class OgAccessHookTest in Organic groups 8
Same name in this branch
- 8 tests/src/Unit/OgAccessHookTest.php \Drupal\Tests\og\Unit\OgAccessHookTest
- 8 tests/src/Kernel/Access/OgAccessHookTest.php \Drupal\Tests\og\Kernel\Access\OgAccessHookTest
Tests access through OG's implementation of hook_entity_access().
@group og
Hierarchy
- class \Drupal\KernelTests\KernelTestBase extends \PHPUnit\Framework\TestCase implements ServiceProviderInterface uses AssertContentTrait, AssertLegacyTrait, AssertHelperTrait, ConfigTestTrait, PhpunitCompatibilityTrait, RandomGeneratorTrait, TestRequirementsTrait
- class \Drupal\Tests\og\Kernel\Access\OgAccessHookTest uses OgMembershipCreationTrait
Expanded class hierarchy of OgAccessHookTest
File
- tests/
src/ Kernel/ Access/ OgAccessHookTest.php, line 26
Namespace
Drupal\Tests\og\Kernel\AccessView source
class OgAccessHookTest extends KernelTestBase {
use OgMembershipCreationTrait;
/**
* {@inheritdoc}
*/
public static $modules = [
'block_content',
'field',
'node',
'og',
'system',
'user',
];
/**
* A test group.
*
* @var \Drupal\Core\Entity\EntityInterface
*/
protected $group;
/**
* Test group content entities.
*
* @var \Drupal\Core\Entity\EntityInterface[]
*/
protected $groupContent;
/**
* Test non group content entity.
*
* @var \Drupal\Core\Entity\EntityInterface
*/
protected $nonGroupContent;
/**
* Test users.
*
* @var \Drupal\Core\Session\AccountInterface[]
*/
protected $users;
/**
* Test roles.
*
* @var \Drupal\user\Entity\Role[]
*/
protected $roles;
/**
* {@inheritdoc}
*/
protected function setUp() : void {
parent::setUp();
$this
->installConfig([
'og',
]);
$this
->installEntitySchema('block_content');
$this
->installEntitySchema('node');
$this
->installEntitySchema('og_membership');
$this
->installEntitySchema('user');
$this
->installSchema('system', 'sequences');
// Create two Drupal roles: one for normal users and one for administrators.
foreach ([
'authenticated',
'administrator',
] as $role_id) {
$role = Role::create([
'id' => $role_id,
'label' => $role_id,
]);
$role
->grantPermission('access content');
// Grant the global 'administer organic groups' permission to the
// administrator role.
if ($role_id === 'administrator') {
$role
->grantPermission('administer organic groups');
}
$role
->save();
$this->roles[$role_id] = $role;
}
// Create a test user for each membership type.
$membership_types = [
// The group owner.
'owner',
// A site administrator with the right to administer all groups.
'group-admin',
// A regular member of the group.
'member',
// A user that is not a member of the group.
'non-member',
// A blocked user.
'blocked',
];
foreach ($membership_types as $membership_type) {
$user = User::create([
'name' => $membership_type,
]);
// Grant the 'administrator' role to the group administrator.
if ($membership_type === 'group-admin') {
$user
->addRole('administrator');
}
$user
->save();
$this->users[$membership_type] = $user;
}
// Create a "group" bundle on the Custom Block entity type and turn it into
// a group. Note we're not using the Entity Test entity for this since it
// does not have real support for multiple bundles.
BlockContentType::create([
'id' => 'group',
])
->save();
Og::groupTypeManager()
->addGroup('block_content', 'group');
// Create a group.
$this->group = BlockContent::create([
'title' => $this
->randomString(),
'type' => 'group',
'uid' => $this->users['owner']
->id(),
]);
$this->group
->save();
// Create a group content type.
$type = NodeType::create([
'type' => 'group_content',
'name' => $this
->randomString(),
]);
$type
->save();
$settings = [
'field_storage_config' => [
'settings' => [
'target_type' => 'block_content',
],
],
];
Og::createField(OgGroupAudienceHelperInterface::DEFAULT_FIELD, 'node', 'group_content', $settings);
// Grant members permission to edit their own content.
/** @var \Drupal\og\Entity\OgRole $role */
$role = OgRole::getRole('block_content', 'group', OgRoleInterface::AUTHENTICATED);
$role
->grantPermission('edit own group_content content');
$role
->save();
// Subscribe the normal member and the blocked member to the group.
foreach ([
'member',
'blocked',
] as $membership_type) {
$state = $membership_type === 'member' ? OgMembershipInterface::STATE_ACTIVE : OgMembershipInterface::STATE_BLOCKED;
$this
->createOgMembership($this->group, $this->users[$membership_type], NULL, $state);
}
// Create three group content items, one owned by the group owner, one by
// the member, and one by the blocked user.
foreach ([
'owner',
'member',
'blocked',
] as $membership_type) {
$this->groupContent[$membership_type] = Node::create([
'title' => $this
->randomString(),
'type' => 'group_content',
'uid' => $this->users[$membership_type]
->id(),
OgGroupAudienceHelperInterface::DEFAULT_FIELD => [
[
'target_id' => $this->group
->id(),
],
],
]);
$this->groupContent[$membership_type]
->save();
}
$this->nonGroupContent = Node::create([
'title' => $this
->randomString(),
'type' => 'group_content',
'uid' => $this->users['member']
->id(),
OgGroupAudienceHelperInterface::DEFAULT_FIELD => [],
]);
$this->nonGroupContent
->save();
}
/**
* Tests access to entity operations through the access hook.
*
* @param string $user
* The name of the user to test.
* @param array $expected_results
* An associative array indicating whether the user should have the right to
* edit content owned by the user represented by the array key.
*
* @dataProvider entityOperationAccessProvider
*/
public function testEntityOperationAccess($user, array $expected_results) {
foreach ($expected_results as $group_content => $expected_result) {
/** @var \Drupal\Core\Access\AccessResult $result */
$result = og_entity_access($this->groupContent[$group_content], 'update', $this->users[$user]);
$this
->assertEquals($expected_result, $result
->isAllowed());
}
$result = og_entity_access($this->nonGroupContent, 'update', $this->users['member']);
$this
->assertEquals(TRUE, $result
->isNeutral());
}
/**
* Data provider for ::testEntityOperationAccess().
*
* @return array
* And array of test data sets. Each set consisting of:
* - The name of the user to test.
* - An associative array indicating whether the user should have the right
* to edit content owned by the user represented by the array key.
*/
public function entityOperationAccessProvider() {
return [
[
// The administrator should have the right to edit group content items
// owned by any user.
'group-admin',
[
'owner' => TRUE,
'member' => TRUE,
'blocked' => TRUE,
],
],
[
// Members should only have the right to edit their own group content.
'member',
[
'owner' => FALSE,
'member' => TRUE,
'blocked' => FALSE,
],
],
[
// The non-member cannot edit any group content.
'non-member',
[
'owner' => FALSE,
'member' => FALSE,
'blocked' => FALSE,
],
],
[
// The blocked member cannot edit any group content, not even their own.
'blocked',
[
'owner' => FALSE,
'member' => FALSE,
'blocked' => FALSE,
],
],
];
}
}
Members
Name | Modifiers | Type | Description | Overrides |
---|---|---|---|---|
AssertContentTrait:: |
protected | property | The current raw content. | |
AssertContentTrait:: |
protected | property | The drupalSettings value from the current raw $content. | |
AssertContentTrait:: |
protected | property | The XML structure parsed from the current raw $content. | 1 |
AssertContentTrait:: |
protected | property | The plain-text content of raw $content (text nodes). | |
AssertContentTrait:: |
protected | function | Passes if the raw text IS found escaped on the loaded page, fail otherwise. | |
AssertContentTrait:: |
protected | function | Asserts that a field exists with the given name or ID. | |
AssertContentTrait:: |
protected | function | Asserts that a field exists with the given ID and value. | |
AssertContentTrait:: |
protected | function | Asserts that a field exists with the given name and value. | |
AssertContentTrait:: |
protected | function | Asserts that a field exists in the current page by the given XPath. | |
AssertContentTrait:: |
protected | function | Asserts that a checkbox field in the current page is checked. | |
AssertContentTrait:: |
protected | function | Asserts that a field exists in the current page with a given Xpath result. | |
AssertContentTrait:: |
protected | function | Passes if a link with the specified label is found. | |
AssertContentTrait:: |
protected | function | Passes if a link containing a given href (part) is found. | |
AssertContentTrait:: |
protected | function | Asserts that each HTML ID is used for just a single element. | |
AssertContentTrait:: |
protected | function | Passes if the raw text IS NOT found escaped on the loaded page, fail otherwise. | |
AssertContentTrait:: |
protected | function | Asserts that a field does not exist with the given name or ID. | |
AssertContentTrait:: |
protected | function | Asserts that a field does not exist with the given ID and value. | |
AssertContentTrait:: |
protected | function | Asserts that a field does not exist with the given name and value. | |
AssertContentTrait:: |
protected | function | Asserts that a field does not exist or its value does not match, by XPath. | |
AssertContentTrait:: |
protected | function | Asserts that a checkbox field in the current page is not checked. | |
AssertContentTrait:: |
protected | function | Passes if a link with the specified label is not found. | |
AssertContentTrait:: |
protected | function | Passes if a link containing a given href (part) is not found. | |
AssertContentTrait:: |
protected | function | Passes if a link containing a given href is not found in the main region. | |
AssertContentTrait:: |
protected | function | Asserts that a select option in the current page does not exist. | |
AssertContentTrait:: |
protected | function | Asserts that a select option in the current page is not checked. | |
AssertContentTrait:: |
protected | function | Triggers a pass if the perl regex pattern is not found in raw content. | |
AssertContentTrait:: |
protected | function | Passes if the raw text is NOT found on the loaded page, fail otherwise. | |
AssertContentTrait:: |
protected | function | Passes if the page (with HTML stripped) does not contains the text. | |
AssertContentTrait:: |
protected | function | Pass if the page title is not the given string. | |
AssertContentTrait:: |
protected | function | Passes if the text is found MORE THAN ONCE on the text version of the page. | |
AssertContentTrait:: |
protected | function | Asserts that a select option in the current page exists. | |
AssertContentTrait:: |
protected | function | Asserts that a select option with the visible text exists. | |
AssertContentTrait:: |
protected | function | Asserts that a select option in the current page is checked. | |
AssertContentTrait:: |
protected | function | Asserts that a select option in the current page is checked. | |
AssertContentTrait:: |
protected | function | Asserts that a select option in the current page exists. | |
AssertContentTrait:: |
protected | function | Triggers a pass if the Perl regex pattern is found in the raw content. | |
AssertContentTrait:: |
protected | function | Passes if the raw text IS found on the loaded page, fail otherwise. | |
AssertContentTrait:: |
protected | function | Passes if the page (with HTML stripped) contains the text. | |
AssertContentTrait:: |
protected | function | Helper for assertText and assertNoText. | |
AssertContentTrait:: |
protected | function | Asserts that a Perl regex pattern is found in the plain-text content. | |
AssertContentTrait:: |
protected | function | Asserts themed output. | |
AssertContentTrait:: |
protected | function | Pass if the page title is the given string. | |
AssertContentTrait:: |
protected | function | Passes if the text is found ONLY ONCE on the text version of the page. | |
AssertContentTrait:: |
protected | function | Helper for assertUniqueText and assertNoUniqueText. | |
AssertContentTrait:: |
protected | function | Builds an XPath query. | |
AssertContentTrait:: |
protected | function | Helper: Constructs an XPath for the given set of attributes and value. | |
AssertContentTrait:: |
protected | function | Searches elements using a CSS selector in the raw content. | |
AssertContentTrait:: |
protected | function | Get all option elements, including nested options, in a select. | |
AssertContentTrait:: |
protected | function | Gets the value of drupalSettings for the currently-loaded page. | |
AssertContentTrait:: |
protected | function | Gets the current raw content. | |
AssertContentTrait:: |
protected | function | Get the selected value from a select field. | |
AssertContentTrait:: |
protected | function | Retrieves the plain-text content from the current raw content. | |
AssertContentTrait:: |
protected | function | Get the current URL from the cURL handler. | 1 |
AssertContentTrait:: |
protected | function | Parse content returned from curlExec using DOM and SimpleXML. | |
AssertContentTrait:: |
protected | function | Removes all white-space between HTML tags from the raw content. | |
AssertContentTrait:: |
protected | function | Sets the value of drupalSettings for the currently-loaded page. | |
AssertContentTrait:: |
protected | function | Sets the raw content (e.g. HTML). | |
AssertContentTrait:: |
protected | function | Performs an xpath search on the contents of the internal browser. | |
AssertHelperTrait:: |
protected static | function | Casts MarkupInterface objects into strings. | |
AssertLegacyTrait:: |
protected | function | Deprecated Scheduled for removal in Drupal 10.0.0. Use self::assertTrue() instead. | |
AssertLegacyTrait:: |
protected | function | Deprecated Scheduled for removal in Drupal 10.0.0. Use self::assertEquals() instead. | |
AssertLegacyTrait:: |
protected | function | Deprecated Scheduled for removal in Drupal 10.0.0. Use self::assertSame() instead. | |
AssertLegacyTrait:: |
protected | function | Deprecated Scheduled for removal in Drupal 10.0.0. Use self::assertEquals() instead. | |
AssertLegacyTrait:: |
protected | function | Deprecated Scheduled for removal in Drupal 10.0.0. Use self::assertNotEquals() instead. | |
AssertLegacyTrait:: |
protected | function | Deprecated Scheduled for removal in Drupal 10.0.0. Use self::assertNotSame() instead. | |
AssertLegacyTrait:: |
protected | function | Deprecated Scheduled for removal in Drupal 10.0.0. Use self::assertTrue() instead. | |
AssertLegacyTrait:: |
protected | function | ||
ConfigTestTrait:: |
protected | function | Returns a ConfigImporter object to import test configuration. | |
ConfigTestTrait:: |
protected | function | Copies configuration objects from source storage to target storage. | |
KernelTestBase:: |
protected | property | Back up and restore any global variables that may be changed by tests. | |
KernelTestBase:: |
protected | property | Back up and restore static class properties that may be changed by tests. | |
KernelTestBase:: |
protected | property | Contains a few static class properties for performance. | |
KernelTestBase:: |
protected | property | ||
KernelTestBase:: |
protected | property | @todo Move into Config test base class. | 7 |
KernelTestBase:: |
protected static | property | An array of config object names that are excluded from schema checking. | |
KernelTestBase:: |
protected | property | ||
KernelTestBase:: |
protected | property | ||
KernelTestBase:: |
protected | property | Do not forward any global state from the parent process to the processes that run the actual tests. | |
KernelTestBase:: |
protected | property | The app root. | |
KernelTestBase:: |
protected | property | Kernel tests are run in separate processes because they allow autoloading of code from extensions. Running the test in a separate process isolates this behavior from other tests. Subclasses should not override this property. | |
KernelTestBase:: |
protected | property | ||
KernelTestBase:: |
protected | property | Set to TRUE to strict check all configuration saved. | 6 |
KernelTestBase:: |
protected | property | The virtual filesystem root directory. | |
KernelTestBase:: |
protected | function | 1 | |
KernelTestBase:: |
protected | function | Bootstraps a basic test environment. | |
KernelTestBase:: |
private | function | Bootstraps a kernel for a test. | |
KernelTestBase:: |
protected | function | Configuration accessor for tests. Returns non-overridden configuration. | |
KernelTestBase:: |
protected | function | Disables modules for this test. | |
KernelTestBase:: |
protected | function | Enables modules for this test. | |
KernelTestBase:: |
protected | function | Gets the config schema exclusions for this test. | |
KernelTestBase:: |
protected | function | Returns the Database connection info to be used for this test. | 1 |
KernelTestBase:: |
public | function | ||
KernelTestBase:: |
private | function | Returns Extension objects for $modules to enable. | |
KernelTestBase:: |
private static | function | Returns the modules to enable for this test. | |
KernelTestBase:: |
protected | function | Initializes the FileCache component. | |
KernelTestBase:: |
protected | function | Installs default configuration for a given list of modules. | |
KernelTestBase:: |
protected | function | Installs the storage schema for a specific entity type. | |
KernelTestBase:: |
protected | function | Installs database tables from a module schema definition. | |
KernelTestBase:: |
protected | function | Returns whether the current test method is running in a separate process. | |
KernelTestBase:: |
protected | function | ||
KernelTestBase:: |
public | function |
Registers test-specific services. Overrides ServiceProviderInterface:: |
26 |
KernelTestBase:: |
protected | function | Renders a render array. | 1 |
KernelTestBase:: |
protected | function | Sets the install profile and rebuilds the container to update it. | |
KernelTestBase:: |
protected | function | Sets an in-memory Settings variable. | |
KernelTestBase:: |
public static | function | 1 | |
KernelTestBase:: |
protected | function | Sets up the filesystem, so things like the file directory. | 2 |
KernelTestBase:: |
protected | function | Stops test execution. | |
KernelTestBase:: |
protected | function | 6 | |
KernelTestBase:: |
public | function | @after | |
KernelTestBase:: |
protected | function | Dumps the current state of the virtual filesystem to STDOUT. | |
KernelTestBase:: |
public | function | BC: Automatically resolve former KernelTestBase class properties. | |
KernelTestBase:: |
public | function | Prevents serializing any properties. | |
OgAccessHookTest:: |
protected | property | A test group. | |
OgAccessHookTest:: |
protected | property | Test group content entities. | |
OgAccessHookTest:: |
public static | property |
Modules to enable. Overrides KernelTestBase:: |
|
OgAccessHookTest:: |
protected | property | Test non group content entity. | |
OgAccessHookTest:: |
protected | property | Test roles. | |
OgAccessHookTest:: |
protected | property | Test users. | |
OgAccessHookTest:: |
public | function | Data provider for ::testEntityOperationAccess(). | |
OgAccessHookTest:: |
protected | function |
Overrides KernelTestBase:: |
|
OgAccessHookTest:: |
public | function | Tests access to entity operations through the access hook. | |
OgMembershipCreationTrait:: |
protected | function | Creates a test membership. | |
PhpunitCompatibilityTrait:: |
public | function | Returns a mock object for the specified class using the available method. | |
PhpunitCompatibilityTrait:: |
public | function | Compatibility layer for PHPUnit 6 to support PHPUnit 4 code. | |
RandomGeneratorTrait:: |
protected | property | The random generator. | |
RandomGeneratorTrait:: |
protected | function | Gets the random generator for the utility methods. | |
RandomGeneratorTrait:: |
protected | function | Generates a unique random string containing letters and numbers. | 1 |
RandomGeneratorTrait:: |
public | function | Generates a random PHP object. | |
RandomGeneratorTrait:: |
public | function | Generates a pseudo-random string of ASCII characters of codes 32 to 126. | |
RandomGeneratorTrait:: |
public | function | Callback for random string validation. | |
StorageCopyTrait:: |
protected static | function | Copy the configuration from one storage to another and remove stale items. | |
TestRequirementsTrait:: |
private | function | Checks missing module requirements. | |
TestRequirementsTrait:: |
protected | function | Check module requirements for the Drupal use case. | 1 |
TestRequirementsTrait:: |
protected static | function | Returns the Drupal root directory. |