ezsystems / ezpublish-kernel

     *

     * @see \eZ\Publish\API\Repository\Values\User\Limitation\NewSectionLimitation

     */

    public function testNewSectionLimitationForbid()

    {

        $this->expectException(\eZ\Publish\API\Repository\Exceptions\UnauthorizedException::class);

        $repository = $this->getRepository();

        $permissionResolver = $repository->getPermissionResolver();

        $contentId = $this->generateId('content', 58);

        $sectionId = $this->generateId('section', 6);

        $otherSectionId = $this->generateId('section', 1);

        /* BEGIN: Use Case */

        $user = $this->createUserVersion1();

        $roleService = $repository->getRoleService();

        $policyCreate = $roleService->newPolicyCreateStruct('section', 'assign');

        $policyCreate->addLimitation(

            new NewSectionLimitation(

                ['limitationValues' => [$sectionId]]

            )

        );

        $role = $roleService->loadRoleByIdentifier('Editor');

        $roleDraft = $roleService->createRoleDraft($role);

        $roleService->addPolicyByRoleDraft(

            $roleDraft,

            $policyCreate

        );

        $roleService->addPolicyByRoleDraft(

            $roleDraft,

            $roleService->newPolicyCreateStruct('section', 'view')

        );

        $roleService->publishRoleDraft($roleDraft);

        $roleService->assignRoleToUser($role, $user);

        $permissionResolver->setCurrentUserReference($user);

        $contentService = $repository->getContentService();

        $contentInfo = $contentService->loadContentInfo($contentId);

        $sectionService = $repository->getSectionService();

        $sectionService->assignSection(

            $contentInfo,

            $sectionService->loadSection($otherSectionId)

        );

        /* END: Use Case */

    }

}

     *

     * @see eZ\Publish\API\Repository\Values\User\Limitation\ParentUserGroupLimitation

     */

    public function testParentUserGroupLimitationForbid()

    {

        $this->expectException(\eZ\Publish\API\Repository\Exceptions\UnauthorizedException::class);

        $repository = $this->getRepository();

        $userService = $repository->getUserService();

        $permissionResolver = $repository->getPermissionResolver();

        $parentUserGroupId = $this->generateId('location', 4);

        /* BEGIN: Use Case */

        $user = $this->createUserVersion1();

        $userGroupCreate = $userService->newUserGroupCreateStruct('eng-GB');

        $userGroupCreate->setField('name', 'Shared wiki');

        $userGroup = $userService->createUserGroup(

            $userGroupCreate,

            $userService->loadUserGroup(

                $parentUserGroupId

            )

        );

        // Assign only example user to new group

        $userService->assignUserToUserGroup($user, $userGroup);

        $roleService = $repository->getRoleService();

        $policyCreate = $roleService->newPolicyCreateStruct('content', 'create');

        $policyCreate->addLimitation(

            new ParentUserGroupLimitation(

                [

                    'limitationValues' => [true],

                ]

            )

        );

        $role = $roleService->loadRoleByIdentifier('Editor');

        $roleDraft = $roleService->createRoleDraft($role);

        $roleService->addPolicyByRoleDraft(

            $roleDraft,

            $policyCreate

        );

        $roleService->addPolicyByRoleDraft(

            $roleDraft,

            $roleService->newPolicyCreateStruct('content', 'read')

        );

        $roleService->publishRoleDraft($roleDraft);

        $roleService->assignRoleToUserGroup($role, $userGroup);

        $permissionResolver->setCurrentUserReference($user);

        $this->createWikiPageDraft();

        /* END: Use Case */

    }

}