recht: Meldeverfahren v2 Phasen 1-4 — Re-Sync-Sperre, Anonymisierung, Magic-Link-Intake, Self-Service-Korrektur
Phase 1: sync_locked_at auf press_releases (Importer überspringt gesperrte PMs auch bei --force), LegalRequest um Verifikation/Ausführung erweitert, verschlüsselte Vorher-Snapshots mit Löschfrist (snapshots:purge, täglich). Phase 2: AnonymizationService (Unicode-Wortgrenzen-Schwärzung, Pflicht-Diff, transaktionale Ausführung mit Snapshot, Kontakt-Detach, Bild-Löschung, Sitemap-Invalidierung, Verlauf ohne Klartext-Altwerte); Admin-Queue kann DSGVO-Anfragen anonymisieren oder depublizieren, inkl. Snapshot-Restore. Phase 3: Deflektions-Trichter „PM melden/ändern" (melden/pm) mit Kosten- Tabelle vorab; Magic-Link geht nur an die hinterlegte Pressekontaktadresse (neuer purpose press_release_report), atomare Verifikation, Anliegen-Auswahl erzeugt verifizierte Queue-Anfragen; toter-Kanal-Fallback; Owner-Einstieg. Phase 4: Panel-Abschnitt „Änderung & Korrektur" — Levenshtein-Gate (5 %, Mini-Edit-Ausnahme ≤ 2 Zeichen) stuft klein/groß ein; kleine Korrektur kostenlos sofort live (Snapshot, Sperre, Verlauf, Re-Score), größere als Change-Anfrage (Interim bis 10-€-Checkout, Phase 7). Entwicklungsplan mit Entscheidungen E1-E8 und offenen Punkten in docs/Decision-Update; 41 Pest-Tests (tests/Feature/Legal) grün. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
This commit is contained in:
parent
58c0cc3f23
commit
b4b2e013d6
42 changed files with 3868 additions and 1 deletions
200
tests/Feature/Legal/SyncLockTest.php
Normal file
200
tests/Feature/Legal/SyncLockTest.php
Normal file
|
|
@ -0,0 +1,200 @@
|
|||
<?php
|
||||
|
||||
use App\Enums\ActivityType;
|
||||
use App\Models\ActivityEvent;
|
||||
use App\Models\Category;
|
||||
use App\Models\LegacyImportMap;
|
||||
use App\Models\PressRelease;
|
||||
use App\Models\PressReleaseRedactionSnapshot;
|
||||
use App\Models\User;
|
||||
use App\Services\Import\ImportContext;
|
||||
use App\Services\Import\PressReleaseImporter;
|
||||
use Illuminate\Database\Schema\Blueprint;
|
||||
use Illuminate\Support\Facades\Config;
|
||||
use Illuminate\Support\Facades\DB;
|
||||
use Illuminate\Support\Facades\Schema;
|
||||
use Tests\TestCase;
|
||||
|
||||
/**
|
||||
* Minimales Legacy-Schema + Import-Map (Kategorie/User), damit der Importer
|
||||
* eine PM auflösen kann — analog LegacyPressReleaseDateImportTest, eigener
|
||||
* Helper wegen globalem Pest-Funktionsnamensraum.
|
||||
*/
|
||||
function seedSyncLockLegacySchema(): void
|
||||
{
|
||||
Config::set('database.connections.mysql_presseecho', [
|
||||
'driver' => 'sqlite',
|
||||
'database' => ':memory:',
|
||||
'prefix' => '',
|
||||
'foreign_key_constraints' => false,
|
||||
]);
|
||||
|
||||
DB::purge('mysql_presseecho');
|
||||
|
||||
Schema::connection('mysql_presseecho')->create('press_release', function (Blueprint $table): void {
|
||||
$table->integer('id')->primary();
|
||||
$table->string('title')->nullable();
|
||||
$table->string('language')->nullable();
|
||||
$table->text('text')->nullable();
|
||||
$table->string('backlink_url')->nullable();
|
||||
$table->integer('category_id')->nullable();
|
||||
$table->string('keywords')->nullable();
|
||||
$table->integer('user_id')->nullable();
|
||||
$table->integer('company_id')->nullable();
|
||||
$table->string('status')->nullable();
|
||||
$table->integer('hits')->nullable();
|
||||
$table->integer('teaser_begin')->nullable();
|
||||
$table->integer('teaser_end')->nullable();
|
||||
$table->boolean('no_export')->nullable();
|
||||
$table->dateTime('created_at')->nullable();
|
||||
$table->dateTime('updated_at')->nullable();
|
||||
$table->string('slug')->nullable();
|
||||
});
|
||||
|
||||
Schema::connection('mysql_presseecho')->create('press_release_image', function (Blueprint $table): void {
|
||||
$table->integer('id')->primary();
|
||||
$table->integer('press_release_id');
|
||||
});
|
||||
|
||||
Schema::connection('mysql_presseecho')->create('press_release_contact', function (Blueprint $table): void {
|
||||
$table->integer('press_release_id');
|
||||
$table->integer('contact_id');
|
||||
});
|
||||
|
||||
$category = Category::factory()->withTranslations()->create();
|
||||
|
||||
LegacyImportMap::query()->create([
|
||||
'legacy_portal' => 'presseecho',
|
||||
'legacy_table' => 'category',
|
||||
'legacy_id' => 500,
|
||||
'target_table' => 'categories',
|
||||
'target_id' => $category->id,
|
||||
]);
|
||||
|
||||
$author = User::factory()->create();
|
||||
|
||||
LegacyImportMap::query()->create([
|
||||
'legacy_portal' => 'presseecho',
|
||||
'legacy_table' => 'sf_guard_user',
|
||||
'legacy_id' => 700,
|
||||
'target_table' => 'users',
|
||||
'target_id' => $author->id,
|
||||
]);
|
||||
}
|
||||
|
||||
test('lockSync stamps the press release, logs the event and is idempotent', function () {
|
||||
/** @var TestCase $this */
|
||||
$pressRelease = PressRelease::factory()->published()->create();
|
||||
|
||||
$pressRelease->lockSync('DSGVO-Anonymisierung M-1');
|
||||
|
||||
expect($pressRelease->isSyncLocked())->toBeTrue()
|
||||
->and($pressRelease->sync_locked_at)->not->toBeNull()
|
||||
->and($pressRelease->sync_lock_reason)->toBe('DSGVO-Anonymisierung M-1');
|
||||
|
||||
$firstLockedAt = $pressRelease->sync_locked_at;
|
||||
|
||||
$this->travel(1)->hours();
|
||||
$pressRelease->lockSync('Zweiter Versuch');
|
||||
$this->travelBack();
|
||||
|
||||
$pressRelease->refresh();
|
||||
|
||||
expect($pressRelease->sync_locked_at->equalTo($firstLockedAt))->toBeTrue()
|
||||
->and($pressRelease->sync_lock_reason)->toBe('DSGVO-Anonymisierung M-1');
|
||||
|
||||
$event = ActivityEvent::query()->where('type', ActivityType::SyncLock->value)->sole();
|
||||
|
||||
expect($event->subject_id)->toBe($pressRelease->id)
|
||||
->and($event->description)->toContain('DSGVO-Anonymisierung M-1');
|
||||
});
|
||||
|
||||
test('the importer skips a sync-locked press release even with force', function () {
|
||||
/** @var TestCase $this */
|
||||
seedSyncLockLegacySchema();
|
||||
|
||||
DB::connection('mysql_presseecho')->table('press_release')->insert([
|
||||
'id' => 42,
|
||||
'title' => 'Originaltitel mit Klarname',
|
||||
'language' => 'de',
|
||||
'text' => 'Text mit Klarname',
|
||||
'category_id' => 500,
|
||||
'user_id' => 700,
|
||||
'status' => 'published',
|
||||
'no_export' => false,
|
||||
'created_at' => '2019-05-01 08:00:00',
|
||||
'updated_at' => '2019-05-01 08:00:00',
|
||||
'slug' => 'original',
|
||||
]);
|
||||
|
||||
// Erstimport, dann Mutation über das Meldeverfahren (Schwärzung) + Sperre.
|
||||
app(PressReleaseImporter::class)->run(new ImportContext('presseecho', false, true));
|
||||
|
||||
$pressRelease = PressRelease::withoutGlobalScopes()
|
||||
->where('legacy_portal', 'presseecho')->where('legacy_id', 42)->firstOrFail();
|
||||
$pressRelease->forceFill(['title' => 'Geschwärzter Titel'])->save();
|
||||
$pressRelease->lockSync('DSGVO-Anonymisierung');
|
||||
|
||||
// Force-Re-Import darf die Schwärzung nicht überschreiben.
|
||||
$result = app(PressReleaseImporter::class)->run(new ImportContext('presseecho', false, true));
|
||||
|
||||
$pressRelease->refresh();
|
||||
|
||||
expect($pressRelease->title)->toBe('Geschwärzter Titel')
|
||||
->and($result->skipped())->toBe(1)
|
||||
->and($result->updated())->toBe(0);
|
||||
});
|
||||
|
||||
test('an unlocked press release is still updated by a force re-import', function () {
|
||||
/** @var TestCase $this */
|
||||
seedSyncLockLegacySchema();
|
||||
|
||||
DB::connection('mysql_presseecho')->table('press_release')->insert([
|
||||
'id' => 43,
|
||||
'title' => 'Unveränderte Meldung',
|
||||
'language' => 'de',
|
||||
'text' => 'Inhalt',
|
||||
'category_id' => 500,
|
||||
'user_id' => 700,
|
||||
'status' => 'published',
|
||||
'no_export' => false,
|
||||
'created_at' => '2019-05-01 08:00:00',
|
||||
'updated_at' => '2019-05-01 08:00:00',
|
||||
'slug' => 'unveraendert',
|
||||
]);
|
||||
|
||||
app(PressReleaseImporter::class)->run(new ImportContext('presseecho', false, true));
|
||||
$result = app(PressReleaseImporter::class)->run(new ImportContext('presseecho', false, true));
|
||||
|
||||
expect($result->updated())->toBe(1)
|
||||
->and($result->skipped())->toBe(0);
|
||||
});
|
||||
|
||||
test('a redaction snapshot encrypts the previous values and gets a purge date from config', function () {
|
||||
/** @var TestCase $this */
|
||||
config()->set('legal.snapshot_retention_days', 30);
|
||||
|
||||
$pressRelease = PressRelease::factory()->published()->create();
|
||||
|
||||
$snapshot = PressReleaseRedactionSnapshot::capture($pressRelease, [
|
||||
'title' => 'Klarname Max Mustermann',
|
||||
]);
|
||||
|
||||
// Klartext darf nie unverschlüsselt in der Datenbank liegen.
|
||||
$raw = DB::table('press_release_redaction_snapshots')
|
||||
->where('id', $snapshot->id)
|
||||
->value('encrypted_before');
|
||||
|
||||
expect($raw)->not->toContain('Max Mustermann')
|
||||
->and($snapshot->encrypted_before['title'])->toBe('Klarname Max Mustermann')
|
||||
->and($snapshot->purge_after->toDateString())->toBe(now()->addDays(30)->toDateString());
|
||||
});
|
||||
|
||||
test('the due-for-purge scope only matches snapshots past their purge date', function () {
|
||||
/** @var TestCase $this */
|
||||
$due = PressReleaseRedactionSnapshot::factory()->dueForPurge()->create();
|
||||
PressReleaseRedactionSnapshot::factory()->create();
|
||||
|
||||
expect(PressReleaseRedactionSnapshot::query()->dueForPurge()->pluck('id')->all())
|
||||
->toBe([$due->id]);
|
||||
});
|
||||
Loading…
Add table
Add a link
Reference in a new issue