Poprawka przy usuwaniu/edycji uzytkownika

resources/views/users/edit.blade.php

@@ -67,8 +67,11 @@
                                         {{ __('Anuluj') }}
                                     </a>
                                 </div>
+                            </div>
+                        </form>
 
                         @if(auth()->id() !== $user->id)
+                            <div class="mt-6 flex justify-end">
                                 <form method="POST" action="{{ route('users.destroy', $user) }}" onsubmit="return confirm('Czy na pewno chcesz usunąć tego użytkownika?');">
                                     @csrf
                                     @method('DELETE')
@@ -76,9 +79,8 @@
                                         {{ __('Usuń użytkownika') }}
                                     </button>
                                 </form>
-                                @endif
                             </div>
-                        </form>
+                        @endif
                     </section>
                 </div>
             </div>

tests/Feature/UserSoftDeleteTest.php

@@ -42,3 +42,24 @@ test('deleted users can be listed and restored', function () {
     $restoreResponse->assertRedirect(route('users.deleted'));
     $this->assertNull($user->fresh()->deleted_at);
 });
+
+test('edit page does not render nested forms for user actions', function () {
+    Permission::firstOrCreate(['name' => 'users_access']);
+
+    $admin = User::factory()->create();
+    $adminRole = Role::firstOrCreate(['name' => 'admin']);
+    $admin->assignRole($adminRole);
+    $admin->givePermissionTo('users_access');
+
+    $user = User::factory()->create();
+
+    $response = $this->actingAs($admin)->get('/users/' . $user->id . '/edit');
+    $response->assertOk();
+
+    $html = $response->getContent();
+
+    $this->assertDoesNotMatchRegularExpression(
+        '/<form[^>]*action="[^"]*\/users\/' . preg_quote((string) $user->id, '/') . '[^"]*"[^>]*>(?:(?!<\/form>).)*<form\b/s',
+        $html
+    );
+});