ezsystems / ezpublish-kernel

     * @depends eZ\Publish\API\Repository\Tests\RepositoryTest::testGetContentService

     * @depends eZ\Publish\API\Repository\Tests\RepositoryTest::testHasAccessLimited

     */

    public function testCanUserWithLimitationYes()

    {

        $repository = $this->getRepository();

        $imagesFolderId = $this->generateId('object', 49);

        /* BEGIN: Use Case */

        // $imagesFolderId contains the ID of the "Images" folder

        $user = $this->createUserVersion1();

        // Set created user as current user

        $repository->setCurrentUser($user);

        $contentService = $repository->getContentService();

        // Performing an action having necessary permissions will succeed

        $imagesFolder = $contentService->loadContent($imagesFolderId);

        // This call will return true

        $canUser = $repository->canUser('content', 'read', $imagesFolder);

        /* END: Use Case */

        $this->assertTrue($canUser);

    }

    /**

     * Test for the canUser() method.

     * @depends eZ\Publish\API\Repository\Tests\RepositoryTest::testHasAccessLimited

     * @expectedException \eZ\Publish\API\Repository\Exceptions\InvalidArgumentException

     */

    public function testCanUserThrowsInvalidArgumentException()

    {

        $repository = $this->getRepository();

        $userGroupContentTypeId = $this->generateId('type', 3);

        /* BEGIN: Use Case */

        // $userGroupContentTypeId contains the ID of the "UserGroup" ContentType

        $user = $this->createUserVersion1();

        // Set created user as current user

        $repository->setCurrentUser($user);

        $contentTypeService = $repository->getContentTypeService();

        // Load the "UserGroup" ContentType

        $userGroupContentType = $contentTypeService->loadContentType($userGroupContentTypeId);

        // This call will throw "InvalidArgumentException" because $userGroupContentType

        // is an instance of \eZ\Publish\API\Repository\Values\ContentType\ContentType,

        // which can not be checked for user access

        $canUser = $repository->canUser('content', 'create', $userGroupContentType);

        /* END: Use Case */

    }

    /**

     * Test for the canUser() method.

     * @depends eZ\Publish\API\Repository\Tests\RepositoryTest::testHasAccessLimited

     * @expectedException \eZ\Publish\API\Repository\Exceptions\InvalidArgumentException

     */

    public function testCanUserWithTargetThrowsInvalidArgumentException()

    {

        $repository = $this->getRepository();

        $homeId = $this->generateId('object', 57);

        /* BEGIN: Use Case */

        // $homeId contains the ID of the "Home" frontpage

        $user = $this->createUserVersion1();

        // Set created user as current user

        $repository->setCurrentUser($user);

        $contentService = $repository->getContentService();

        // Load the ContentInfo for "Home" frontpage

        $contentInfo = $contentService->loadContentInfo($homeId);

        // This call will throw "InvalidArgumentException" because $targets argument must be an

        // instance of \eZ\Publish\API\Repository\Values\ValueObject class or an array of the same

        $canUser = $repository->canUser(

            'content',

            'remove',

            $contentInfo,

            new \stdClass()

        );

        /* END: Use Case */

    }

    /**

     * Test for the canUser() method.

     * @depends eZ\Publish\API\Repository\Tests\RepositoryTest::testGetUserService

     * @depends eZ\Publish\API\Repository\Tests\PermissionResolverTest::testHasAccessWithAnonymousUserNo

     */

    public function testHasAccessForCurrentUserNo()

    {

        $repository = $this->getRepository();

        $anonymousUserId = $this->generateId('user', 10);

        /* BEGIN: Use Case */

        // $anonymousUserId is the ID of the "Anonymous" user in a eZ

        // Publish demo installation.

        $userService = $repository->getUserService();

        $permissionResolver = $repository->getPermissionResolver();

        // Load anonymous user

        $anonymousUser = $userService->loadUser($anonymousUserId);

        // Set anonymous user as current user reference

        $permissionResolver->setCurrentUserReference($anonymousUser);

        // This call will return false because anonymous user does not have access

        // to content removal

        $hasAccess = $permissionResolver->hasAccess('content', 'remove');

        /* END: Use Case */

        $this->assertFalse($hasAccess);

    }

    /**

     * Test for the hasAccess() method.

     * @depends eZ\Publish\API\Repository\Tests\PermissionResolverTest::testSetCurrentUserReference

     * @depends eZ\Publish\API\Repository\Tests\PermissionResolverTest::testHasAccessWithAdministratorUser

     */

    public function testHasAccessForCurrentUserYes()

    {

        $repository = $this->getRepository();

        $administratorUserId = $this->generateId('user', 14);

        /* BEGIN: Use Case */

        // $administratorUserId contains the ID of the administrator user

        $userService = $repository->getUserService();

        $permissionResolver = $repository->getPermissionResolver();

        // Load administrator user

        $administratorUser = $userService->loadUser($administratorUserId);

        // Set administrator user as current user reference

        $permissionResolver->setCurrentUserReference($administratorUser);

        // This call will return true

        $hasAccess = $permissionResolver->hasAccess('content', 'read');

        /* END: Use Case */

        $this->assertTrue($hasAccess);

    }

    /**

     * Test for the hasAccess() method.

     * @depends eZ\Publish\API\Repository\Tests\RepositoryTest::testGetContentService

     * @depends eZ\Publish\API\Repository\Tests\PermissionResolverTest::testHasAccessLimited

     */

    public function testCanUserWithLimitationYes()

    {

        $repository = $this->getRepository();

        $imagesFolderId = $this->generateId('object', 49);

        /* BEGIN: Use Case */

        // $imagesFolderId contains the ID of the "Images" folder

        $user = $this->createUserVersion1();

        $permissionResolver = $repository->getPermissionResolver();

        // Set created user as current user reference

        $permissionResolver->setCurrentUserReference($user);

        $contentService = $repository->getContentService();

        // Performing an action having necessary permissions will succeed

        $imagesFolder = $contentService->loadContent($imagesFolderId);

        // This call will return true

        $canUser = $permissionResolver->canUser('content', 'read', $imagesFolder);

        /* END: Use Case */

        $this->assertTrue($canUser);

    }

    /**

     * Test for the canUser() method.

     * @depends eZ\Publish\API\Repository\Tests\PermissionResolverTest::testHasAccessLimited

     * @expectedException \eZ\Publish\API\Repository\Exceptions\InvalidArgumentException

     */

    public function testCanUserThrowsInvalidArgumentException()

    {

        $repository = $this->getRepository();

        $userGroupContentTypeId = $this->generateId('type', 3);

        /* BEGIN: Use Case */

        // $userGroupContentTypeId contains the ID of the "UserGroup" ContentType

        $user = $this->createUserVersion1();

        $permissionResolver = $repository->getPermissionResolver();

        // Set created user as current user reference

        $permissionResolver->setCurrentUserReference($user);

        $contentTypeService = $repository->getContentTypeService();

        // Load the "UserGroup" ContentType

        $userGroupContentType = $contentTypeService->loadContentType($userGroupContentTypeId);

        // This call will throw "InvalidArgumentException" because $userGroupContentType

        // is an instance of \eZ\Publish\API\Repository\Values\ContentType\ContentType,

        // which can not be checked for user access

        $canUser = $permissionResolver->canUser('content', 'create', $userGroupContentType);

        /* END: Use Case */

    }

    /**

     * Test for the canUser() method.