Automattic / jetpack

	 *

	 * @since 4.4.0

	 */

	public function test_disconnection_permission() {

		$this->load_rest_endpoints_direct();

		// Current user doesn't have credentials, so checking permissions should fail

		$this->assertInstanceOf( 'WP_Error', Jetpack_Core_Json_Api_Endpoints::disconnect_site_permission_callback() );

		$user = $this->create_and_get_user();

		// Add Jetpack capability

		$user->add_cap( 'jetpack_disconnect' );

		// Setup global variables so this is the current user

		wp_set_current_user( $user->ID );

		// User is not admin, so this should still fail

		$this->assertInstanceOf( 'WP_Error', Jetpack_Core_Json_Api_Endpoints::manage_modules_permission_check() );

		// Set user as admin

		$user->set_role( 'administrator' );

		// Reset user and setup globals again to reflect the role change.

		wp_set_current_user( 0 );

		wp_set_current_user( $user->ID );

		// User has capability so this should work this time

		$this->assertTrue( Jetpack_Core_Json_Api_Endpoints::disconnect_site_permission_callback() );

	}

	/**

	 * Test permission to activate plugins.

	 *

	 * @since 4.4.0

	 */

	public function test_plugin_activation_permission() {

		$this->load_rest_endpoints_direct();

		// Current user doesn't have credentials, so checking permissions should fail

		$this->assertInstanceOf( 'WP_Error', REST_Connector::activate_plugins_permission_check() );

		$user = $this->create_and_get_user();

		// Add Jetpack capability

		$user->add_cap( 'jetpack_admin_page' );

		// Setup global variables so this is the current user

		wp_set_current_user( $user->ID );

		// Should fail because requires more capabilities

		$this->assertInstanceOf( 'WP_Error', REST_Connector::activate_plugins_permission_check() );

		// Add Jetpack capability

		$user->add_cap( 'activate_plugins' );

		// Multisite's require additional primitive capabilities.

		if ( is_multisite() ) {

			$user->add_cap( 'manage_network_plugins' );

		}

		// Reset current user and setup global variables to refresh the capability we just added.

		wp_set_current_user( 0 );

		wp_set_current_user( $user->ID );

		// User has capability so this should work this time

		$this->assertTrue( REST_Connector::activate_plugins_permission_check() );

	}

	/**

	 * Test permission to disconnect Jetpack site for a user that is connected.