actingAs(User::factory()->create()) ->get(route('users.show', User::factory()->create())) ->assertStatus(403); } public function testCanViewUser() { $actor = User::factory()->viewUsers()->create(); $this->actingAs($actor) ->get(route('users.show', User::factory()->create())) ->assertOk() ->assertStatus(200); } public function testCannotViewUserFromAnotherCompany() { $this->settings->enableMultipleFullCompanySupport(); [$companyA, $companyB] = Company::factory()->count(2)->create(); $actor = User::factory()->for($companyA)->viewUsers()->create(); $user = User::factory()->for($companyB)->create(); $this->actingAs($actor) ->get(route('users.show', $user)) ->assertStatus(302); } }