public function PbfAccessByNodeRefTest::testPbfAccessByNodeRef in Permissions by field 8
Test the "pbf" node access with a Pbf field which reference node.
File
- tests/
src/ Functional/ PbfAccessByNodeRefTest.php, line 36
Class
- PbfAccessByNodeRefTest
- Test access permissions with Pbf field which reference node.
Namespace
Drupal\Tests\pbf\FunctionalCode
public function testPbfAccessByNodeRef() {
$this
->drupalLogin($this->adminUser);
$this
->drupalGet("node/{$this->article1->id()}");
$this
->assertResponse(200, 'adminUser is allowed to view the content.');
$this
->drupalGet("node/{$this->article1->id()}/edit");
// Make sure we don't get a 401 unauthorized response:
$this
->assertResponse(200, 'adminUser is allowed to edit the content.');
$bundle_path = 'admin/structure/types/manage/article';
// Check that the field appears in the overview form.
$this
->drupalGet($bundle_path . '/fields');
$this
->assertFieldByXPath('//table[@id="field-overview"]//tr[@id="field-pbf-group"]/td[1]', 'Content of group', 'Field was created and appears in the overview page.');
// Check that the field appears in the overview manage display form.
$this
->drupalGet($bundle_path . '/form-display');
$this
->assertFieldByXPath('//table[@id="field-display-overview"]//tr[@id="field-pbf-group"]/td[1]', 'Content of group', 'Field appears in the Manage form display page.');
$this
->assertFieldByName('fields[field_pbf_group][type]', 'pbf_widget', 'The expected widget is selected.');
// Check that the field appears in the overview manage display page.
$this
->drupalGet($bundle_path . '/display');
$this
->assertFieldByXPath('//table[@id="field-display-overview"]//tr[@id="field-pbf-group"]/td[1]', 'Content of group', 'Field appears in the Manage form display page.');
$this
->assertFieldByName('fields[field_pbf_group][type]', 'pbf_formatter_default', 'The expected formatter is selected.');
$user_path_config = 'admin/config/people/accounts';
$this
->drupalGet($user_path_config . '/fields');
$this
->assertFieldByXPath('//table[@id="field-overview"]//tr[@id="field-pbf-group"]/td[1]', 'Member of group', 'User Obf field was created and appears in the overview page.');
$this
->drupalGet($user_path_config . '/form-display');
$this
->assertFieldByName('fields[field_pbf_group][type]', 'pbf_widget', 'The expected widget is selected.');
$this
->drupalGet($user_path_config . '/display');
$this
->assertFieldByName('fields[field_pbf_group][type]', 'pbf_formatter_default', 'The expected formatter is selected.');
// Test view access with normal user.
$this
->drupalLogin($this->normalUser);
$this
->drupalGet("node/{$this->article2->id()}");
$this
->assertText(t('Access denied'));
$this
->assertResponse(403);
$this
->drupalGet("node/{$this->article1->id()}");
$this
->assertResponse(200);
$this
->drupalGet("node/{$this->article1->id()}/edit");
$this
->assertResponse(403);
$this
->drupalGet("node/{$this->article2->id()}/edit");
$this
->assertResponse(403);
// Build the search index.
$this->container
->get('cron')
->run();
// Check to see that we find the number of search results expected.
$this
->checkSearchResults('Article', 1);
// Set article2 as public without custom permission.
$value = [
'target_id' => $this->group1
->id(),
'grant_public' => 1,
'grant_view' => 0,
'grant_update' => 0,
'grant_delete' => 0,
];
$this->article2
->set($this->fieldname, $value)
->save();
$this
->drupalGet("node/{$this->article2->id()}");
$this
->assertResponse(200);
$this
->checkSearchResults('Article', 2);
$this
->drupalGet("node/{$this->article2->id()}/edit");
$this
->assertResponse(403);
$this
->drupalGet("node/{$this->article2->id()}/delete");
$this
->assertResponse(403);
// Set article2 with view permission.
$value = [
'target_id' => $this->group1
->id(),
'grant_public' => 0,
'grant_view' => 1,
'grant_update' => 0,
'grant_delete' => 0,
];
$this->article2
->set($this->fieldname, $value)
->save();
$this
->drupalGet("node/{$this->article2->id()}");
$this
->assertResponse(403);
$this
->checkSearchResults('Article', 1);
// Associate normalUser with group1.
$this
->setUserField($this->normalUser
->id(), $this->fieldname, [
'target_id' => $this->group1
->id(),
]);
// Check if user is well associated with group1.
$this
->drupalGet("user/{$this->normalUser->id()}/edit");
$this
->assertResponse(200);
$this
->assertFieldByName('field_pbf_group[0][target_id]', $this->group1
->getTitle() . ' (' . $this->group1
->id() . ')', 'The expected value is found in the Pbf input field');
$this
->drupalGet("user/{$this->normalUser->id()}");
$this
->assertLink($this->group1
->getTitle());
$this
->assertResponse(200);
// Check search.
$this->container
->get('cron')
->run();
$this
->checkSearchResults('Article', 2);
// Check view.
$this
->drupalGet("node/{$this->article2->id()}");
$this
->assertResponse(200);
// Check edit.
$this
->drupalGet("node/{$this->article2->id()}/edit");
$this
->assertResponse(403);
// Check delete.
$this
->drupalGet("node/{$this->article2->id()}/delete");
$this
->assertResponse(403);
// Set article2 with view, update, delete permissions.
$value = [
'target_id' => $this->group1
->id(),
'grant_public' => 0,
'grant_view' => 1,
'grant_update' => 1,
'grant_delete' => 1,
];
$this->article2
->set($this->fieldname, $value)
->save();
// Check view.
$this
->drupalGet("node/{$this->article2->id()}");
$this
->assertResponse(200);
// Check edit.
$this
->drupalGet("node/{$this->article2->id()}/edit");
$this
->assertResponse(200);
// Check delete.
$this
->drupalGet("node/{$this->article2->id()}/delete");
$this
->assertResponse(200);
// Test with anonymous user.
$this
->drupalLogout();
$this
->drupalGet("node/{$this->article1->id()}");
$this
->assertResponse(200);
$this
->drupalGet("node/{$this->article2->id()}");
$this
->assertResponse(403);
}