public function EntityAccessComplexTest::testMemberDeleteAnyAccess in Group 8

Same name and namespace in other branches

1. 2.0.x tests/src/Kernel/EntityAccessComplexTest.php \Drupal\Tests\group\Kernel\EntityAccessComplexTest::testMemberDeleteAnyAccess()

Tests the deleting of any grouped entities for members.

File

tests/src/Kernel/EntityAccessComplexTest.php, line 792

Class

EntityAccessComplexTest

Tests that Group properly checks access for "complex" grouped entities.

Namespace

Drupal\Tests\group\Kernel

Code

public function testMemberDeleteAnyAccess() {
  $account = $this
    ->createUser([], $this->permissions);
  $node_1 = $this
    ->createNode([
    'type' => 'page',
  ]);
  $node_2 = $this
    ->createNode([
    'type' => 'page',
    'status' => 1,
  ]);
  $node_3 = $this
    ->createNode([
    'type' => 'page',
  ]);
  $this->groupTypeA
    ->getMemberRole()
    ->grantPermission('delete any node_as_content:page entity')
    ->save();
  $this->groupTypeB
    ->getMemberRole()
    ->grantPermission('delete any node_as_content:page entity')
    ->save();
  $group_a = $this
    ->createGroup([
    'type' => $this->groupTypeA
      ->id(),
  ]);
  $group_a
    ->addContent($node_1, 'node_as_content:page');
  $group_a
    ->addMember($this
    ->getCurrentUser());
  $group_a
    ->addMember($account);
  $group_b = $this
    ->createGroup([
    'type' => $this->groupTypeB
      ->id(),
  ]);
  $group_b
    ->addContent($node_2, 'node_as_content:page');
  $group_b
    ->addMember($this
    ->getCurrentUser());
  $group_b
    ->addMember($account);
  $this
    ->assertTrue($this->accessControlHandler
    ->access($node_1, 'delete'), 'Members can delete any published grouped nodes.');
  $this
    ->assertTrue($this->accessControlHandler
    ->access($node_2, 'delete'), 'Members can delete any unpublished grouped nodes.');
  $this
    ->assertTrue($this->accessControlHandler
    ->access($node_3, 'delete'), 'The ungrouped node can be deleted.');
  $this
    ->setCurrentUser($account);
  $this
    ->assertTrue($this->accessControlHandler
    ->access($node_1, 'delete'), 'Members can delete any published grouped nodes.');
  $this
    ->assertTrue($this->accessControlHandler
    ->access($node_2, 'delete'), 'Members can delete any unpublished grouped nodes.');
  $this
    ->assertTrue($this->accessControlHandler
    ->access($node_3, 'delete'), 'The ungrouped node can be deleted.');
  $this
    ->setCurrentUser($this
    ->createUser([], $this->permissions));
  $this
    ->assertFalse($this->accessControlHandler
    ->access($node_1, 'delete'), 'Non-members cannot delete published grouped nodes.');
  $this
    ->assertFalse($this->accessControlHandler
    ->access($node_2, 'delete'), 'Non-members cannot delete unpublished grouped nodes.');
  $this
    ->assertTrue($this->accessControlHandler
    ->access($node_3, 'delete'), 'The ungrouped node can be deleted.');
}