apachesolr_access.test in Apache Solr Search 7

Unit tests for the access control functionalities that are added by apachesolr_access.

File

apachesolr_access/tests/apachesolr_access.test

<?php

/**
 * @file
 *   Unit tests for the access control functionalities that are added by
 *   apachesolr_access.
 */
class DrupalApacheSolrNodeAccess extends DrupalWebTestCase {

  /**
   * Gets Information about the DrupalApacheSolrNodeAccess test
   *
   * @return array
   *   Information such as name, description and group it belongs to
   */
  public static function getInfo() {
    return array(
      'name' => 'Node Access',
      'description' => 'Test Access Control',
      'group' => 'ApacheSolr',
    );
  }

  /**
   * Defines what is required to start the DrupalApacheSolrNodeAccess test.
   */
  function setUp() {
    parent::setUp('node_access_test', 'apachesolr', 'apachesolr_search', 'apachesolr_access');

    // Create a basic user, which is subject to moderation.
    $permissions = array(
      'access content',
      'create page content',
      'edit own page content',
      'create article content',
      'edit own article content',
    );
    $this->basic_user = $this
      ->drupalCreateUser($permissions);

    // Create an admin user.
    $permissions = array(
      'access content',
      'search content',
      'administer nodes',
      'administer search',
      'access administration pages',
    );
    $this->admin_user = $this
      ->drupalCreateUser($permissions);
  }

  /**
   * Tests indexing and check if it adds the correct grants for those specific users
   */
  function testIndexing() {
    $basic_user = $this->basic_user;

    // Login as basic user to perform initial content creation.

    //Create 2 nodes
    $edit = array();
    $edit['uid'] = $basic_user->uid;
    $role_restricted_node = $this
      ->drupalCreateNode($edit);
    $edit = array();
    $edit['uid'] = $basic_user->uid;
    $author_restricted_node = $this
      ->drupalCreateNode($edit);

    // Delete the generic node access grant for all nodes.
    db_delete('node_access')
      ->condition('nid', '0')
      ->execute();
    $roles = array_keys($basic_user->roles);

    // The assigned role will be the last in the array.
    $assigned_role = end($roles);
    $role_grant = array(
      'gid' => $assigned_role,
      'realm' => 'nodeaccess_rid',
      'grant_view' => '1',
      'grant_update' => '0',
      'grant_delete' => '0',
    );
    node_access_write_grants($role_restricted_node, array(
      $role_grant,
    ));
    $author_grant = array(
      'gid' => $basic_user->uid,
      'realm' => 'nodeaccess_author',
      'grant_view' => '1',
      'grant_update' => '0',
      'grant_delete' => '0',
    );
    node_access_write_grants($author_restricted_node, array(
      $author_grant,
    ));

    // This loads the document class too.
    $env_id = apachesolr_default_environment();
    $solr = apachesolr_get_solr($env_id);
    $document = new ApacheSolrDocument();
    apachesolr_access_apachesolr_index_document_build_node($document, $role_restricted_node, $env_id);
    $field = 'access_node_' . apachesolr_site_hash() . '_nodeaccess_rid';
    $this
      ->assertEqual($document->{$field}[0], $assigned_role, 'Solr Document being indexed is restricted by the proper role' . print_r(db_query('SELECT * FROM {node_access}')
      ->fetchAllAssoc('nid'), 1));
    $this
      ->drupalGet('node');
    $document = new ApacheSolrDocument();
    apachesolr_access_apachesolr_index_document_build_node($document, $author_restricted_node, $env_id);
    $field = 'access_node_' . apachesolr_site_hash() . '_nodeaccess_author';
    $this
      ->assertEqual($document->{$field}[0], $basic_user->uid, 'Solr Document being indexed is restricted by the proper author');
    $expected_criterion = array(
      'access__all' => 0,
      'access_node_' . apachesolr_site_hash() . '_all' => 0,
      // The node_access_test module writes this as of core 7.3.
      'access_node_' . apachesolr_site_hash() . '_node_access_test_author' => $basic_user->uid,
    );

    // Test addition of filters to query.
    $subquery = apachesolr_access_build_subquery($basic_user);
    $fields = $subquery
      ->getFilters();
    foreach ($fields as $field) {
      if (is_array($expected_criterion[$field['#name']])) {
        $this
          ->assertTrue(in_array($field['#value'], $expected_criterion[$field['#name']]), t('Expected node access grant @name == @value found', array(
          '@name' => $field['#name'],
          '@value' => $field['#value'],
        )));

        //This is sorta a bug
        $found_criterion[$field['#name']] = $expected_criterion[$field['#name']];
      }
      else {
        $this
          ->assertEqual($field['#value'], $expected_criterion[$field['#name']], t('Expected node access grant @name == @value found', array(
          '@name' => $field['#name'],
          '@value' => $field['#value'],
        )));
        $found_criterion[$field['#name']] = $expected_criterion[$field['#name']];
      }
    }
    $this
      ->assertEqual($expected_criterion, $found_criterion, 'All Criteria was accounted for in fields. If not accounted for, Unaccounted Criteria [' . var_export(array_diff($expected_criterion, $found_criterion), 1) . ']');

    // Run a query through the MLT code to be sure access filters are added.
    $solr = new DummySolr($url = NULL, $env_id);
    $settings = apachesolr_search_mlt_block_defaults();

    // Dummy value
    $id = apachesolr_document_id($author_restricted_node->nid);
    drupal_save_session(false);
    $GLOBALS['user'] = $basic_user;
    $response = apachesolr_search_mlt_suggestions($settings, $id, $solr);
    $search = $solr
      ->getLastSearch();

    // Should only be one fq
    $this
      ->assertEqual(count($search['params']['fq']), 1, 'One fq param found');

    // Do some manipulation to avoid having to guess the order.
    $filter = trim(end($search['params']['fq']), ')(');
    $parts = explode(' OR ', $filter);
    $this
      ->assertEqual(count($expected_criterion), count($parts), 'Number of parts is the same as the number of critera');
    foreach ($expected_criterion as $k => $v) {
      $this
        ->assertTrue(in_array("{$k}:{$v}", $parts), "Filter {$k}:{$v} found in the parts");
    }

    // Test reset of index position.
    $this
      ->drupalLogin($this->admin_user);
    $env_id = apachesolr_default_environment();
    apachesolr_set_last_index_position($env_id, 'node', 1, 1);
    $empty = serialize(array());
    $value = db_query('SELECT value FROM {apachesolr_environment_variable} WHERE env_id = :env_id AND name = :name', array(
      ':env_id' => $env_id,
      ':name' => 'apachesolr_index_last',
    ))
      ->fetchField();
    $this
      ->assertNotEqual($value, $empty, 'value is not empty array');
    $this
      ->drupalPost('admin/reports/status/rebuild', array(), t('Rebuild permissions'));
    $value = db_query('SELECT value FROM {apachesolr_environment_variable} WHERE env_id = :env_id AND name = :name', array(
      ':env_id' => $env_id,
      ':name' => 'apachesolr_index_last',
    ))
      ->fetchField();
    $this
      ->assertEqual($value, $empty, 'value is empty array');
  }

}

Classes

Name	Description
DrupalApacheSolrNodeAccess	@file Unit tests for the access control functionalities that are added by apachesolr_access.