ezsystems / ezpublish-kernel

     * @depends eZ\Publish\API\Repository\Tests\RepositoryTest::testGetContentService

     * @depends eZ\Publish\API\Repository\Tests\RepositoryTest::testHasAccessLimited

     */

    public function testCanUserWithLimitationYes()

    {

        $repository = $this->getRepository();

        $imagesFolderId = $this->generateId('object', 49);

        /* BEGIN: Use Case */

        // $imagesFolderId contains the ID of the "Images" folder

        $user = $this->createUserVersion1();

        // Set created user as current user

        $repository->setCurrentUser($user);

        $contentService = $repository->getContentService();

        // Performing an action having necessary permissions will succeed

        $imagesFolder = $contentService->loadContent($imagesFolderId);

        // This call will return true

        $canUser = $repository->canUser('content', 'read', $imagesFolder);

        /* END: Use Case */

        $this->assertTrue($canUser);

    }

    /**

     * Test for the canUser() method.

     * @expectedException \eZ\Publish\API\Repository\Exceptions\UnauthorizedException

     * @depends eZ\Publish\API\Repository\Tests\ContentServiceTest::testLoadContentByVersionInfoWithSecondParameter

     */

    public function testLoadContentByVersionInfoThrowsUnauthorizedExceptionWithSecondParameter()

    {

        $repository = $this->getRepository();

        $anonymousUserId = $this->generateId('user', 10);

        /* BEGIN: Use Case */

        // $anonymousUserId is the ID of the "Anonymous User" in an eZ Publish

        // demo installation

        $contentService = $repository->getContentService();

        // Load the ContentInfo for "Anonymous User"

        $contentInfo = $contentService->loadContentInfo($anonymousUserId);

        // Load the current VersionInfo

        $versionInfo = $contentService->loadVersionInfo($contentInfo);

        $pseudoEditor = $this->createAnonymousWithEditorRole();

        // Set restricted editor user

        $repository->setCurrentUser($pseudoEditor);

        // This call will fail with a "UnauthorizedException"

        $contentService->loadContentByVersionInfo($versionInfo, ['eng-US']);

        /* END: Use Case */

    }

    /**

     * Test for the loadContent() method.

     * @expectedException \eZ\Publish\API\Repository\Exceptions\UnauthorizedException

     * @depends eZ\Publish\API\Repository\Tests\ContentServiceTest::testLoadContent

     */

    public function testLoadContentThrowsUnauthorizedExceptionOnDrafts()

    {

        /** @var $repository \eZ\Publish\API\Repository\Repository */

        $repository = $this->getRepository();

        $anonymousUserId = $this->generateId('user', 10);

        /* BEGIN: Use Case */

        // $anonymousUserId is the ID of the "Anonymous User" in an eZ Publish

        // demo installation

        $user = $this->createUserVersion1();

        // Set new editor as a content owner

        $repository->setCurrentUser($user);

        // Create draft with this user

        $draft = $this->createContentDraftVersion1(2, 'folder');

        // Load anonymous user

        $userService = $repository->getUserService();

        $user = $userService->loadUser($anonymousUserId);

        $repository->setCurrentUser($user);

        // Try to load the draft with anonymous user to make sure access won't be allowed by throwing an exception

        $contentService = $repository->getContentService();

        $contentService->loadContent($draft->id);

        /* END: Use Case */

    }

    /**

     * Test for the ContentService::loadContent() method on an archive.

     * @expectedException \eZ\Publish\API\Repository\Exceptions\UnauthorizedException

     * @depends eZ\Publish\API\Repository\Tests\ContentServiceTest::testLoadContentDrafts

     */

    public function testLoadContentDraftsThrowsUnauthorizedExceptionWithFirstParameter()

    {

        $repository = $this->getRepository();

        $administratorUserId = $this->generateId('user', 14);

        $anonymousUserId = $this->generateId('user', 10);

        /* BEGIN: Use Case */

        // $anonymousUserId is the ID of the "Anonymous User" in an eZ Publish

        // demo installation

        // $administratorUserId is  the ID of the "Administrator" user in a eZ

        // Publish demo installation.

        $contentService = $repository->getContentService();

        // Load the user service

        $userService = $repository->getUserService();

        // Load the "Administrator" user

        $administratorUser = $userService->loadUser($administratorUserId);

        // Set anonymous user

        $repository->setCurrentUser($userService->loadUser($anonymousUserId));

        // This call will fail with a "UnauthorizedException"

        $contentService->loadContentDrafts($administratorUser);

        /* END: Use Case */

    }

    /**

     * Test for the updateContent() method.

     * @expectedException \eZ\Publish\API\Repository\Exceptions\UnauthorizedException

     * @depends eZ\Publish\API\Repository\Tests\ContentTypeServiceTest::testRemoveFieldDefinition

     */

    public function testRemoveFieldDefinitionThrowsUnauthorizedException()

    {

        $repository = $this->getRepository();

        $contentTypeService = $repository->getContentTypeService();

        $anonymousUserId = $this->generateId('user', 10);

        /* BEGIN: Use Case */

        // $anonymousUserId is the ID of the "Anonymous" user in a eZ

        // Publish demo installation.

        $contentTypeDraft = $this->createContentTypeDraft();

        // Load the user service

        $userService = $repository->getUserService();

        // Set anonymous user

        $repository->setCurrentUser($userService->loadUser($anonymousUserId));

        $bodyField = $contentTypeDraft->getFieldDefinition('body');

        // This call will fail with a "UnauthorizedException"

        $contentTypeService->removeFieldDefinition($contentTypeDraft, $bodyField);

        /* END: Use Case */

    }

    /**

     * Test for the updateFieldDefinition() method.

     * @expectedException \eZ\Publish\API\Repository\Exceptions\UnauthorizedException

     * @depends eZ\Publish\API\Repository\Tests\ContentTypeServiceTest::testCreateContentTypeDraft

     */

    public function testCreateContentTypeDraftThrowsUnauthorizedException()

    {

        $repository = $this->getRepository();

        $anonymousUserId = $this->generateId('user', 10);

        /* BEGIN: Use Case */

        // $anonymousUserId is the ID of the "Anonymous" user in a eZ

        // Publish demo installation.

        $contentTypeService = $repository->getContentTypeService();

        // Load the user service

        $userService = $repository->getUserService();

        // Set anonymous user

        $repository->setCurrentUser($userService->loadUser($anonymousUserId));

        $commentType = $contentTypeService->loadContentTypeByIdentifier('comment');

        // This call will fail with a "UnauthorizedException"

        $contentTypeService->createContentTypeDraft($commentType);

        /* END: Use Case */

    }

    /**

     * Test for the deleteContentType() method.

     * @expectedException \eZ\Publish\API\Repository\Exceptions\UnauthorizedException

     * @depends eZ\Publish\API\Repository\Tests\ContentTypeServiceTest::testDeleteContentType

     */

    public function testDeleteContentTypeThrowsUnauthorizedException()

    {

        $repository = $this->getRepository();

        $anonymousUserId = $this->generateId('user', 10);

        /* BEGIN: Use Case */

        // $anonymousUserId is the ID of the "Anonymous" user in a eZ

        // Publish demo installation.

        $contentTypeService = $repository->getContentTypeService();

        // Load the user service

        $userService = $repository->getUserService();

        // Set anonymous user

        $repository->setCurrentUser($userService->loadUser($anonymousUserId));

        $commentType = $contentTypeService->loadContentTypeByIdentifier('comment');

        // This call will fail with a "UnauthorizedException"

        $contentTypeService->deleteContentType($commentType);

        /* END: Use Case */

    }

    /**

     * Test for the copyContentType() method.

     * @expectedException \eZ\Publish\API\Repository\Exceptions\UnauthorizedException

     * @depends eZ\Publish\API\Repository\Tests\ContentTypeServiceTest::testCopyContentType

     */

    public function testCopyContentTypeThrowsUnauthorizedException()

    {

        $repository = $this->getRepository();

        $anonymousUserId = $this->generateId('user', 10);

        /* BEGIN: Use Case */

        // $anonymousUserId is the ID of the "Anonymous" user in a eZ

        // Publish demo installation.

        $contentTypeService = $repository->getContentTypeService();

        // Load the user service

        $userService = $repository->getUserService();

        // Set anonymous user

        $repository->setCurrentUser($userService->loadUser($anonymousUserId));

        $commentType = $contentTypeService->loadContentTypeByIdentifier('comment');

        // This call will fail with a "UnauthorizedException"

        $contentTypeService->copyContentType($commentType);

        /* END: Use Case */

    }

    /**

     * Test for the assignContentTypeGroup() method.

     * @expectedException \eZ\Publish\API\Repository\Exceptions\UnauthorizedException

     * @depends eZ\Publish\API\Repository\Tests\ObjectStateServiceTest::testDeleteObjectStateGroup

     */

    public function testDeleteObjectStateGroupThrowsUnauthorizedException()

    {

        $repository = $this->getRepository();

        $objectStateGroupId = $this->generateId('objectstategroup', 2);

        $anonymousUserId = $this->generateId('user', 10);

        /* BEGIN: Use Case */

        // $anonymousUserId is the ID of the "Anonymous" user in a eZ

        // Publish demo installation.

        // Set anonymous user

        $userService = $repository->getUserService();

        $repository->setCurrentUser($userService->loadUser($anonymousUserId));

        // $objectStateGroupId contains the ID of the standard object state

        // group ez_lock.

        $objectStateService = $repository->getObjectStateService();

        $loadedObjectStateGroup = $objectStateService->loadObjectStateGroup(

            $objectStateGroupId

        );

        // Throws unauthorized exception, since the anonymous user must not

        // delete object state groups

        $objectStateService->deleteObjectStateGroup($loadedObjectStateGroup);

        /* END: Use Case */

    }

    /**

     * Test for the createObjectState() method.

     * @depends eZ\Publish\API\Repository\Tests\RepositoryTest::testGetUserService

     * @depends eZ\Publish\API\Repository\Tests\PermissionResolverTest::testHasAccessWithAnonymousUserNo

     */

    public function testHasAccessForCurrentUserNo()

    {

        $repository = $this->getRepository();

        $anonymousUserId = $this->generateId('user', 10);

        /* BEGIN: Use Case */

        // $anonymousUserId is the ID of the "Anonymous" user in a eZ

        // Publish demo installation.

        $userService = $repository->getUserService();

        $permissionResolver = $repository->getPermissionResolver();

        // Load anonymous user

        $anonymousUser = $userService->loadUser($anonymousUserId);

        // Set anonymous user as current user reference

        $permissionResolver->setCurrentUserReference($anonymousUser);

        // This call will return false because anonymous user does not have access

        // to content removal

        $hasAccess = $permissionResolver->hasAccess('content', 'remove');

        /* END: Use Case */

        $this->assertFalse($hasAccess);

    }

    /**

     * Test for the hasAccess() method.

     * @depends eZ\Publish\API\Repository\Tests\PermissionResolverTest::testSetCurrentUserReference

     * @depends eZ\Publish\API\Repository\Tests\PermissionResolverTest::testHasAccessWithAdministratorUser

     */

    public function testHasAccessForCurrentUserYes()

    {

        $repository = $this->getRepository();

        $administratorUserId = $this->generateId('user', 14);

        /* BEGIN: Use Case */

        // $administratorUserId contains the ID of the administrator user

        $userService = $repository->getUserService();

        $permissionResolver = $repository->getPermissionResolver();

        // Load administrator user

        $administratorUser = $userService->loadUser($administratorUserId);

        // Set administrator user as current user reference

        $permissionResolver->setCurrentUserReference($administratorUser);

        // This call will return true

        $hasAccess = $permissionResolver->hasAccess('content', 'read');

        /* END: Use Case */

        $this->assertTrue($hasAccess);

    }

    /**

     * Test for the hasAccess() method.

     * @depends eZ\Publish\API\Repository\Tests\RepositoryTest::testGetContentService

     * @depends eZ\Publish\API\Repository\Tests\PermissionResolverTest::testHasAccessLimited

     */

    public function testCanUserWithLimitationYes()

    {

        $repository = $this->getRepository();

        $imagesFolderId = $this->generateId('object', 49);

        /* BEGIN: Use Case */

        // $imagesFolderId contains the ID of the "Images" folder

        $user = $this->createUserVersion1();

        $permissionResolver = $repository->getPermissionResolver();

        // Set created user as current user reference

        $permissionResolver->setCurrentUserReference($user);

        $contentService = $repository->getContentService();

        // Performing an action having necessary permissions will succeed

        $imagesFolder = $contentService->loadContent($imagesFolderId);

        // This call will return true

        $canUser = $permissionResolver->canUser('content', 'read', $imagesFolder);

        /* END: Use Case */

        $this->assertTrue($canUser);

    }

    /**

     * Test for the canUser() method.

     * @depends eZ\Publish\API\Repository\Tests\RoleServiceTest::testGetRoleAssignmentsForUserGroup

     * @depends eZ\Publish\API\Repository\Tests\UserServiceTest::testCreateUser

     */

    public function testGetRoleAssignmentsForUserGroupThrowsUnauthorizedException()

    {

        $repository = $this->getRepository();

        $roleService = $repository->getRoleService();

        $userService = $repository->getUserService();

        $editorsGroupId = $this->generateId('group', 13);

        /* BEGIN: Use Case */

        $user = $this->createUserVersion1();

        $this->createRole();

        // Load the "Editors" user group

        $userGroup = $userService->loadUserGroup($editorsGroupId);

        // Set "Editor" user as current user.

        $repository->setCurrentUser($user);

        // This call will fail with an "UnauthorizedException"

        $roleService->getRoleAssignmentsForUserGroup($userGroup);

        /* END: Use Case */

    }

    /**

     * Create a role fixture in a variable named <b>$role</b>,.