I have controller Post
with typical CRUD method's. I have a PostPolicy, in which:
public function destroy(User $user, Post $post)
{
$user->id === $post->author_id;
}
I want to write test for this. When I check if user delete his own post - all OK.
But when I test if other user user can delete not his own post, laravel test send error:
Illuminate\Auth\Access\AuthorizationException: This action is unauthorized.
How bypass it or which has another method for write this test?
Code
$user = factory(User::class)->create([
'id' => 3,
'role_id' => 2
]);
factory(Post::class)->create([
'id' => 30,
'editor_id' => 2,
]);
$this->delete('/api/posts/30', [], [
'authorization' => "Bearer {$user->api_token}",
'accept' => 'application/json',
])->assertJson([
]);;
via Chebli Mohamed
Aucun commentaire:
Enregistrer un commentaire