public function AccessCacheTest::testNodeEdit in Workbench Access 8

Tests that the user can edit the node when allowed.

File

tests/src/Functional/AccessCacheTest.php, line 44

Class

AccessCacheTest

Tests the clearing of access control cache.

Namespace

Drupal\Tests\workbench_access\Functional

Code

public function testNodeEdit() {

  // Set up a content type, taxonomy field, and taxonomy scheme.
  $node_type = $this
    ->createContentType([
    'type' => 'page',
  ]);
  $vocab = $this
    ->setUpVocabulary();
  $field_name = WorkbenchAccessManagerInterface::FIELD_NAME;
  $title = 'Section';
  $cardinality = -1;
  $field = $this
    ->setUpTaxonomyFieldForEntityType('node', $node_type
    ->id(), $vocab
    ->id(), $field_name, $title, $cardinality);
  $this
    ->assertEqual($field
    ->getDefaultValueLiteral(), []);
  $scheme = $this
    ->setUpTaxonomyScheme($node_type, $vocab);
  $user_storage = \Drupal::service('workbench_access.user_section_storage');
  $role_storage = \Drupal::service('workbench_access.role_section_storage');

  // Set up an editor and log in as them.
  $editor = $this
    ->setUpEditorUser();
  $this
    ->drupalLogin($editor);

  // Set up some roles and terms for this test.
  // Create terms and roles.
  $staff_term = Term::create([
    'vid' => $vocab
      ->id(),
    'name' => 'Staff',
  ]);
  $staff_term
    ->save();
  $super_staff_term = Term::create([
    'vid' => $vocab
      ->id(),
    'name' => 'Super staff',
  ]);
  $super_staff_term
    ->save();
  $base_term = Term::create([
    'vid' => $vocab
      ->id(),
    'name' => 'Editor',
  ]);
  $base_term
    ->save();

  // Add the user to the base section.
  $user_storage
    ->addUser($scheme, $editor, [
    $base_term
      ->id(),
  ]);
  $expected = [
    $editor
      ->id(),
  ];
  $existing_users = $user_storage
    ->getEditors($scheme, $base_term
    ->id());
  $this
    ->assertEquals($expected, array_keys($existing_users));

  // Create a node that the user cannot edit.
  $node_values = [
    'type' => 'page',
    'title' => 'foo',
    $field_name => [
      $super_staff_term
        ->id(),
      $staff_term
        ->id(),
    ],
  ];
  $node = $this
    ->createNode($node_values);
  $this
    ->drupalGet('node/' . $node
    ->id() . '/edit');
  $this
    ->assertSession()
    ->statusCodeEquals(403);

  // Add the user to the super staff section.
  $user_storage
    ->addUser($scheme, $editor, [
    $super_staff_term
      ->id(),
    $base_term
      ->id(),
  ]);
  $this
    ->assertEquals($expected, array_keys($existing_users));
  $this
    ->drupalGet('node/' . $node
    ->id() . '/edit');
  $this
    ->assertSession()
    ->statusCodeEquals(200);

  // Now remove the user.
  $user_storage
    ->removeUser($scheme, $editor, [
    $super_staff_term
      ->id(),
  ]);
  $this
    ->drupalGet('node/' . $node
    ->id() . '/edit');
  $this
    ->assertSession()
    ->statusCodeEquals(403);

  // Now add the user by role.
  $role_storage
    ->addRole($scheme, 'editor', [
    $super_staff_term
      ->id(),
  ]);
  $this
    ->drupalGet('node/' . $node
    ->id() . '/edit');
  $this
    ->assertSession()
    ->statusCodeEquals(200);

  // Now remove the user role.
  $role_storage
    ->removeRole($scheme, 'editor', [
    $super_staff_term
      ->id(),
  ]);
  $this
    ->drupalGet('node/' . $node
    ->id() . '/edit');
  $this
    ->assertSession()
    ->statusCodeEquals(403);

  // Now, add the user again.
  $user_storage
    ->addUser($scheme, $editor, [
    $super_staff_term
      ->id(),
  ]);
  $this
    ->drupalGet('node/' . $node
    ->id() . '/edit');
  $this
    ->assertSession()
    ->statusCodeEquals(200);

  // Now delete the term.
  $super_staff_term
    ->delete();
  $this
    ->drupalGet('node/' . $node
    ->id() . '/edit');
  $this
    ->assertSession()
    ->statusCodeEquals(403);

  // Create another node assigned to a user section. This check tests that
  // we only deleted the section associations we wanted to.
  $node_values = [
    'type' => 'page',
    'title' => 'foo2',
    $field_name => [
      $base_term
        ->id(),
      $staff_term
        ->id(),
    ],
  ];
  $node2 = $this
    ->createNode($node_values);
  $this
    ->drupalGet('node/' . $node2
    ->id() . '/edit');
  $this
    ->assertSession()
    ->statusCodeEquals(200);

  // Now remove the user.
  $user_storage
    ->removeUser($scheme, $editor, [
    $base_term
      ->id(),
  ]);
  $this
    ->drupalGet('node/' . $node
    ->id() . '/edit');
  $this
    ->assertSession()
    ->statusCodeEquals(403);

  // Now delete the scheme, which should restore access to both nodes.
  $scheme
    ->delete();
  $this
    ->drupalGet('node/' . $node
    ->id() . '/edit');
  $this
    ->assertSession()
    ->statusCodeEquals(200);
  $this
    ->drupalGet('node/' . $node2
    ->id() . '/edit');
  $this
    ->assertSession()
    ->statusCodeEquals(200);
}