You are here

public function WorkspaceIndividualPermissionsTest::testViewIndividualWorkspace in Workspace 8

Verifies that a user can view a specific workspace.

File

tests/src/Functional/WorkspaceIndividualPermissionsTest.php, line 58

Class

WorkspaceIndividualPermissionsTest
Tests permission controls on workspaces.

Namespace

Drupal\Tests\workspace\Functional

Code

public function testViewIndividualWorkspace() {
  $permissions = [
    'access administration pages',
    'administer site configuration',
    'create_workspace',
    'edit_own_workspace',
  ];
  $editor1 = $this
    ->drupalCreateUser($permissions);

  // Login as a limited-access user and create a workspace.
  $this
    ->drupalLogin($editor1);
  $this
    ->createWorkspaceThroughUI('Bears', 'bears');
  $bears = $this
    ->getOneWorkspaceByLabel('Bears');

  // Now login as a different user and create a workspace.
  $editor2 = $this
    ->drupalCreateUser(array_merge($permissions, [
    'view_workspace_' . $bears
      ->id(),
  ]));
  $this
    ->drupalLogin($editor2);
  $session = $this
    ->getSession();
  $this
    ->createWorkspaceThroughUI('Packers', 'packers');
  $packers = $this
    ->getOneWorkspaceByLabel('Packers');

  // Load the activate form for the Bears workspace. It should work, because
  // the user has the permission specific to that workspace.
  $this
    ->drupalGet("admin/structure/workspace/{$bears->id()}/activate");
  $this
    ->assertEquals(200, $session
    ->getStatusCode());

  // But editor 1 cannot view the Packers workspace.
  $this
    ->drupalLogin($editor1);
  $this
    ->drupalGet("admin/structure/workspace/{$packers->id()}/activate");
  $this
    ->assertEquals(403, $session
    ->getStatusCode());
}