public function OrderAccessControlHandlerTest::testOrderAccess in Commerce Core 8.2

Tests the access checking.

File

modules/order/tests/src/Kernel/OrderAccessControlHandlerTest.php, line 29

Class

OrderAccessControlHandlerTest

Tests the order access control handler.

Namespace

Drupal\Tests\commerce_order\Kernel

Code

public function testOrderAccess() {
  $admin_user = $this
    ->createUser([
    'mail' => $this
      ->randomString() . '@example.com',
  ], [
    'administer commerce_order',
  ]);
  $user = $this
    ->createUser([
    'mail' => $this
      ->randomString() . '@example.com',
  ], [
    'view own commerce_order',
  ]);
  $different_user = $this
    ->createUser([
    'mail' => $this
      ->randomString() . '@example.com',
  ], [
    'view own commerce_order',
  ]);
  $anon_user = new AnonymousUserSession();
  $order_item = OrderItem::create([
    'type' => 'test',
    'quantity' => 1,
    'unit_price' => new Price('12.00', 'USD'),
  ]);
  $order_item
    ->save();
  $order = Order::create([
    'type' => 'default',
    'store_id' => $this->store
      ->id(),
    'state' => 'draft',
    'mail' => 'text@example.com',
    'uid' => $user
      ->id(),
    'ip_address' => '127.0.0.1',
    'order_items' => [
      $order_item,
    ],
  ]);
  $order
    ->save();

  // Tests the 'view own commerce_order' access checking.
  $this
    ->assertTrue($order
    ->access('view', $user));
  $this
    ->assertFalse($order
    ->access('view', $different_user));
  $this
    ->assertTrue($order
    ->access('view', $admin_user));
  $this
    ->assertFalse($order
    ->access('view', $anon_user));

  // Tests the access checking for resending order receipts.
  $this
    ->assertFalse($order
    ->access('resend_receipt', $user));
  $this
    ->assertFalse($order
    ->access('resend_receipt', $different_user));
  $this
    ->assertFalse($order
    ->access('resend_receipt', $admin_user));
  $transition = $order
    ->getState()
    ->getTransitions();
  $order
    ->getState()
    ->applyTransition($transition['place']);
  $order
    ->save();
  \Drupal::entityTypeManager()
    ->getAccessControlHandler('commerce_order')
    ->resetCache();
  $this
    ->assertFalse($order
    ->access('resend_receipt', $user));
  $this
    ->assertFalse($order
    ->access('resend_receipt', $different_user));
  $this
    ->assertTrue($order
    ->access('resend_receipt', $admin_user));

  // Tests the access checking for locked orders.
  $this
    ->assertTrue($order
    ->access('update', $admin_user));
  $this
    ->assertTrue($order
    ->access('delete', $admin_user));
  $this
    ->assertFalse($order
    ->access('unlock', $admin_user));
  $order
    ->lock();
  \Drupal::entityTypeManager()
    ->getAccessControlHandler('commerce_order')
    ->resetCache();
  $this
    ->assertFalse($order
    ->access('update', $admin_user));
  $this
    ->assertFalse($order
    ->access('delete', $admin_user));
  $this
    ->assertTrue($order
    ->access('unlock', $admin_user));
}