policy = new {{ClassName}}(); } #[Test] public function it_allows_authorized_user_to_perform_action(): void { // 1. Arrange: User sở hữu tài nguyên hoặc có quyền hạn $user = new User(); $user->id = 1; $resource = new \stdClass(); $resource->user_id = 1; // 2. Act $result = $this->policy->view($user, $resource); // 3. Assert $this->assertTrue($result); } #[Test] public function it_denies_unauthorized_user_from_performing_action(): void { // 1. Arrange: User khác không có quyền hạn $user = new User(); $user->id = 2; $resource = new \stdClass(); $resource->user_id = 1; // 2. Act $result = $this->policy->update($user, $resource); // 3. Assert $this->assertFalse($result); } }