ezsystems / ezpublish-kernel

     * @depends eZ\Publish\API\Repository\Tests\RoleServiceTest::testUpdatePolicy

     * @depends eZ\Publish\API\Repository\Tests\UserServiceTest::testCreateUser

     */

    public function testUpdatePolicyThrowsUnauthorizedException()

    {

        $repository = $this->getRepository();

        $roleService = $repository->getRoleService();

        /* BEGIN: Use Case */

        $user = $this->createUserVersion1();

        $role = $this->createRole();

        // Get first role policy

        $policies = $role->getPolicies();

        $policy = reset($policies);

        // Set "Editor" user as current user.

        $repository->setCurrentUser($user);

        // Get a policy update struct and add a limitation

        $policyUpdate = $roleService->newPolicyUpdateStruct();

        $policyUpdate->addLimitation(

            new SubtreeLimitation(

                [

                    'limitationValues' => ['/1/'],

                ]

            )

        );

        // This call will fail with an "UnauthorizedException"

        $roleService->updatePolicy($policy, $policyUpdate);

        /* END: Use Case */

    }

    /**

     * Test for the removePolicy() method.

     * @depends eZ\Publish\API\Repository\Tests\RoleServiceTest::testAssignRoleToUserGroup

     * @depends eZ\Publish\API\Repository\Tests\UserServiceTest::testCreateUser

     */

    public function testAssignRoleToUserGroupThrowsUnauthorizedExceptionWithRoleLimitationParameter()

    {

        $repository = $this->getRepository();

        $userService = $repository->getUserService();

        $roleService = $repository->getRoleService();

        $editorsGroupId = $this->generateId('group', 13);

        /* BEGIN: Use Case */

        $user = $this->createUserVersion1();

        $role = $this->createRole();

        // Load the "Editors" user group

        $userGroup = $userService->loadUserGroup($editorsGroupId);

        // Set "Editor" user as current user.

        $repository->setCurrentUser($user);

        // Create a subtree role limitation

        $limitation = new SubtreeLimitation(

            [

                'limitationValues' => ['/1/2/'],

            ]

        );

        // This call will fail with an "UnauthorizedException"

        $roleService->assignRoleToUserGroup($role, $userGroup, $limitation);

        /* END: Use Case */

    }

    /**

     * Test for the unassignRoleFromUserGroup() method.

     *

     * @return \eZ\Publish\API\Repository\Values\User\User

     */

    private function createAnonymousWithEditorRole()

    {

        $repository = $this->getRepository();

        $anonymousUserId = $this->generateId('user', 10);

        /* BEGIN: Use Case */

        // $anonymousUserId is the ID of the "Anonymous User" in an eZ Publish

        // demo installation

        $roleService = $repository->getRoleService();

        $userService = $repository->getUserService();

        $user = $userService->loadUser($anonymousUserId);

        $role = $roleService->loadRoleByIdentifier('Editor');

        // Assign "Editor" role with limitation to "Media/Images"

        $roleService->assignRoleToUser(

            $role,

            $user,

            new \eZ\Publish\API\Repository\Values\User\Limitation\SubtreeLimitation(

                [

                    'limitationValues' => ['/1/43/51/'],

                ]

            )

        );

        $pseudoEditor = $userService->loadUser($user->id);

        /* END: Inline */

        return $pseudoEditor;

    }

    /**

     * Test that for an user that doesn't have access (read permissions) to an