feat: Permettre la consultation et gestion des droits à l'image des élèves

Les administrateurs et enseignants ont besoin de consulter et gérer les autorisations de droit à l'image des élèves pour respecter la réglementation lors de publications contenant des photos (FR82). Cette fonctionnalité ajoute une page dédiée avec liste filtrable par statut, modification individuelle via dropdown, export CSV avec BOM UTF-8 pour Excel, et préparation du système d'avertissement avant publication (query/handler prêts, intégration à faire quand le module publication existera). Le filtrage par classe (AC2) est bloqué en attente d'une table d'affectation élève↔classe qui n'existe pas encore.
2026-02-19 13:35:14 +01:00
parent 67734e4de3
commit 1b8bd6cd78
39 changed files with 3264 additions and 19 deletions
--- a/backend/tests/Unit/Administration/Application/Query/GetStudentsImageRights/GetStudentsImageRightsHandlerTest.php
+++ b/backend/tests/Unit/Administration/Application/Query/GetStudentsImageRights/GetStudentsImageRightsHandlerTest.php
@@ -0,0 +1,144 @@
+<?php
+
+declare(strict_types=1);
+
+namespace App\Tests\Unit\Administration\Application\Query\GetStudentsImageRights;
+
+use App\Administration\Application\Query\GetStudentsImageRights\GetStudentsImageRightsHandler;
+use App\Administration\Application\Query\GetStudentsImageRights\GetStudentsImageRightsQuery;
+use App\Administration\Domain\Model\User\Email;
+use App\Administration\Domain\Model\User\ImageRightsStatus;
+use App\Administration\Domain\Model\User\Role;
+use App\Administration\Domain\Model\User\User;
+use App\Administration\Domain\Model\User\UserId;
+use App\Administration\Infrastructure\Persistence\InMemory\InMemoryUserRepository;
+use App\Shared\Domain\Tenant\TenantId;
+use DateTimeImmutable;
+use PHPUnit\Framework\Attributes\Test;
+use PHPUnit\Framework\TestCase;
+
+final class GetStudentsImageRightsHandlerTest extends TestCase
+{
+    private const string TENANT_ID = '550e8400-e29b-41d4-a716-446655440002';
+
+    private InMemoryUserRepository $userRepository;
+    private GetStudentsImageRightsHandler $handler;
+
+    protected function setUp(): void
+    {
+        $this->userRepository = new InMemoryUserRepository();
+        $this->handler = new GetStudentsImageRightsHandler($this->userRepository);
+    }
+
+    #[Test]
+    public function returnsOnlyStudents(): void
+    {
+        $this->seedStudentsAndParent();
+
+        $query = new GetStudentsImageRightsQuery(tenantId: self::TENANT_ID);
+        $result = ($this->handler)($query);
+
+        self::assertCount(2, $result);
+    }
+
+    #[Test]
+    public function filtersStudentsByStatus(): void
+    {
+        $this->seedStudentsAndParent();
+
+        $query = new GetStudentsImageRightsQuery(
+            tenantId: self::TENANT_ID,
+            status: 'authorized',
+        );
+        $result = ($this->handler)($query);
+
+        self::assertCount(1, $result);
+        self::assertSame('authorized', $result[0]->imageRightsStatus);
+    }
+
+    #[Test]
+    public function returnsEmptyForNoStudents(): void
+    {
+        $query = new GetStudentsImageRightsQuery(tenantId: self::TENANT_ID);
+        $result = ($this->handler)($query);
+
+        self::assertCount(0, $result);
+    }
+
+    #[Test]
+    public function doesNotReturnStudentsFromOtherTenant(): void
+    {
+        $this->seedStudentsAndParent();
+
+        $query = new GetStudentsImageRightsQuery(
+            tenantId: '550e8400-e29b-41d4-a716-446655440099',
+        );
+        $result = ($this->handler)($query);
+
+        self::assertCount(0, $result);
+    }
+
+    #[Test]
+    public function returnsDtoWithCorrectFields(): void
+    {
+        $this->seedStudentsAndParent();
+
+        $query = new GetStudentsImageRightsQuery(
+            tenantId: self::TENANT_ID,
+            status: 'authorized',
+        );
+        $result = ($this->handler)($query);
+
+        self::assertCount(1, $result);
+        $dto = $result[0];
+        self::assertSame('Alice', $dto->firstName);
+        self::assertSame('Dupont', $dto->lastName);
+        self::assertSame('authorized', $dto->imageRightsStatus);
+        self::assertSame('Autorisé', $dto->imageRightsStatusLabel);
+    }
+
+    private function seedStudentsAndParent(): void
+    {
+        $student1 = User::inviter(
+            email: new Email('alice@example.com'),
+            role: Role::ELEVE,
+            tenantId: TenantId::fromString(self::TENANT_ID),
+            schoolName: 'École Alpha',
+            firstName: 'Alice',
+            lastName: 'Dupont',
+            invitedAt: new DateTimeImmutable('2026-01-15'),
+            dateNaissance: new DateTimeImmutable('2012-06-15'),
+        );
+        $student1->modifierDroitImage(
+            ImageRightsStatus::AUTHORIZED,
+            UserId::fromString('550e8400-e29b-41d4-a716-446655440099'),
+            new DateTimeImmutable('2026-02-01'),
+        );
+
+        $student2 = User::inviter(
+            email: new Email('bob@example.com'),
+            role: Role::ELEVE,
+            tenantId: TenantId::fromString(self::TENANT_ID),
+            schoolName: 'École Alpha',
+            firstName: 'Bob',
+            lastName: 'Martin',
+            invitedAt: new DateTimeImmutable('2026-01-15'),
+            dateNaissance: new DateTimeImmutable('2013-03-20'),
+        );
+        // Bob has default NOT_SPECIFIED
+
+        $parent = User::inviter(
+            email: new Email('parent@example.com'),
+            role: Role::PARENT,
+            tenantId: TenantId::fromString(self::TENANT_ID),
+            schoolName: 'École Alpha',
+            firstName: 'Pierre',
+            lastName: 'Dupont',
+            invitedAt: new DateTimeImmutable('2026-01-15'),
+        );
+
+        $this->userRepository->save($student1);
+        $this->userRepository->save($student2);
+        $this->userRepository->save($parent);
+    }
+}