ezsystems / ezpublish-kernel

     * @depends eZ\Publish\API\Repository\Tests\RoleServiceTest::testUpdatePolicy

     * @depends eZ\Publish\API\Repository\Tests\UserServiceTest::testCreateUser

     */

    public function testUpdatePolicyThrowsUnauthorizedException()

    {

        $repository = $this->getRepository();

        $roleService = $repository->getRoleService();

        /* BEGIN: Use Case */

        $user = $this->createUserVersion1();

        $role = $this->createRole();

        // Get first role policy

        $policies = $role->getPolicies();

        $policy = reset($policies);

        // Set "Editor" user as current user.

        $repository->setCurrentUser($user);

        // Get a policy update struct and add a limitation

        $policyUpdate = $roleService->newPolicyUpdateStruct();

        $policyUpdate->addLimitation(

            new SubtreeLimitation(

                [

                    'limitationValues' => ['/1/'],

                ]

            )

        );

        // This call will fail with an "UnauthorizedException"

        $roleService->updatePolicy($policy, $policyUpdate);

        /* END: Use Case */

    }

    /**

     * Test for the removePolicy() method.

     * @depends eZ\Publish\API\Repository\Tests\RoleServiceTest::testAssignRoleToUserGroup

     * @depends eZ\Publish\API\Repository\Tests\UserServiceTest::testCreateUser

     */

    public function testAssignRoleToUserGroupThrowsUnauthorizedExceptionWithRoleLimitationParameter()

    {

        $repository = $this->getRepository();

        $userService = $repository->getUserService();

        $roleService = $repository->getRoleService();

        $editorsGroupId = $this->generateId('group', 13);

        /* BEGIN: Use Case */

        $user = $this->createUserVersion1();

        $role = $this->createRole();

        // Load the "Editors" user group

        $userGroup = $userService->loadUserGroup($editorsGroupId);

        // Set "Editor" user as current user.

        $repository->setCurrentUser($user);

        // Create a subtree role limitation

        $limitation = new SubtreeLimitation(

            [

                'limitationValues' => ['/1/2/'],

            ]

        );

        // This call will fail with an "UnauthorizedException"

        $roleService->assignRoleToUserGroup($role, $userGroup, $limitation);

        /* END: Use Case */

    }

    /**

     * Test for the unassignRoleFromUserGroup() method.