TaxonomyImageTest.php in Zircon Profile 8

Contains \Drupal\taxonomy\Tests\TaxonomyImageTest.

Namespace

Drupal\taxonomy\Tests

File

core/modules/taxonomy/src/Tests/TaxonomyImageTest.php

<?php

/**
 * @file
 * Contains \Drupal\taxonomy\Tests\TaxonomyImageTest.
 */
namespace Drupal\taxonomy\Tests;

use Drupal\user\RoleInterface;
use Drupal\file\Entity\File;

/**
 * Tests access checks of private image fields.
 *
 * @group taxonomy
 */
class TaxonomyImageTest extends TaxonomyTestBase {

  /**
   * Used taxonomy vocabulary.
   *
   * @var \Drupal\taxonomy\VocabularyInterface
   */
  protected $vocabulary;

  /**
   * Modules to enable.
   *
   * @var array
   */
  public static $modules = array(
    'image',
  );
  protected function setUp() {
    parent::setUp();

    // Remove access content permission from registered users.
    user_role_revoke_permissions(RoleInterface::AUTHENTICATED_ID, array(
      'access content',
    ));
    $this->vocabulary = $this
      ->createVocabulary();

    // Add a field to the vocabulary.
    $entity_type = 'taxonomy_term';
    $name = 'field_test';
    entity_create('field_storage_config', array(
      'field_name' => $name,
      'entity_type' => $entity_type,
      'type' => 'image',
      'settings' => array(
        'uri_scheme' => 'private',
      ),
    ))
      ->save();
    entity_create('field_config', array(
      'field_name' => $name,
      'entity_type' => $entity_type,
      'bundle' => $this->vocabulary
        ->id(),
      'settings' => array(),
    ))
      ->save();
    entity_get_display($entity_type, $this->vocabulary
      ->id(), 'default')
      ->setComponent($name, array(
      'type' => 'image',
      'settings' => array(),
    ))
      ->save();
    entity_get_form_display($entity_type, $this->vocabulary
      ->id(), 'default')
      ->setComponent($name, array(
      'type' => 'image_image',
      'settings' => array(),
    ))
      ->save();
  }
  public function testTaxonomyImageAccess() {
    $user = $this
      ->drupalCreateUser(array(
      'administer site configuration',
      'administer taxonomy',
      'access user profiles',
    ));
    $this
      ->drupalLogin($user);

    // Create a term and upload the image.
    $files = $this
      ->drupalGetTestFiles('image');
    $image = array_pop($files);
    $edit['name[0][value]'] = $this
      ->randomMachineName();
    $edit['files[field_test_0]'] = drupal_realpath($image->uri);
    $this
      ->drupalPostForm('admin/structure/taxonomy/manage/' . $this->vocabulary
      ->id() . '/add', $edit, t('Save'));
    $this
      ->drupalPostForm(NULL, [
      'field_test[0][alt]' => $this
        ->randomMachineName(),
    ], t('Save'));
    $terms = entity_load_multiple_by_properties('taxonomy_term', array(
      'name' => $edit['name[0][value]'],
    ));
    $term = reset($terms);
    $this
      ->assertText(t('Created new term @name.', array(
      '@name' => $term
        ->getName(),
    )));

    // Create a user that should have access to the file and one that doesn't.
    $access_user = $this
      ->drupalCreateUser(array(
      'access content',
    ));
    $no_access_user = $this
      ->drupalCreateUser();
    $image = File::load($term->field_test->target_id);
    $this
      ->drupalLogin($access_user);
    $this
      ->drupalGet(file_create_url($image
      ->getFileUri()));
    $this
      ->assertResponse(200, 'Private image on term is accessible with right permission');
    $this
      ->drupalLogin($no_access_user);
    $this
      ->drupalGet(file_create_url($image
      ->getFileUri()));
    $this
      ->assertResponse(403, 'Private image on term not accessible without right permission');
  }

}

Classes

Name	Description
TaxonomyImageTest	Tests access checks of private image fields.