Don't allow self-downgrade if no other admins on team

app/Http/Controllers/TeamController.php

@@ -7,6 +7,7 @@
 use App\Http\Requests\TeamUpdateRequest;
 use App\Models\Team;
 use Illuminate\Http\Request;
+use Spatie\Permission\Models\Role;
 
 class TeamController extends Controller
 {
@@ -20,7 +21,8 @@ public function setCurrent(SetCurrentTeamRequest $request, Team $team)
     public function edit(Request $request)
     {
         return view('team.edit', [
-            'team' => $request->user()->currentTeam
+            'team' => $request->user()->currentTeam->load(['members.roles', 'invites.team']),
+            'roles' => Role::get()
         ]);
     }
 

app/Policies/TeamPolicy.php

@@ -64,6 +64,12 @@ public function revokeInvite(User $user, Team $team)
 
     public function changeMemberRole(User $user, Team $team, User $member)
     {
+        if ($user->id === $member->id) {
+            return $team->members->filter(function ($teamMember) {
+                    return $teamMember->hasRole('team admin');
+                })->count() >= 2;
+        }
+
         if ($team->members->doesntContain($member)) {
             return false;
         }

resources/views/components/team-member-item.blade.php

@@ -57,7 +57,7 @@
                     <x-input-label for="role" value="Role" class="sr-only" />
 
                     <x-select-input class="w-full" name="role" id="role">
-                        @foreach(Role::get() as $role)
+                        @foreach($roles as $role)
                             <option value="{{ $role->name }}" @selected($member->hasRole($role))>{{ $role->name }}</option>
                         @endforeach
                     </x-select-input>

resources/views/team/partials/team-members.blade.php

@@ -12,7 +12,7 @@
     <div class="mt-6">
         <ul class="divide-y divide-gray-100">
             @foreach($team->members as $member)
-                <x-team-member-item :team="$team" :member="$member" />
+                <x-team-member-item :team="$team" :member="$member" :roles="$roles" />
             @endforeach
         </ul>
 

tests/Feature/Controllers/TeamMemberControllerTest.php

@@ -70,6 +70,42 @@
         ->and($member->roles->count())->toBe(1);
 });
 
+it('can not downgrade own role if no other team admin', function () {
+    $user = User::factory()->create();
+
+    setPermissionsTeamId($user->currentTeam->id);
+
+    actingAs($user)
+        ->patch(route('team.members.update', [$user->currentTeam, $user]), [
+            'role' => 'team member',
+        ])
+        ->assertForbidden();
+
+    expect($user->fresh()->hasRole('team admin'))
+        ->toBeTrue();
+});
+
+it('can downgrade own role if there is another team admin', function () {
+    $user = User::factory()->create();
+
+    $user->currentTeam->members()->attach(
+        $anotherAdmin = User::factory()->createQuietly()
+    );
+
+    $anotherAdmin->assignRole('team admin');
+
+    setPermissionsTeamId($user->currentTeam->id);
+
+    actingAs($user)
+        ->patch(route('team.members.update', [$user->currentTeam, $user]), [
+            'role' => 'team member',
+        ])
+        ->assertRedirect();
+
+    expect($user->fresh()->hasRole('team member'))
+        ->toBeTrue();
+});
+
 it('only updates role if provided', function () {
     $user = User::factory()->create();