FilterNodeAccessTest.php in Drupal 9

Namespace

Drupal\Tests\node\Functional\Views

File

core/modules/node/tests/src/Functional/Views/FilterNodeAccessTest.php

<?php

namespace Drupal\Tests\node\Functional\Views;

use Drupal\node\Entity\NodeType;

/**
 * Tests the node_access filter handler.
 *
 * @group node
 * @see \Drupal\node\Plugin\views\filter\Access
 */
class FilterNodeAccessTest extends NodeTestBase {

  /**
   * An array of users.
   *
   * @var \Drupal\user\Entity\User[]
   */
  protected $users;

  /**
   * {@inheritdoc}
   */
  protected static $modules = [
    'node_access_test',
  ];

  /**
   * {@inheritdoc}
   */
  protected $defaultTheme = 'stark';

  /**
   * Views used by this test.
   *
   * @var array
   */
  public static $testViews = [
    'test_filter_node_access',
  ];

  /**
   * {@inheritdoc}
   */
  protected function setUp($import_test_views = TRUE) : void {
    parent::setUp($import_test_views);
    $this
      ->drupalCreateContentType([
      'type' => 'article',
      'name' => 'Article',
    ]);
    node_access_test_add_field(NodeType::load('article'));
    node_access_rebuild();
    \Drupal::state()
      ->set('node_access_test.private', TRUE);
    $num_simple_users = 2;
    $this->users = [];
    for ($i = 0; $i < $num_simple_users; $i++) {
      $this->users[$i] = $this
        ->drupalCreateUser([
        'access content',
        'create article content',
      ]);
    }
    foreach ($this->users as $web_user) {
      $this
        ->drupalLogin($web_user);
      foreach ([
        0 => 'Public',
        1 => 'Private',
      ] as $is_private => $type) {
        $settings = [
          'body' => [
            [
              'value' => $type . ' node',
              'format' => filter_default_format(),
            ],
          ],
          'title' => t('@private_public Article created by @user', [
            '@private_public' => $type,
            '@user' => $web_user
              ->getAccountName(),
          ]),
          'type' => 'article',
          'uid' => $web_user
            ->id(),
          'private' => (bool) $is_private,
        ];
        $node = $this
          ->drupalCreateNode($settings);
        $this
          ->assertEquals($is_private, (int) $node->private->value, 'The private status of the node was properly set in the node_access_test table.');
      }
    }
  }

  /**
   * Tests the node access filter.
   */
  public function testFilterNodeAccess() {
    $this
      ->drupalLogin($this->users[0]);
    $this
      ->drupalGet('test_filter_node_access');

    // Test that the private node of the current user is shown.
    $this
      ->assertSession()
      ->pageTextContains('Private Article created by ' . $this->users[0]
      ->getAccountName());

    // Test that the private node of the other use isn't shown.
    $this
      ->assertSession()
      ->pageTextNotContains('Private Article created by ' . $this->users[1]
      ->getAccountName());

    // Test that both public nodes are shown.
    $this
      ->assertSession()
      ->pageTextContains('Public Article created by ' . $this->users[0]
      ->getAccountName());
    $this
      ->assertSession()
      ->pageTextContains('Public Article created by ' . $this->users[1]
      ->getAccountName());

    // Switch users and test the other private node is shown.
    $this
      ->drupalLogin($this->users[1]);
    $this
      ->drupalGet('test_filter_node_access');

    // Test that the private node of the current user is shown.
    $this
      ->assertSession()
      ->pageTextContains('Private Article created by ' . $this->users[1]
      ->getAccountName());

    // Test that the private node of the other use isn't shown.
    $this
      ->assertSession()
      ->pageTextNotContains('Private Article created by ' . $this->users[0]
      ->getAccountName());

    // Test that a user with administer nodes permission can't see all nodes.
    $administer_nodes_user = $this
      ->drupalCreateUser([
      'access content',
      'administer nodes',
    ]);
    $this
      ->drupalLogin($administer_nodes_user);
    $this
      ->drupalGet('test_filter_node_access');
    $this
      ->assertSession()
      ->pageTextNotContains('Private Article created by ' . $this->users[0]
      ->getAccountName());
    $this
      ->assertSession()
      ->pageTextNotContains('Private Article created by ' . $this->users[1]
      ->getAccountName());
    $this
      ->assertSession()
      ->pageTextContains('Public Article created by ' . $this->users[0]
      ->getAccountName());
    $this
      ->assertSession()
      ->pageTextContains('Public Article created by ' . $this->users[1]
      ->getAccountName());

    // Test that a user with bypass node access can see all nodes.
    $bypass_access_user = $this
      ->drupalCreateUser([
      'access content',
      'bypass node access',
    ]);
    $this
      ->drupalLogin($bypass_access_user);
    $this
      ->drupalGet('test_filter_node_access');
    $this
      ->assertSession()
      ->pageTextContains('Private Article created by ' . $this->users[0]
      ->getAccountName());
    $this
      ->assertSession()
      ->pageTextContains('Private Article created by ' . $this->users[1]
      ->getAccountName());
    $this
      ->assertSession()
      ->pageTextContains('Public Article created by ' . $this->users[0]
      ->getAccountName());
    $this
      ->assertSession()
      ->pageTextContains('Public Article created by ' . $this->users[1]
      ->getAccountName());
  }

}

Classes

Name	Description
FilterNodeAccessTest	Tests the node_access filter handler.