ezsystems / ezpublish-kernel

     * @see \eZ\Publish\API\Repository\SectionService::deleteSection()

     * @expectedException \eZ\Publish\API\Repository\Exceptions\UnauthorizedException

     */

    public function testDeleteSectionThrowsUnauthorizedException()

    {

        $repository = $this->getRepository();

        $anonymousUserId = $this->generateId('user', 10);

        /* BEGIN: Use Case */

        // $anonymousUserId is the ID of the "Anonymous" user in a eZ

        // Publish demo installation.

        $userService = $repository->getUserService();

        $sectionService = $repository->getSectionService();

        $sectionCreate = $sectionService->newSectionCreateStruct();

        $sectionCreate->name = 'Test Section';

        $sectionCreate->identifier = 'uniqueKey';

        $section = $sectionService->createSection($sectionCreate);

        // Set anonymous user

        $repository->setCurrentUser($userService->loadUser($anonymousUserId));

        // This call will fail with a "UnauthorizedException"

        $sectionService->deleteSection($section);

        /* END: Use Case */

    }

}

     * @expectedException \eZ\Publish\API\Repository\Exceptions\UnauthorizedException

     * @depends eZ\Publish\API\Repository\Tests\ContentServiceTest::testAddRelation

     */

    public function testAddRelationThrowsUnauthorizedException()

    {

        $repository = $this->getRepository();

        $contentService = $repository->getContentService();

        $anonymousUserId = $this->generateId('user', 10);

        /* BEGIN: Use Case */

        // $anonymousUserId is the ID of the "Anonymous User" in an eZ Publish

        // demo installation

        // Remote id of the "Media" page of a eZ Publish demo installation.

        $mediaRemoteId = 'a6e35cbcb7cd6ae4b691f3eee30cd262';

        $draft = $this->createContentDraftVersion1();

        // Get the draft's version info

        $versionInfo = $draft->getVersionInfo();

        // Load other content object

        $media = $contentService->loadContentInfoByRemoteId($mediaRemoteId);

        // Load the user service

        $userService = $repository->getUserService();

        // Set anonymous user

        $repository->setCurrentUser($userService->loadUser($anonymousUserId));

        // This call will fail with a "UnauthorizedException"

        $contentService->addRelation(

            $versionInfo,

            $media

        );

        /* END: Use Case */

    }

    /**

     * Test for the deleteRelation() method.

     * @depends eZ\Publish\API\Repository\Tests\PermissionResolverTest::testHasAccessLimited

     * @expectedException \eZ\Publish\API\Repository\Exceptions\UnauthorizedException

     */

    public function testCanUserWithLimitationNo()

    {

        $repository = $this->getRepository();

        $administratorUserId = $this->generateId('user', 14);

        /* BEGIN: Use Case */

        // $administratorUserId contains the ID of the administrator user

        $user = $this->createUserVersion1();

        $permissionResolver = $repository->getPermissionResolver();

        // Set created user as current user reference

        $permissionResolver->setCurrentUserReference($user);

        $userService = $repository->getUserService();

        // Load administrator user using UserService, this does not check for permissions

        $administratorUser = $userService->loadUser($administratorUserId);

        // This call will return false as user with Editor role does not have

        // permission to read "Users" subtree

        $canUser = $permissionResolver->canUser('content', 'read', $administratorUser);

        $contentService = $repository->getContentService();

        // Performing an action without necessary permissions will fail with "UnauthorizedException"

        if (!$canUser) {

            $content = $contentService->loadContent($administratorUserId);

        }

        /* END: Use Case */

    }

    /**

     * Test for the canUser() method.

     * @depends eZ\Publish\API\Repository\Tests\RepositoryTest::testHasAccessForCurrentUserNo

     * @expectedException \eZ\Publish\API\Repository\Exceptions\UnauthorizedException

     */

    public function testCanUserForAnonymousUserNo()

    {

        $repository = $this->getRepository();

        $homeId = $this->generateId('object', 57);

        $anonymousUserId = $this->generateId('user', 10);

        /* BEGIN: Use Case */

        // $anonymousUserId is the ID of the "Anonymous" user in a eZ

        // Publish demo installation.

        // $homeId contains the ID of the "Home" frontpage

        $contentService = $repository->getContentService();

        $userService = $repository->getUserService();

        // Load anonymous user

        $anonymousUser = $userService->loadUser($anonymousUserId);

        // Set anonymous user as current user

        $repository->setCurrentUser($anonymousUser);

        // Load the ContentInfo for "Home" frontpage

        $contentInfo = $contentService->loadContentInfo($homeId);

        // This call will return false because anonymous user does not have access

        // to content removal and hence no permission to remove given content

        $canUser = $repository->canUser('content', 'remove', $contentInfo);

        // Performing an action without necessary permissions will fail with "UnauthorizedException"

        if (!$canUser) {

            $contentService->deleteContent($contentInfo);

        }

        /* END: Use Case */

    }

    /**

     * Test for the canUser() method.

     * @depends eZ\Publish\API\Repository\Tests\RepositoryTest::testHasAccessLimited

     * @expectedException \eZ\Publish\API\Repository\Exceptions\UnauthorizedException

     */

    public function testCanUserWithLimitationNo()

    {

        $repository = $this->getRepository();

        $administratorUserId = $this->generateId('user', 14);

        /* BEGIN: Use Case */

        // $administratorUserId contains the ID of the administrator user

        $user = $this->createUserVersion1();

        // Set created user as current user

        $repository->setCurrentUser($user);

        $userService = $repository->getUserService();

        // Load administrator user using UserService, this does not check for permissions

        $administratorUser = $userService->loadUser($administratorUserId);

        // This call will return false as user with Editor role does not have

        // permission to read "Users" subtree

        $canUser = $repository->canUser('content', 'read', $administratorUser);

        $contentService = $repository->getContentService();

        // Performing an action without necessary permissions will fail with "UnauthorizedException"

        if (!$canUser) {

            $content = $contentService->loadContent($administratorUserId);

        }

        /* END: Use Case */

    }

    /**

     * Test for the canUser() method.

     * @depends eZ\Publish\API\Repository\Tests\RoleServiceTest::testUnassignRoleFromUserGroup

     * @depends eZ\Publish\API\Repository\Tests\UserServiceTest::testCreateUser

     */

    public function testUnassignRoleFromUserGroupThrowsUnauthorizedException()

    {

        $repository = $this->getRepository();

        $userService = $repository->getUserService();

        $roleService = $repository->getRoleService();

        $editorsGroupId = $this->generateId('group', 13);

        /* BEGIN: Use Case */

        $user = $this->createUserVersion1();

        $role = $this->createRole();

        // Load the "Editors" user group

        $userGroup = $userService->loadUserGroup($editorsGroupId);

        // Assign new role to "Editors" user group

        $roleService->assignRoleToUserGroup($role, $userGroup);

        // Set "Editor" user as current user.

        $repository->setCurrentUser($user);

        // This call will fail with an "UnauthorizedException"

        $roleService->unassignRoleFromUserGroup($role, $userGroup);

        /* END: Use Case */

    }

    /**

     * Test for the assignRoleToUser() method.

     * @depends eZ\Publish\API\Repository\Tests\TrashServiceTest::testRecover

     * @depends eZ\Publish\API\Repository\Tests\UserServiceTest::testLoadAnonymousUser

     */

    public function testRecoverThrowsUnauthorizedExceptionWithNewParentLocationParameter()

    {

        $repository = $this->getRepository();

        $trashService = $repository->getTrashService();

        $locationService = $repository->getLocationService();

        $homeLocationId = $this->generateId('location', 2);

        $anonymousUserId = $this->generateId('user', 10);

        /* BEGIN: Use Case */

        // $anonymousUserId is the ID of the "Anonymous" user

        // $homeLocationId is the ID of the "Home" location in an eZ Publish

        // demo installation

        $trashItem = $this->createTrashItem();

        // Get the new parent location

        $newParentLocation = $locationService->loadLocation($homeLocationId);

        // Load user service

        $userService = $repository->getUserService();

        // Set "Anonymous" as current user

        $repository->setCurrentUser($userService->loadUser($anonymousUserId));

        // This call will fail with an "UnauthorizedException"

        $trashService->recover($trashItem, $newParentLocation);

        /* END: Use Case */

    }

    /**

     * Test for the emptyTrash() method.

     * @expectedException \eZ\Publish\API\Repository\Exceptions\UnauthorizedException

     * @depends eZ\Publish\API\Repository\Tests\UserServiceTest::testUpdateUserGroup

     */

    public function testUpdateUserGroupThrowsUnauthorizedException()

    {

        $repository = $this->getRepository();

        $userService = $repository->getUserService();

        /* BEGIN: Use Case */

        $user = $this->createUserVersion1();

        $userGroup = $this->createUserGroupVersion1();

        // Now set the currently created "Editor" as current user

        $repository->setCurrentUser($user);

        // Load content service

        $contentService = $repository->getContentService();

        // Instantiate a content update struct

        $contentUpdateStruct = $contentService->newContentUpdateStruct();

        $contentUpdateStruct->setField('name', 'New group name');

        $userGroupUpdateStruct = $userService->newUserGroupUpdateStruct();

        $userGroupUpdateStruct->contentUpdateStruct = $contentUpdateStruct;

        // This call will fail with an "UnauthorizedException"

        $userService->updateUserGroup($userGroup, $userGroupUpdateStruct);

        /* END: Use Case */

    }

    /**

     * Test for the createUser() method.