public function DeleteTest::testDelete in Zircon Profile 8

Same name and namespace in other branches

1. 8.0 core/modules/rest/src/Tests/DeleteTest.php \Drupal\rest\Tests\DeleteTest::testDelete()

Tests several valid and invalid delete requests on all entity types.

File

core/modules/rest/src/Tests/DeleteTest.php, line 29

Contains \Drupal\rest\Tests\DeleteTest.

Class

DeleteTest

Tests the deletion of resources.

Namespace

Drupal\rest\Tests

Code

public function testDelete() {

  // Define the entity types we want to test.
  // @todo expand this test to at least users once their access
  // controllers are implemented.
  $entity_types = array(
    'entity_test',
    'node',
  );
  foreach ($entity_types as $entity_type) {
    $this
      ->enableService('entity:' . $entity_type, 'DELETE');

    // Create a user account that has the required permissions to delete
    // resources via the REST API.
    $permissions = $this
      ->entityPermissions($entity_type, 'delete');
    $permissions[] = 'restful delete entity:' . $entity_type;
    $account = $this
      ->drupalCreateUser($permissions);
    $this
      ->drupalLogin($account);

    // Create an entity programmatically.
    $entity = $this
      ->entityCreate($entity_type);
    $entity
      ->save();

    // Delete it over the REST API.
    $response = $this
      ->httpRequest($entity
      ->urlInfo(), 'DELETE');

    // Clear the static cache with entity_load(), otherwise we won't see the
    // update.
    $entity = entity_load($entity_type, $entity
      ->id(), TRUE);
    $this
      ->assertFalse($entity, $entity_type . ' entity is not in the DB anymore.');
    $this
      ->assertResponse('204', 'HTTP response code is correct.');
    $this
      ->assertEqual($response, '', 'Response body is empty.');

    // Try to delete an entity that does not exist.
    $response = $this
      ->httpRequest(Url::fromRoute('entity.' . $entity_type . '.canonical', [
      $entity_type => 9999,
    ]), 'DELETE');
    $this
      ->assertResponse(404);
    $this
      ->assertText('The requested page could not be found.');

    // Try to delete an entity without proper permissions.
    $this
      ->drupalLogout();

    // Re-save entity to the database.
    $entity = $this
      ->entityCreate($entity_type);
    $entity
      ->save();
    $this
      ->httpRequest($entity
      ->urlInfo(), 'DELETE');
    $this
      ->assertResponse(403);
    $this
      ->assertNotIdentical(FALSE, entity_load($entity_type, $entity
      ->id(), TRUE), 'The ' . $entity_type . ' entity is still in the database.');
  }

  // Try to delete a resource which is not REST API enabled.
  $this
    ->enableService(FALSE);
  $account = $this
    ->drupalCreateUser();
  $this
    ->drupalLogin($account);
  $this
    ->httpRequest($account
    ->urlInfo(), 'DELETE');
  $user_storage = $this->container
    ->get('entity.manager')
    ->getStorage('user');
  $user_storage
    ->resetCache(array(
    $account
      ->id(),
  ));
  $user = $user_storage
    ->load($account
    ->id());
  $this
    ->assertEqual($account
    ->id(), $user
    ->id(), 'User still exists in the database.');
  $this
    ->assertResponse(405);
}