base commit

tests/Feature/Policies/DepartmentPolicyTest.php

@@ -0,0 +1,41 @@
+<?php
+
+declare(strict_types=1);
+
+use App\Models\Department;
+
+beforeEach(function (): void {
+    seedRoles();
+});
+
+it('allows viewers to read departments but not modify them', function (): void {
+    $viewer = createUserWithRole('viewer');
+    $department = Department::factory()->create();
+
+    expect($viewer->can('viewAny', Department::class))->toBeTrue()
+        ->and($viewer->can('view', $department))->toBeTrue()
+        ->and($viewer->can('create', Department::class))->toBeFalse()
+        ->and($viewer->can('update', $department))->toBeFalse()
+        ->and($viewer->can('delete', $department))->toBeFalse();
+});
+
+it('grants administrators full department access', function (): void {
+    $admin = createUserWithRole('administrator');
+    $department = Department::factory()->create();
+
+    expect($admin->can('viewAny', Department::class))->toBeTrue()
+        ->and($admin->can('view', $department))->toBeTrue()
+        ->and($admin->can('create', Department::class))->toBeTrue()
+        ->and($admin->can('update', $department))->toBeTrue()
+        ->and($admin->can('delete', $department))->toBeTrue();
+});
+
+it('grants super admin full department access', function (): void {
+    $superAdmin = createAdminUser();
+    $department = Department::factory()->create();
+
+    expect($superAdmin->can('viewAny', Department::class))->toBeTrue()
+        ->and($superAdmin->can('create', Department::class))->toBeTrue()
+        ->and($superAdmin->can('update', $department))->toBeTrue()
+        ->and($superAdmin->can('delete', $department))->toBeTrue();
+});