public function UserCancelTest::testUserCancelWithoutPermission in Drupal 8

Same name and namespace in other branches

1. 9 core/modules/user/tests/src/Functional/UserCancelTest.php \Drupal\Tests\user\Functional\UserCancelTest::testUserCancelWithoutPermission()

Attempt to cancel account without permission.

File

core/modules/user/tests/src/Functional/UserCancelTest.php, line 42

Class

UserCancelTest

Ensure that account cancellation methods work as expected.

Namespace

Drupal\Tests\user\Functional

Code

public function testUserCancelWithoutPermission() {
  $node_storage = $this->container
    ->get('entity_type.manager')
    ->getStorage('node');
  $this
    ->config('user.settings')
    ->set('cancel_method', 'user_cancel_reassign')
    ->save();
  $user_storage = $this->container
    ->get('entity_type.manager')
    ->getStorage('user');

  // Create a user.
  $account = $this
    ->drupalCreateUser([]);
  $this
    ->drupalLogin($account);

  // Load a real user object.
  $user_storage
    ->resetCache([
    $account
      ->id(),
  ]);
  $account = $user_storage
    ->load($account
    ->id());

  // Create a node.
  $node = $this
    ->drupalCreateNode([
    'uid' => $account
      ->id(),
  ]);

  // Attempt to cancel account.
  $this
    ->drupalGet('user/' . $account
    ->id() . '/edit');
  $this
    ->assertNoRaw(t('Cancel account'), 'No cancel account button displayed.');

  // Attempt bogus account cancellation request confirmation.
  $timestamp = $account
    ->getLastLoginTime();
  $this
    ->drupalGet("user/" . $account
    ->id() . "/cancel/confirm/{$timestamp}/" . user_pass_rehash($account, $timestamp));
  $this
    ->assertSession()
    ->statusCodeEquals(403);
  $user_storage
    ->resetCache([
    $account
      ->id(),
  ]);
  $account = $user_storage
    ->load($account
    ->id());
  $this
    ->assertTrue($account
    ->isActive(), 'User account was not canceled.');

  // Confirm user's content has not been altered.
  $node_storage
    ->resetCache([
    $node
      ->id(),
  ]);
  $test_node = $node_storage
    ->load($node
    ->id());
  $this
    ->assertTrue($test_node
    ->getOwnerId() == $account
    ->id() && $test_node
    ->isPublished(), 'Node of the user has not been altered.');
}