61 lines
2.0 KiB
PHP
61 lines
2.0 KiB
PHP
|
<?php
|
||
|
|
|
||
|
|
namespace Activity;
|
||
|
|
|
||
|
|
use BookStack\Activity\ActivityType;
|
||
|
|
use BookStack\Facades\Activity;
|
||
|
|
use Tests\Api\TestsApi;
|
||
|
|
use Tests\TestCase;
|
||
|
|
|
||
|
|
class AuditLogApiTest extends TestCase
|
||
|
|
{
|
||
|
|
use TestsApi;
|
||
|
|
|
||
|
|
public function test_user_and_settings_manage_permissions_needed()
|
||
|
|
{
|
||
|
|
$editor = $this->users->editor();
|
||
|
|
|
||
|
|
$assertPermissionErrorOnCall = function () use ($editor) {
|
||
|
|
$resp = $this->actingAsForApi($editor)->getJson('/api/audit-log');
|
||
|
|
$resp->assertStatus(403);
|
||
|
|
$resp->assertJson($this->permissionErrorResponse());
|
||
|
|
};
|
||
|
|
|
||
|
|
$assertPermissionErrorOnCall();
|
||
|
|
$this->permissions->grantUserRolePermissions($editor, ['users-manage']);
|
||
|
|
$assertPermissionErrorOnCall();
|
||
|
|
$this->permissions->removeUserRolePermissions($editor, ['users-manage']);
|
||
|
|
$this->permissions->grantUserRolePermissions($editor, ['settings-manage']);
|
||
|
|
$assertPermissionErrorOnCall();
|
||
|
|
|
||
|
|
$this->permissions->grantUserRolePermissions($editor, ['settings-manage', 'users-manage']);
|
||
|
|
$resp = $this->actingAsForApi($editor)->getJson('/api/audit-log');
|
||
|
|
$resp->assertOk();
|
||
|
|
}
|
||
|
|
|
||
|
|
public function test_index_endpoint_returns_expected_data()
|
||
|
|
{
|
||
|
|
$page = $this->entities->page();
|
||
|
|
$admin = $this->users->admin();
|
||
|
|
$this->actingAsForApi($admin);
|
||
|
|
Activity::add(ActivityType::PAGE_UPDATE, $page);
|
||
|
|
|
||
|
|
$resp = $this->get("/api/audit-log?filter[loggable_id]={$page->id}");
|
||
|
|
$resp->assertJson(['data' => [
|
||
|
|
[
|
||
|
|
'type' => 'page_update',
|
||
|
|
'detail' => "({$page->id}) {$page->name}",
|
||
|
|
'user_id' => $admin->id,
|
||
|
|
'loggable_id' => $page->id,
|
||
|
|
'loggable_type' => 'page',
|
||
|
|
'ip' => '127.0.0.1',
|
||
|
|
'user' => [
|
||
|
|
'id' => $admin->id,
|
||
|
|
'name' => $admin->name,
|
||
|
|
'slug' => $admin->slug,
|
||
|
|
],
|
||
|
|
]
|
||
|
|
]]);
|
||
|
|
}
|
||
|
|
}
|