You are here

ConfigPermsTest.php in Custom Permissions 8.2

File

tests/src/Functional/ConfigPermsTest.php
View source
<?php

namespace Drupal\Tests\config_perms\Functional;

use Drupal\Tests\BrowserTestBase;

/**
 * Tests that the perms are working.
 *
 * @group config_perms
 */
class ConfigPermsTest extends BrowserTestBase {

  /**
   * {@inheritdoc}
   */
  protected $defaultTheme = 'stark';

  /**
   * {@inheritdoc}
   */
  protected static $modules = [
    'config_perms',
  ];
  public function testAdministerConfigPermsPermission() {
    $user_with_permission = $this
      ->drupalCreateUser([
      'administer config permissions',
    ]);
    $user_without_permission = $this
      ->drupalCreateUser();

    // Assert that the user with the permission can administer the module.
    $this
      ->drupalLogin($user_with_permission);
    $this
      ->drupalGet('/admin/people/custom-permissions/list');
    $this
      ->assertSession()
      ->statusCodeEquals(200);
    $this
      ->drupalLogout();

    // Assert that the user without the permission cannot access the page.
    $this
      ->drupalLogin($user_without_permission);
    $this
      ->drupalGet('/admin/people/custom-permissions/list');
    $this
      ->assertSession()
      ->statusCodeEquals(403);
    $this
      ->drupalLogout();
  }

  /**
   * Tests that the permissions are applied correctly.
   */
  public function testPermissions() {
    $user_with_permission = $this
      ->drupalCreateUser([
      'Administer account settings',
    ]);
    $user_without_permission = $this
      ->drupalCreateUser();

    // Assert that the user with the permission can access the page.
    $this
      ->drupalLogin($user_with_permission);
    $this
      ->drupalGet('admin/config/people/accounts');
    $this
      ->assertSession()
      ->statusCodeEquals(200);
    $this
      ->assertSession()
      ->pageTextContains('Account settings');
    $this
      ->drupalLogout();

    // Assert that the user without permission cannot access the page.
    $this
      ->drupalLogin($user_without_permission);
    $this
      ->drupalGet('admin/config/people/accounts');
    $this
      ->assertSession()
      ->statusCodeEquals(403);
    $this
      ->drupalLogout();
  }

  /**
   * Tests that the permissions are overridden correctly.
   */
  public function testOverridePermissions() {
    $user_custom_permission = $this
      ->drupalCreateUser([
      'Administer account settings',
    ]);
    $user_core_permission = $this
      ->drupalCreateUser([
      'administer account settings',
    ]);

    // Assert that the user with the permission can access the page.
    $this
      ->drupalLogin($user_custom_permission);
    $this
      ->drupalGet('admin/config/people/accounts');
    $this
      ->assertSession()
      ->statusCodeEquals(200);
    $this
      ->assertSession()
      ->pageTextContains('Account settings');
    $this
      ->drupalLogout();

    // Assert that the config_perms overridden the core permission and doesn't
    // allow the user to see the page even having the core permission.
    $this
      ->drupalLogin($user_core_permission);
    $this
      ->drupalGet('admin/config/people/accounts');
    $this
      ->assertSession()
      ->statusCodeEquals(403);
    $this
      ->drupalLogout();
  }

}

Classes

Namesort descending Description
ConfigPermsTest Tests that the perms are working.