class EntityQueryAccessTest in Drupal 10

Tests that Views respects 'ENTITY_TYPE_access' query tags.

@group views

Hierarchy

• class \Drupal\Tests\views\Functional\Entity\EntityQueryAccessTest extends \Drupal\Tests\views\Functional\ViewTestBase uses \Drupal\Tests\media\Traits\MediaTypeCreationTrait

File

core/modules/views/tests/src/Functional/Entity/EntityQueryAccessTest.php, line 16

Namespace

Drupal\Tests\views\Functional\Entity

class EntityQueryAccessTest extends ViewTestBase {
  use MediaTypeCreationTrait;

  /**
   * {@inheritdoc}
   */
  protected static $modules = [
    'media_test_source',
    'views_test_query_access',
  ];

  /**
   * {@inheritdoc}
   */
  protected $defaultTheme = 'stark';

  /**
   * Tests that the 'media_access' query tag is respected by Views.
   */
  public function testMediaEntityQueryAccess() {
    $this->container
      ->get('module_installer')
      ->install([
      'media',
    ]);
    $media_type = $this
      ->createMediaType('test');
    $source_field = $media_type
      ->getSource()
      ->getSourceFieldDefinition($media_type)
      ->getName();
    $hidden_media = Media::create([
      'bundle' => $media_type
        ->id(),
      // This UUID should prevent this media item from being visible in the
      // view.
      // @see views_test_access_query_media_access_alter()
      'uuid' => 'hidden-media',
      'name' => $this
        ->randomString(),
      $source_field => $this
        ->randomString(),
    ]);
    $hidden_media
      ->save();
    $accessible_media = Media::create([
      'bundle' => $media_type
        ->id(),
      'name' => $this
        ->randomString(),
      $source_field => $this
        ->randomString(),
    ]);
    $accessible_media
      ->save();
    $account = $this
      ->drupalCreateUser([
      'access media overview',
      'administer media',
    ]);
    $this
      ->drupalLogin($account);
    $this
      ->drupalGet('/admin/content/media');
    $assert_session = $this
      ->assertSession();
    $assert_session
      ->statusCodeEquals(200);
    $assert_session
      ->linkExists($accessible_media
      ->label());
    $assert_session
      ->linkNotExists($hidden_media
      ->label());
  }

  /**
   * Tests that the 'block_content_access' query tag is respected by Views.
   */
  public function testBlockContentEntityQueryAccess() {
    $this->container
      ->get('module_installer')
      ->install([
      'block_content',
    ]);
    BlockContentType::create([
      'id' => 'test',
      'label' => 'Test',
    ])
      ->save();
    $hidden_block = BlockContent::create([
      'type' => 'test',
      // This UUID should prevent this block from being visible in the view.
      // @see views_test_access_query_block_content_access_alter()
      'uuid' => 'hidden-block_content',
      'info' => $this
        ->randomString(),
    ]);
    $hidden_block
      ->save();
    $accessible_block = BlockContent::create([
      'type' => 'test',
      'info' => $this
        ->randomString(),
    ]);
    $accessible_block
      ->save();
    $account = $this
      ->drupalCreateUser([
      'administer blocks',
    ]);
    $this
      ->drupalLogin($account);
    $this
      ->drupalGet('/admin/structure/block/block-content');
    $assert_session = $this
      ->assertSession();
    $assert_session
      ->statusCodeEquals(200);
    $assert_session
      ->pageTextContains($accessible_block
      ->label());
    $assert_session
      ->pageTextNotContains($hidden_block
      ->label());
  }

}