72a0a57f0e
- Gate volume backup retention and S3 controls by update permission - Preserve backup records when S3 deletion fails - Share SFTP download streaming with consistent missing-file handling - Handle schedule creation errors and link service database backups
62 lines
3.4 KiB
PHP
62 lines
3.4 KiB
PHP
<?php
|
|
|
|
use Illuminate\Foundation\Testing\RefreshDatabase;
|
|
|
|
uses(RefreshDatabase::class);
|
|
|
|
it('keeps mutable Livewire components behind authorization checks', function (string $path, array $requiredNeedles) {
|
|
$source = file_get_contents(base_path($path));
|
|
|
|
foreach ($requiredNeedles as $needle) {
|
|
expect($source)->toContain($needle);
|
|
}
|
|
})->with([
|
|
'storage resources' => [
|
|
'app/Livewire/Storage/Resources.php',
|
|
['AuthorizesRequests', "authorize('update'", "authorize('view'"],
|
|
],
|
|
'postgres init script editor' => [
|
|
'app/Livewire/Project/Database/InitScript.php',
|
|
['AuthorizesRequests', "authorize('update'"],
|
|
],
|
|
'execute container command' => [
|
|
'app/Livewire/Project/Shared/ExecuteContainerCommand.php',
|
|
['AuthorizesRequests', "authorize('view'", "authorize('canAccessTerminal'"],
|
|
],
|
|
'terminal' => [
|
|
'app/Livewire/Project/Shared/Terminal.php',
|
|
['AuthorizesRequests', "authorize('view'", "authorize('canAccessTerminal'"],
|
|
],
|
|
]);
|
|
|
|
it('authorizes every volume backup form control', function (string $path, array $controlPatterns) {
|
|
$source = file_get_contents(base_path($path));
|
|
|
|
foreach ($controlPatterns as $controlPattern) {
|
|
expect($source)->toMatch($controlPattern);
|
|
}
|
|
})->with([
|
|
'retention controls' => [
|
|
'resources/views/livewire/project/shared/storages/volume-backups/retention.blade.php',
|
|
[
|
|
'/<x-forms\.button(?=[^>]*type="submit")(?=[^>]*canGate="update")(?=[^>]*:canResource="\$backup")[^>]*>Save<\/x-forms\.button>/s',
|
|
'/<x-forms\.input(?=[^>]*id="retentionAmountLocally")(?=[^>]*canGate="update")(?=[^>]*:canResource="\$backup")[^>]*\/\>/s',
|
|
'/<x-forms\.input(?=[^>]*id="retentionDaysLocally")(?=[^>]*canGate="update")(?=[^>]*:canResource="\$backup")[^>]*\/\>/s',
|
|
'/<x-forms\.input(?=[^>]*id="retentionMaxStorageLocally")(?=[^>]*canGate="update")(?=[^>]*:canResource="\$backup")[^>]*\/\>/s',
|
|
'/<x-forms\.input(?=[^>]*id="retentionAmountS3")(?=[^>]*canGate="update")(?=[^>]*:canResource="\$backup")[^>]*\/\>/s',
|
|
'/<x-forms\.input(?=[^>]*id="retentionDaysS3")(?=[^>]*canGate="update")(?=[^>]*:canResource="\$backup")[^>]*\/\>/s',
|
|
'/<x-forms\.input(?=[^>]*id="retentionMaxStorageS3")(?=[^>]*canGate="update")(?=[^>]*:canResource="\$backup")[^>]*\/\>/s',
|
|
],
|
|
],
|
|
'S3 controls' => [
|
|
'resources/views/livewire/project/shared/storages/volume-backups/s3.blade.php',
|
|
[
|
|
'/<x-forms\.button(?=[^>]*type="submit")(?=[^>]*canGate="update")(?=[^>]*:canResource="\$backup")[^>]*>Save<\/x-forms\.button>/s',
|
|
'/<x-forms\.button(?=[^>]*wire:click="toggleS3")(?=[^>]*canGate="update")(?=[^>]*:canResource="\$backup")[^>]*>Enable S3<\/x-forms\.button>/s',
|
|
'/<x-forms\.button(?=[^>]*wire:click="toggleS3")(?=[^>]*canGate="update")(?=[^>]*:canResource="\$backup")[^>]*>Disable S3<\/x-forms\.button>/s',
|
|
'/<x-forms\.select(?=[^>]*id="s3StorageId")(?=[^>]*canGate="update")(?=[^>]*:canResource="\$backup")[^>]*>/s',
|
|
'/<x-forms\.checkbox(?=[^>]*id="disableLocalBackup")(?=[^>]*instantSave)(?=[^>]*canGate="update")(?=[^>]*:canResource="\$backup")[^>]*\/\>/s',
|
|
'/<x-forms\.checkbox(?=[^>]*id="disableLocalBackup")(?=[^>]*disabled)(?=[^>]*canGate="update")(?=[^>]*:canResource="\$backup")[^>]*\/\>/s',
|
|
],
|
|
],
|
|
]);
|