ezsystems / ezpublish-kernel

     * @see \eZ\Publish\API\Repository\ContentService::loadContent()

     * @depends eZ\Publish\API\Repository\Tests\ContentServiceTest::testLoadContent

     */

    public function testLoadContentThrowsUnauthorizedExceptionOnDrafts()

    {

        /** @var $repository \eZ\Publish\API\Repository\Repository */

        $repository = $this->getRepository();

        $anonymousUserId = $this->generateId('user', 10);

        /* BEGIN: Use Case */

        // $anonymousUserId is the ID of the "Anonymous User" in an eZ Publish

        // demo installation

        $user = $this->createUserVersion1();

        // Set new editor as a content owner

        $repository->setCurrentUser($user);

        // Create draft with this user

        $draft = $this->createContentDraftVersion1(2, 'folder');

        // Load anonymous user

        $userService = $repository->getUserService();

        $user = $userService->loadUser($anonymousUserId);

        $repository->setCurrentUser($user);

        // Try to load the draft with anonymous user to make sure access won't be allowed by throwing an exception

        $contentService = $repository->getContentService();

        $this->expectException(UnauthorizedException::class);

        // content versionread policy is needed because it is a draft

        $this->expectExceptionMessageRegExp('/\'versionread\' \'content\'/');

        $contentService->loadContent($draft->id);

        /* END: Use Case */

    }

    /**

     * Test for the ContentService::loadContent() method on an archive.

     * @see \eZ\Publish\API\Repository\ContentService::createContentDraft($contentInfo, $versionInfo)

     * @depends eZ\Publish\API\Repository\Tests\ContentServiceTest::testCreateContentDraftWithSecondParameter

     */

    public function testCreateContentDraftThrowsUnauthorizedExceptionWithSecondParameter()

    {

        $repository = $this->getRepository();

        $contentService = $repository->getContentService();

        $anonymousUserId = $this->generateId('user', 10);

        /* BEGIN: Use Case */

        // $anonymousUserId is the ID of the "Anonymous User" in an eZ Publish

        // demo installation

        $content = $this->createContentVersion1();

        // Get ContentInfo and VersionInfo instances

        $contentInfo = $content->contentInfo;

        $versionInfo = $content->getVersionInfo();

        // Load the user service

        $userService = $repository->getUserService();

        // Set anonymous user

        $repository->setCurrentUser($userService->loadUser($anonymousUserId));

        $this->expectException(UnauthorizedException::class);

        $this->expectExceptionMessageRegExp('/\'edit\' \'content\'/');

        $contentService->createContentDraft($contentInfo, $versionInfo);

        /* END: Use Case */

    }

    /**

     * Test for the loadContentDrafts() method.

     * @see \eZ\Publish\API\Repository\ContentService::addRelation()

     * @depends eZ\Publish\API\Repository\Tests\ContentServiceTest::testAddRelation

     */

    public function testAddRelationThrowsUnauthorizedException()

    {

        $repository = $this->getRepository();

        $contentService = $repository->getContentService();

        $anonymousUserId = $this->generateId('user', 10);

        /* BEGIN: Use Case */

        // $anonymousUserId is the ID of the "Anonymous User" in an eZ Publish

        // demo installation

        // Remote id of the "Media" page of a eZ Publish demo installation.

        $mediaRemoteId = 'a6e35cbcb7cd6ae4b691f3eee30cd262';

        $draft = $this->createContentDraftVersion1();

        // Get the draft's version info

        $versionInfo = $draft->getVersionInfo();

        // Load other content object

        $media = $contentService->loadContentInfoByRemoteId($mediaRemoteId);

        // Load the user service

        $userService = $repository->getUserService();

        // Set anonymous user

        $repository->setCurrentUser($userService->loadUser($anonymousUserId));

        $this->expectException(UnauthorizedException::class);

        $this->expectExceptionMessageRegExp('/\'versionread\' \'content\'/');

        $contentService->addRelation(

            $versionInfo,

            $media

        );

        /* END: Use Case */

    }

    /**

     * Test for the deleteRelation() method.

     *

     * @see \eZ\Publish\API\Repository\SectionService::loadSectionByIdentifier()

     */

    public function testLoadSectionByIdentifierThrowsUnauthorizedException()

    {

        $repository = $this->getRepository();

        $anonymousUserId = $this->generateId('user', 10);

        /* BEGIN: Use Case */

        // $anonymousUserId is the ID of the "Anonymous" user in a eZ

        // Publish demo installation.

        $userService = $repository->getUserService();

        $sectionService = $repository->getSectionService();

        $sectionCreate = $sectionService->newSectionCreateStruct();

        $sectionCreate->name = 'Test Section';

        $sectionCreate->identifier = 'uniqueKey';

        $sectionService->createSection($sectionCreate);

        // Set anonymous user

        $repository->getPermissionResolver()->setCurrentUserReference($userService->loadUser($anonymousUserId));

        $this->expectException(UnauthorizedException::class);

        $this->expectExceptionMessage("User does not have access to 'view' 'section");

        $sectionService->loadSectionByIdentifier('uniqueKey');

        /* END: Use Case */

    }

    /**

     * Test for the assignSection() method.