class NodeAccessExampleTestCase in Examples for Developers 7
Functional tests for the Node Access Example module.
Hierarchy
- class \DrupalTestCase
- class \DrupalWebTestCase
- class \NodeAccessExampleTestCase
- class \DrupalWebTestCase
Expanded class hierarchy of NodeAccessExampleTestCase
Related topics
File
- node_access_example/
node_access_example.test, line 13 - Tests for Node Access example module.
View source
class NodeAccessExampleTestCase extends DrupalWebTestCase {
/**
* {@inheritdoc}
*/
public static function getInfo() {
return array(
'name' => 'Node Access Example functionality',
'description' => 'Checks behavior of Node Access Example.',
'group' => 'Examples',
);
}
/**
* Enable modules and create user with specific permissions.
*/
public function setUp() {
parent::setUp('node_access_example', 'search');
node_access_rebuild();
}
/**
* Test the "private" node access.
*
* - Create 3 users with "access content" and "create article" permissions.
* - Each user creates one private and one not private article.
* - Run cron to update search index.
* - Test that each user can view the other user's non-private article.
* - Test that each user cannot view the other user's private article.
* - Test that each user finds only appropriate (non-private + own private)
* in search results.
* - Logout.
* - Test that anonymous user can't view, edit or delete private content which
* has author.
* - Test that anonymous user can't view, edit or delete private content with
* anonymous author.
* - Create another user with 'view any private content'.
* - Test that user 4 can view all content created above.
* - Test that user 4 can search for all content created above.
* - Test that user 4 cannot edit private content above.
* - Create another user with 'edit any private content'
* - Test that user 5 can edit private content.
* - Test that user 5 can delete private content.
* - Test listings of nodes with 'node_access' tag on database search.
*/
public function testNodeAccessBasic() {
$num_simple_users = 3;
$simple_users = array();
// Nodes keyed by uid and nid: $nodes[$uid][$nid] = $is_private;.
$nodes_by_user = array();
// Titles keyed by nid.
$titles = array();
// Array of nids marked private.
$private_nodes = array();
for ($i = 0; $i < $num_simple_users; $i++) {
$simple_users[$i] = $this
->drupalCreateUser(array(
'access content',
'create article content',
'search content',
));
}
foreach ($simple_users as $web_user) {
$this
->drupalLogin($web_user);
foreach (array(
0 => 'Public',
1 => 'Private',
) as $is_private => $type) {
$edit = array(
'title' => t('@private_public Article created by @user', array(
'@private_public' => $type,
'@user' => $web_user->name,
)),
);
if ($is_private) {
$edit['private'] = TRUE;
$edit['body[und][0][value]'] = 'private node';
}
else {
$edit['body[und][0][value]'] = 'public node';
}
$this
->drupalPost('node/add/article', $edit, t('Save'));
debug(t('Created article with private=@private', array(
'@private' => $is_private,
)));
$this
->assertText(t('Article @title has been created', array(
'@title' => $edit['title'],
)));
$nid = db_query('SELECT nid FROM {node} WHERE title = :title', array(
':title' => $edit['title'],
))
->fetchField();
$this
->assertText(t('New node @nid was created and private=@private', array(
'@nid' => $nid,
'@private' => $is_private,
)));
$private_status = db_query('SELECT private FROM {node_access_example} where nid = :nid', array(
':nid' => $nid,
))
->fetchField();
$this
->assertTrue($is_private == $private_status, 'Node was properly set to private or not private in node_access_example table.');
if ($is_private) {
$private_nodes[] = $nid;
}
$titles[$nid] = $edit['title'];
$nodes_by_user[$web_user->uid][$nid] = $is_private;
}
}
debug($nodes_by_user);
// Build the search index.
$this
->cronRun();
foreach ($simple_users as $web_user) {
$this
->drupalLogin($web_user);
// Check to see that we find the number of search results expected.
$this
->checkSearchResults('Private node', 1);
// Check own nodes to see that all are readable.
foreach (array_keys($nodes_by_user) as $uid) {
// All of this user's nodes should be readable to same.
if ($uid == $web_user->uid) {
foreach ($nodes_by_user[$uid] as $nid => $is_private) {
$this
->drupalGet('node/' . $nid);
$this
->assertResponse(200);
$this
->assertTitle($titles[$nid] . ' | Drupal', 'Correct title for node found');
}
}
else {
// Otherwise, for other users, private nodes should get a 403,
// but we should be able to read non-private nodes.
foreach ($nodes_by_user[$uid] as $nid => $is_private) {
$this
->drupalGet('node/' . $nid);
$this
->assertResponse($is_private ? 403 : 200, format_string('Node @nid by user @uid should get a @response for this user (@web_user_uid)', array(
'@nid' => $nid,
'@uid' => $uid,
'@response' => $is_private ? 403 : 200,
'@web_user_uid' => $web_user->uid,
)));
if (!$is_private) {
$this
->assertTitle($titles[$nid] . ' | Drupal', 'Correct title for node was found');
}
}
}
}
// Check to see that the correct nodes are shown on examples/node_access.
$this
->drupalGet('examples/node_access');
$accessible = $this
->xpath("//tr[contains(@class,'accessible')]");
$this
->assertEqual(count($accessible), 1, 'One private item accessible');
foreach ($accessible as $row) {
$this
->assertEqual($row->td[2], $web_user->uid, 'Accessible row owned by this user');
}
}
// Test cases for anonymous user.
$this
->drupalLogout();
// Test that private nodes with authors are not accessible.
foreach ($private_nodes as $nid) {
if (($node = node_load($nid)) === FALSE) {
continue;
}
$this
->checkNodeAccess($nid, FALSE, FALSE, FALSE);
}
// Test that private nodes that don't have author are not accessible.
foreach ($private_nodes as $nid) {
if (($node = node_load($nid)) === FALSE) {
continue;
}
$original_uid = $node->uid;
// Change node author to anonymous.
$node->uid = 0;
node_save($node);
$node = node_load($nid);
$this
->assertEqual($node->uid, 0);
$this
->checkNodeAccess($nid, FALSE, FALSE, FALSE);
// Change node to original author.
$node->uid = $original_uid;
node_save($node);
}
// Now test that a user with 'access any private content' can view content.
$access_user = $this
->drupalCreateUser(array(
'access content',
'create article content',
'access any private content',
'search content',
));
$this
->drupalLogin($access_user);
// Check to see that we find the number of search results expected.
$this
->checkSearchResults('Private node', 3);
foreach ($nodes_by_user as $uid => $private_status) {
foreach ($private_status as $nid => $is_private) {
$this
->drupalGet('node/' . $nid);
$this
->assertResponse(200);
}
}
// Check to see that the correct nodes are shown on examples/node_access.
// This user should be able to see all 3 of them.
$this
->drupalGet('examples/node_access');
$accessible = $this
->xpath("//tr[contains(@class,'accessible')]");
$this
->assertEqual(count($accessible), 3);
// Test that a user named 'foobar' can edit any private node due to
// node_access_example_node_access(). Note that this user will not be
// able to search for private nodes, and will not have available nodes
// shown on examples/node_access, because node_access() is not called
// for node listings, only for actual access to a node.
$edit_user = $this
->drupalCreateUser(array(
'access comments',
'access content',
'post comments',
'skip comment approval',
'search content',
));
// Update the name of the user to 'foobar'.
db_update('users')
->fields(array(
'name' => 'foobar',
))
->condition('uid', $edit_user->uid)
->execute();
$edit_user->name = 'foobar';
$this
->drupalLogin($edit_user);
// Try to edit each of the private nodes.
foreach ($private_nodes as $nid) {
$body = $this
->randomName();
$edit = array(
'body[und][0][value]' => $body,
);
$this
->drupalPost('node/' . $nid . '/edit', $edit, t('Save'));
$this
->assertText(t('has been updated'), 'Node was updated by "foobar" user');
}
// Test that a privileged user can edit and delete private content.
// This test should go last, as the nodes get deleted.
$edit_user = $this
->drupalCreateUser(array(
'access content',
'access any private content',
'edit any private content',
));
$this
->drupalLogin($edit_user);
foreach ($private_nodes as $nid) {
$body = $this
->randomName();
$edit = array(
'body[und][0][value]' => $body,
);
$this
->drupalPost('node/' . $nid . '/edit', $edit, t('Save'));
$this
->assertText(t('has been updated'));
$this
->drupalPost('node/' . $nid . '/edit', array(), t('Delete'));
$this
->drupalPost(NULL, array(), t('Delete'));
$this
->assertText(t('has been deleted'));
}
}
/**
* Helper function.
*
* On the search page, search for a string and assert the expected number
* of results.
*
* @param string $search_query
* String to search for
* @param int $expected_result_count
* Expected result count
*/
protected function checkSearchResults($search_query, $expected_result_count) {
$this
->drupalPost('search/node', array(
'keys' => $search_query,
), t('Search'));
$search_results = $this
->xpath("//ol[contains(@class, 'search-results')]/li");
$this
->assertEqual(count($search_results), $expected_result_count, 'Found the expected number of search results');
}
/**
* Helper function.
*
* Test if a node with the id $nid has expected access grants.
*
* @param int $nid
* Node that will be checked.
*
* @return bool
* Checker ran successfully
*/
protected function checkNodeAccess($nid, $grant_view, $grant_update, $grant_delete) {
// Test if node can be viewed.
if (!$this
->checkResponse($grant_view, 'node/' . $nid)) {
return FALSE;
}
// Test if private node can be edited.
if (!$this
->checkResponse($grant_update, 'node/' . $nid . '/edit')) {
return FALSE;
}
// Test if private node can be deleted.
if (!$this
->checkResponse($grant_delete, 'node/' . $nid . '/delete')) {
return FALSE;
}
return TRUE;
}
/**
* Helper function.
*
* Test if there is access to an $url
*
* @param bool $grant
* Access to the $url
*
* @param string $url
* url to make the get call.
*
* @return bool
* Get response
*/
protected function checkResponse($grant, $url) {
$this
->drupalGet($url);
if ($grant) {
$response = $this
->assertResponse(200);
}
else {
$response = $this
->assertResponse(403);
}
return $response;
}
}
Members
Name | Modifiers | Type | Description | Overrides |
---|---|---|---|---|
DrupalTestCase:: |
protected | property | Assertions thrown in that test case. | |
DrupalTestCase:: |
protected | property | The database prefix of this test run. | |
DrupalTestCase:: |
protected | property | The original file directory, before it was changed for testing purposes. | |
DrupalTestCase:: |
public | property | Current results of this test case. | |
DrupalTestCase:: |
protected | property | Flag to indicate whether the test has been set up. | |
DrupalTestCase:: |
protected | property | ||
DrupalTestCase:: |
protected | property | ||
DrupalTestCase:: |
protected | property | This class is skipped when looking for the source of an assertion. | |
DrupalTestCase:: |
protected | property | The test run ID. | |
DrupalTestCase:: |
protected | property | Time limit for the test. | |
DrupalTestCase:: |
public | property | Whether to cache the installation part of the setUp() method. | |
DrupalTestCase:: |
public | property | Whether to cache the modules installation part of the setUp() method. | |
DrupalTestCase:: |
protected | property | URL to the verbose output file directory. | |
DrupalTestCase:: |
protected | function | Internal helper: stores the assert. | |
DrupalTestCase:: |
protected | function | Check to see if two values are equal. | |
DrupalTestCase:: |
protected | function | Check to see if a value is false (an empty string, 0, NULL, or FALSE). | |
DrupalTestCase:: |
protected | function | Check to see if two values are identical. | |
DrupalTestCase:: |
protected | function | Check to see if two values are not equal. | |
DrupalTestCase:: |
protected | function | Check to see if two values are not identical. | |
DrupalTestCase:: |
protected | function | Check to see if a value is not NULL. | |
DrupalTestCase:: |
protected | function | Check to see if a value is NULL. | |
DrupalTestCase:: |
protected | function | Check to see if a value is not false (not an empty string, 0, NULL, or FALSE). | |
DrupalTestCase:: |
public static | function | Delete an assertion record by message ID. | |
DrupalTestCase:: |
protected | function | Fire an error assertion. | 1 |
DrupalTestCase:: |
public | function | Handle errors during test runs. | 1 |
DrupalTestCase:: |
protected | function | Handle exceptions. | |
DrupalTestCase:: |
protected | function | Fire an assertion that is always negative. | |
DrupalTestCase:: |
public static | function | Converts a list of possible parameters into a stack of permutations. | |
DrupalTestCase:: |
protected | function | Cycles through backtrace until the first non-assertion method is found. | |
DrupalTestCase:: |
public static | function | Returns the database connection to the site running Simpletest. | |
DrupalTestCase:: |
public static | function | Store an assertion from outside the testing context. | |
DrupalTestCase:: |
protected | function | Fire an assertion that is always positive. | |
DrupalTestCase:: |
public static | function | Generates a random string containing letters and numbers. | |
DrupalTestCase:: |
public static | function | Generates a random string of ASCII characters of codes 32 to 126. | |
DrupalTestCase:: |
public | function | Run all tests in this class. | |
DrupalTestCase:: |
protected | function | Logs a verbose message in a text file. | |
DrupalWebTestCase:: |
protected | property | Additional cURL options. | |
DrupalWebTestCase:: |
protected | property | The content of the page currently loaded in the internal browser. | |
DrupalWebTestCase:: |
protected | property | The current cookie file used by cURL. | |
DrupalWebTestCase:: |
protected | property | The cookies of the page currently loaded in the internal browser. | |
DrupalWebTestCase:: |
protected | property | The handle of the current cURL connection. | |
DrupalWebTestCase:: |
protected | property | The value of the Drupal.settings JavaScript variable for the page currently loaded in the internal browser. | |
DrupalWebTestCase:: |
protected | property | The parsed version of the page. | |
DrupalWebTestCase:: |
protected | property | Whether the files were copied to the test files directory. | |
DrupalWebTestCase:: |
protected | property | The headers of the page currently loaded in the internal browser. | |
DrupalWebTestCase:: |
protected | property | HTTP authentication credentials (<username>:<password>). | |
DrupalWebTestCase:: |
protected | property | HTTP authentication method | |
DrupalWebTestCase:: |
protected | property | The current user logged in using the internal browser. | |
DrupalWebTestCase:: |
protected | property | The original shutdown handlers array, before it was cleaned for testing purposes. | |
DrupalWebTestCase:: |
protected | property | The original user, before it was changed to a clean uid = 1 for testing purposes. | |
DrupalWebTestCase:: |
protected | property | The content of the page currently loaded in the internal browser (plain text version). | |
DrupalWebTestCase:: |
protected | property | The profile to install as a basis for testing. | 20 |
DrupalWebTestCase:: |
protected | property | The number of redirects followed during the handling of a request. | |
DrupalWebTestCase:: |
protected | property | The current session ID, if available. | |
DrupalWebTestCase:: |
protected | property | The current session name, if available. | |
DrupalWebTestCase:: |
protected | property | The URL currently loaded in the internal browser. | |
DrupalWebTestCase:: |
protected | function | Asserts that a field exists with the given name or ID. | |
DrupalWebTestCase:: |
protected | function | Asserts that a field exists in the current page with the given ID and value. | |
DrupalWebTestCase:: |
protected | function | Asserts that a field exists in the current page with the given name and value. | |
DrupalWebTestCase:: |
protected | function | Asserts that a field exists in the current page by the given XPath. | |
DrupalWebTestCase:: |
protected | function | Asserts that a checkbox field in the current page is checked. | |
DrupalWebTestCase:: |
protected | function | Pass if a link with the specified label is found, and optional with the specified index. | |
DrupalWebTestCase:: |
protected | function | Pass if a link containing a given href (part) is found. | |
DrupalWebTestCase:: |
protected | function | Asserts that the most recently sent e-mail message has the given value. | |
DrupalWebTestCase:: |
protected | function | Asserts that the most recently sent e-mail message has the pattern in it. | |
DrupalWebTestCase:: |
protected | function | Asserts that the most recently sent e-mail message has the string in it. | |
DrupalWebTestCase:: |
protected | function | Asserts that each HTML ID is used for just a single element. | |
DrupalWebTestCase:: |
protected | function | Asserts that a field does not exist with the given name or ID. | |
DrupalWebTestCase:: |
protected | function | Asserts that a field does not exist with the given ID and value. | |
DrupalWebTestCase:: |
protected | function | Asserts that a field does not exist with the given name and value. | |
DrupalWebTestCase:: |
protected | function | Asserts that a field doesn't exist or its value doesn't match, by XPath. | |
DrupalWebTestCase:: |
protected | function | Asserts that a checkbox field in the current page is not checked. | |
DrupalWebTestCase:: |
protected | function | Pass if a link with the specified label is not found. | |
DrupalWebTestCase:: |
protected | function | Pass if a link containing a given href (part) is not found. | |
DrupalWebTestCase:: |
protected | function | Asserts that a select option in the current page is not checked. | |
DrupalWebTestCase:: |
protected | function | Will trigger a pass if the perl regex pattern is not present in raw content. | |
DrupalWebTestCase:: |
protected | function | Pass if the raw text is NOT found on the loaded page, fail otherwise. Raw text refers to the raw HTML that the page generated. | |
DrupalWebTestCase:: |
protected | function | Asserts the page did not return the specified response code. | |
DrupalWebTestCase:: |
protected | function | Pass if the text is NOT found on the text version of the page. The text version is the equivalent of what a user would see when viewing through a web browser. In other words the HTML has been filtered out of the contents. | |
DrupalWebTestCase:: |
protected | function | Pass if the page title is not the given string. | |
DrupalWebTestCase:: |
protected | function | Pass if the text is found MORE THAN ONCE on the text version of the page. | |
DrupalWebTestCase:: |
protected | function | Asserts that a select option in the current page is checked. | |
DrupalWebTestCase:: |
protected | function | Will trigger a pass if the Perl regex pattern is found in the raw content. | |
DrupalWebTestCase:: |
protected | function | Pass if the raw text IS found on the loaded page, fail otherwise. Raw text refers to the raw HTML that the page generated. | |
DrupalWebTestCase:: |
protected | function | Asserts the page responds with the specified response code. | |
DrupalWebTestCase:: |
protected | function | Pass if the text IS found on the text version of the page. The text version is the equivalent of what a user would see when viewing through a web browser. In other words the HTML has been filtered out of the contents. | |
DrupalWebTestCase:: |
protected | function | Helper for assertText and assertNoText. | |
DrupalWebTestCase:: |
protected | function | Asserts themed output. | |
DrupalWebTestCase:: |
protected | function | Pass if the page title is the given string. | |
DrupalWebTestCase:: |
protected | function | Pass if the text is found ONLY ONCE on the text version of the page. | |
DrupalWebTestCase:: |
protected | function | Helper for assertUniqueText and assertNoUniqueText. | |
DrupalWebTestCase:: |
protected | function | Pass if the internal browser's URL matches the given path. | |
DrupalWebTestCase:: |
protected | function | Builds an XPath query. | |
DrupalWebTestCase:: |
protected | function | Changes the database connection to the prefixed one. | |
DrupalWebTestCase:: |
protected | function | Check for meta refresh tag and if found call drupalGet() recursively. This function looks for the http-equiv attribute to be set to "Refresh" and is case-sensitive. | |
DrupalWebTestCase:: |
protected | function | Check to make sure that the array of permissions are valid. | |
DrupalWebTestCase:: |
protected | function | Follows a link by name. | |
DrupalWebTestCase:: |
protected | function | Helper function: construct an XPath for the given set of attributes and value. | |
DrupalWebTestCase:: |
protected | function | Copy the setup cache from/to another table and files directory. | |
DrupalWebTestCase:: |
protected | function | Runs cron in the Drupal installed by Simpletest. | |
DrupalWebTestCase:: |
protected | function | Close the cURL handler and unset the handler. | |
DrupalWebTestCase:: |
protected | function | Initializes and executes a cURL request. | |
DrupalWebTestCase:: |
protected | function | Reads headers and registers errors received from the tested site. | |
DrupalWebTestCase:: |
protected | function | Initializes the cURL connection. | |
DrupalWebTestCase:: |
protected | function | Compare two files based on size and file name. | |
DrupalWebTestCase:: |
protected | function | Creates a custom content type based on default settings. | |
DrupalWebTestCase:: |
protected | function | Creates a node based on default settings. | |
DrupalWebTestCase:: |
protected | function | Creates a role with specified permissions. | |
DrupalWebTestCase:: |
protected | function | Create a user with a given set of permissions. | |
DrupalWebTestCase:: |
protected | function | Retrieves a Drupal path or an absolute path. | |
DrupalWebTestCase:: |
protected | function | Retrieve a Drupal path or an absolute path and JSON decode the result. | |
DrupalWebTestCase:: |
protected | function | Gets the current raw HTML of requested page. | |
DrupalWebTestCase:: |
protected | function | Gets the value of an HTTP response header. If multiple requests were required to retrieve the page, only the headers from the last request will be checked by default. However, if TRUE is passed as the second argument, all requests will be processed… | |
DrupalWebTestCase:: |
protected | function | Gets the HTTP response headers of the requested page. Normally we are only interested in the headers returned by the last request. However, if a page is redirected or HTTP authentication is in use, multiple requests will be required to retrieve the… | |
DrupalWebTestCase:: |
protected | function | Gets an array containing all e-mails sent during this test case. | |
DrupalWebTestCase:: |
function | Get a node from the database based on its title. | ||
DrupalWebTestCase:: |
protected | function | Gets the value of the Drupal.settings JavaScript variable for the currently loaded page. | |
DrupalWebTestCase:: |
protected | function | Get a list files that can be used in tests. | |
DrupalWebTestCase:: |
protected | function | Generate a token for the currently logged in user. | |
DrupalWebTestCase:: |
protected | function | Retrieves only the headers for a Drupal path or an absolute path. | |
DrupalWebTestCase:: |
protected | function | Log in a user with the internal browser. | |
DrupalWebTestCase:: |
protected | function | ||
DrupalWebTestCase:: |
protected | function | Execute a POST request on a Drupal page. It will be done as usual POST request with SimpleBrowser. | |
DrupalWebTestCase:: |
protected | function | Execute an Ajax submission. | |
DrupalWebTestCase:: |
protected | function | Sets the raw HTML content. This can be useful when a page has been fetched outside of the internal browser and assertions need to be made on the returned page. | |
DrupalWebTestCase:: |
protected | function | Sets the value of the Drupal.settings JavaScript variable for the currently loaded page. | |
DrupalWebTestCase:: |
protected | function | Takes a path and returns an absolute path. | |
DrupalWebTestCase:: |
protected | function | Get all option elements, including nested options, in a select. | |
DrupalWebTestCase:: |
protected | function | Get the selected value from a select field. | |
DrupalWebTestCase:: |
protected | function | Returns the cache key used for the setup caching. | |
DrupalWebTestCase:: |
protected | function | Get the current URL from the cURL handler. | |
DrupalWebTestCase:: |
protected | function | Handle form input related to drupalPost(). Ensure that the specified fields exist and attempt to create POST data in the correct manner for the particular field type. | |
DrupalWebTestCase:: |
protected | function | Copies the cached tables and files for a cached installation setup. | |
DrupalWebTestCase:: |
protected | function | Parse content returned from curlExec using DOM and SimpleXML. | |
DrupalWebTestCase:: |
protected | function | Preload the registry from the testing site. | |
DrupalWebTestCase:: |
protected | function | Generates a database prefix for running tests. | |
DrupalWebTestCase:: |
protected | function | Prepares the current environment for running the test. | |
DrupalWebTestCase:: |
protected | function | Recursively copy one directory to another. | |
DrupalWebTestCase:: |
protected | function | Refresh the in-memory set of variables. Useful after a page request is made that changes a variable in a different thread. | 1 |
DrupalWebTestCase:: |
protected | function | Reset all data structures after having enabled new modules. | |
DrupalWebTestCase:: |
protected | function | Store the installation setup to a cache. | |
DrupalWebTestCase:: |
protected | function | Delete created files and temporary files directory, delete the tables created by setUp(), and reset the database prefix. | 6 |
DrupalWebTestCase:: |
protected | function | Outputs to verbose the most recent $count emails sent. | |
DrupalWebTestCase:: |
protected | function | Perform an xpath search on the contents of the internal browser. The search is relative to the root element (HTML tag normally) of the page. | |
DrupalWebTestCase:: |
function |
Constructor for DrupalWebTestCase. Overrides DrupalTestCase:: |
1 | |
NodeAccessExampleTestCase:: |
protected | function | Helper function. | |
NodeAccessExampleTestCase:: |
protected | function | Helper function. | |
NodeAccessExampleTestCase:: |
protected | function | Helper function. | |
NodeAccessExampleTestCase:: |
public static | function | ||
NodeAccessExampleTestCase:: |
public | function |
Enable modules and create user with specific permissions. Overrides DrupalWebTestCase:: |
|
NodeAccessExampleTestCase:: |
public | function | Test the "private" node access. |