feat: rename ROLE_ADMIN to ROLE_TEAM_ADMIN since being too broad

This commit is contained in:
2026-09-16 17:20:45 +02:00
parent 39a343911a
commit d4908b6ab9
75 changed files with 212 additions and 180 deletions
+3 -3
View File
@@ -51,7 +51,7 @@ class BpnAuthenticatorTest extends TestCase
public function testExistingUserWithoutClaimedRolesIsBlockedAndReturned(): void
{
$user = (new User())->setRoles(['ROLE_ADMIN']);
$user = (new User())->setRoles(['ROLE_TEAM_ADMIN']);
$this->stubApiClient($this->createCrmAttributes());
@@ -76,7 +76,7 @@ class BpnAuthenticatorTest extends TestCase
*/
public function testResponseWithoutAttributeGroupsRefusesTheLoginWithoutBlocking(): void
{
$user = (new User())->setRoles(['ROLE_ADMIN']);
$user = (new User())->setRoles(['ROLE_TEAM_ADMIN']);
// an empty payload carries no roles either and must not read as a revocation
$this->stubApiClient(new CrmAttributesResponse());
@@ -93,7 +93,7 @@ class BpnAuthenticatorTest extends TestCase
} catch (UserNotFoundException) {
}
$this->assertSame(['ROLE_ADMIN'], $user->getAssignedRoles());
$this->assertSame(['ROLE_TEAM_ADMIN'], $user->getAssignedRoles());
}
/**