->makeUser();
|
||||
$project = $this->makeProject($owner);
|
||||
|
||||
$this->actingAs($user)
|
||||
->post(route('admin.projects.transfer-owner', $project), [
|
||||
'new_owner_id' => $newOwner->id,
|
||||
'justification' => 'Cuba pindah oleh pengguna biasa.',
|
||||
])->assertForbidden();
|
||||
|
||||
$project->refresh();
|
||||
$this->assertEquals($owner->id, $project->owner_user_id);
|
||||
}
|
||||
|
||||
public function test_transfer_requires_justification(): void
|
||||
{
|
||||
$admin = $this->makeAdmin();
|
||||
$owner = $this->makeUser();
|
||||
$newOwner = $this->makeUser();
|
||||
$project = $this->makeProject($owner);
|
||||
|
||||
$this->actingAs($admin)
|
||||
->post(route('admin.projects.transfer-owner', $project), [
|
||||
'new_owner_id' => $newOwner->id,
|
||||
'justification' => 'Singkat', // less than 10 chars
|
||||
])->assertSessionHasErrors('justification');
|
||||
|
||||
$project->refresh();
|
||||
$this->assertEquals($owner->id, $project->owner_user_id);
|
||||
}
|
||||
|
||||
public function test_transfer_requires_valid_new_owner(): void
|
||||
{
|
||||
$admin = $this->makeAdmin();
|
||||
$owner = $this->makeUser();
|
||||
$project = $this->makeProject($owner);
|
||||
|
||||
$this->actingAs($admin)
|
||||
->post(route('admin.projects.transfer-owner', $project), [
|
||||
'new_owner_id' => 99999,
|
||||
'justification' => 'Justifikasi yang sah untuk pemindahan projek ini.',
|
||||
])->assertSessionHasErrors('new_owner_id');
|
||||
}
|
||||
|
||||
public function test_cannot_transfer_to_admin_user(): void
|
||||
{
|
||||
$admin = $this->makeAdmin();
|
||||
$admin2 = $this->makeAdmin();
|
||||
$owner = $this->makeUser();
|
||||
$project = $this->makeProject($owner);
|
||||
|
||||
$this->actingAs($admin)
|
||||
->post(route('admin.projects.transfer-owner', $project), [
|
||||
'new_owner_id' => $admin2->id,
|
||||
'justification' => 'Justifikasi yang sah untuk pemindahan projek ini.',
|
||||
])->assertForbidden();
|
||||
}
|
||||
|
||||
public function test_cannot_transfer_to_same_owner(): void
|
||||
{
|
||||
$admin = $this->makeAdmin();
|
||||
$owner = $this->makeUser();
|
||||
$project = $this->makeProject($owner);
|
||||
|
||||
$this->actingAs($admin)
|
||||
->post(route('admin.projects.transfer-owner', $project), [
|
||||
'new_owner_id' => $owner->id,
|
||||
'justification' => 'Justifikasi yang sah untuk pemindahan projek ini.',
|
||||
])->assertStatus(422);
|
||||
}
|
||||
|
||||
// -------------------------------------------------------
|
||||
// Audit Log Export
|
||||
// -------------------------------------------------------
|
||||
|
||||
public function test_admin_can_export_audit_log_csv(): void
|
||||
{
|
||||
$admin = $this->makeAdmin();
|
||||
|
||||
AuditLog::create([
|
||||
'actor_user_id' => $admin->id,
|
||||
'actor_role' => 'admin',
|
||||
'action' => 'user_created',
|
||||
'ip_address' => '127.0.0.1',
|
||||
'created_at' => now(),
|
||||
]);
|
||||
|
||||
$response = $this->actingAs($admin)
|
||||
->get(route('admin.audit-logs.export'));
|
||||
|
||||
$response->assertOk();
|
||||
$this->assertStringContainsString('text/csv', $response->headers->get('Content-Type'));
|
||||
$this->assertStringContainsString('audit-log-', $response->headers->get('Content-Disposition'));
|
||||
}
|
||||
|
||||
public function test_user_cannot_export_audit_log(): void
|
||||
{
|
||||
$user = $this->makeUser();
|
||||
|
||||
$this->actingAs($user)
|
||||
->get(route('admin.audit-logs.export'))
|
||||
->assertForbidden();
|
||||
}
|
||||
|
||||
public function test_audit_log_export_respects_filters(): void
|
||||
{
|
||||
$admin = $this->makeAdmin();
|
||||
|
||||
AuditLog::create([
|
||||
'actor_user_id' => $admin->id,
|
||||
'actor_role' => 'admin',
|
||||
'action' => 'user_activated',
|
||||
'ip_address' => '127.0.0.1',
|
||||
'created_at' => now(),
|
||||
]);
|
||||
|
||||
AuditLog::create([
|
||||
'actor_user_id' => $admin->id,
|
||||
'actor_role' => 'admin',
|
||||
'action' => 'user_deactivated',
|
||||
'ip_address' => '127.0.0.1',
|
||||
'created_at' => now(),
|
||||
]);
|
||||
|
||||
$response = $this->actingAs($admin)
|
||||
->get(route('admin.audit-logs.export', ['action' => 'user_activated']));
|
||||
|
||||
$response->assertOk();
|
||||
$content = $response->streamedContent();
|
||||
$this->assertStringContainsString('user_activated', $content);
|
||||
$this->assertStringNotContainsString('user_deactivated', $content);
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user