ezsystems / ezpublish-kernel

     * @see \eZ\Publish\API\Repository\SectionService::assignSection()

     * @expectedException \eZ\Publish\API\Repository\Exceptions\UnauthorizedException

     */

    public function testAssignSectionThrowsUnauthorizedException()

    {

        $repository = $this->getRepository();

        $standardSectionId = $this->generateId('section', 1);

        $anonymousUserId = $this->generateId('user', 10);

        /* BEGIN: Use Case */

        // $anonymousUserId is the ID of the "Anonymous" user in a eZ

        // Publish demo installation.

        // $standardSectionId is the ID of the "Standard" section in a eZ

        // Publish demo installation.

        // RemoteId of the "Media" page of an eZ Publish demo installation

        $mediaRemoteId = 'a6e35cbcb7cd6ae4b691f3eee30cd262';

        $userService = $repository->getUserService();

        $contentService = $repository->getContentService();

        $sectionService = $repository->getSectionService();

        // Load a content info instance

        $contentInfo = $contentService->loadContentInfoByRemoteId(

            $mediaRemoteId

        );

        // Load the "Standard" section

        $section = $sectionService->loadSection($standardSectionId);

        // Set anonymous user

        $repository->setCurrentUser($userService->loadUser($anonymousUserId));

        // This call will fail with a "UnauthorizedException"

        $sectionService->assignSection($contentInfo, $section);

        /* END: Use Case */

    }

    /**

     * Test for the deleteSection() method.

     * @depends eZ\Publish\API\Repository\Tests\RepositoryTest::testHasAccessForCurrentUserYes

     * @expectedException \eZ\Publish\API\Repository\Exceptions\NotFoundException

     */

    public function testCanUserForAdministratorUser()

    {

        $repository = $this->getRepository();

        $administratorUserId = $this->generateId('user', 14);

        $homeId = $this->generateId('object', 57);

        /* BEGIN: Use Case */

        // $administratorUserId contains the ID of the administrator user

        // $homeId contains the ID of the "Home" frontpage

        $contentService = $repository->getContentService();

        $userService = $repository->getUserService();

        // Load administrator user

        $administratorUser = $userService->loadUser($administratorUserId);

        // Set administrator user as current user

        $repository->setCurrentUser($administratorUser);

        // Load the ContentInfo for "Home" frontpage

        $contentInfo = $contentService->loadContentInfo($homeId);

        // This call will return true

        $canUser = $repository->canUser('content', 'remove', $contentInfo);

        // Performing an action having necessary permissions will succeed

        $contentService->deleteContent($contentInfo);

        /* END: Use Case */

        $this->assertTrue($canUser);

        $contentService->loadContent($homeId);

    }

    /**

     * Test for the canUser() method.

     * @depends eZ\Publish\API\Repository\Tests\PermissionResolverTest::testHasAccessForCurrentUserNo

     * @expectedException \eZ\Publish\API\Repository\Exceptions\UnauthorizedException

     */

    public function testCanUserForAnonymousUserNo()

    {

        $repository = $this->getRepository();

        $homeId = $this->generateId('object', 57);

        $anonymousUserId = $this->generateId('user', 10);

        /* BEGIN: Use Case */

        // $anonymousUserId is the ID of the "Anonymous" user in a eZ

        // Publish demo installation.

        // $homeId contains the ID of the "Home" frontpage

        $contentService = $repository->getContentService();

        $userService = $repository->getUserService();

        $permissionResolver = $repository->getPermissionResolver();

        // Load anonymous user

        $anonymousUser = $userService->loadUser($anonymousUserId);

        // Set anonymous user as current user reference

        $permissionResolver->setCurrentUserReference($anonymousUser);

        // Load the ContentInfo for "Home" frontpage

        $contentInfo = $contentService->loadContentInfo($homeId);

        // This call will return false because anonymous user does not have access

        // to content removal and hence no permission to remove given content

        $canUser = $permissionResolver->canUser('content', 'remove', $contentInfo);

        // Performing an action without necessary permissions will fail with "UnauthorizedException"

        if (!$canUser) {

            $contentService->deleteContent($contentInfo);

        }

        /* END: Use Case */

    }

    /**

     * Test for the canUser() method.

     * @depends eZ\Publish\API\Repository\Tests\PermissionResolverTest::testHasAccessLimited

     * @expectedException \eZ\Publish\API\Repository\Exceptions\UnauthorizedException

     */

    public function testCanUserWithLimitationNo()

    {

        $repository = $this->getRepository();

        $administratorUserId = $this->generateId('user', 14);

        /* BEGIN: Use Case */

        // $administratorUserId contains the ID of the administrator user

        $user = $this->createUserVersion1();

        $permissionResolver = $repository->getPermissionResolver();

        // Set created user as current user reference

        $permissionResolver->setCurrentUserReference($user);

        $userService = $repository->getUserService();

        // Load administrator user using UserService, this does not check for permissions

        $administratorUser = $userService->loadUser($administratorUserId);

        // This call will return false as user with Editor role does not have

        // permission to read "Users" subtree

        $canUser = $permissionResolver->canUser('content', 'read', $administratorUser);

        $contentService = $repository->getContentService();

        // Performing an action without necessary permissions will fail with "UnauthorizedException"

        if (!$canUser) {

            $content = $contentService->loadContent($administratorUserId);

        }

        /* END: Use Case */

    }

    /**

     * Test for the canUser() method.