ezsystems / ezpublish-kernel

     * @depends eZ\Publish\API\Repository\Tests\PermissionResolverTest::testHasAccessLimited

     * @expectedException \eZ\Publish\API\Repository\Exceptions\UnauthorizedException

     */

    public function testCanUserWithLimitationNo()

    {

        $repository = $this->getRepository();

        $administratorUserId = $this->generateId('user', 14);

        /* BEGIN: Use Case */

        // $administratorUserId contains the ID of the administrator user

        $user = $this->createUserVersion1();

        $permissionResolver = $repository->getPermissionResolver();

        // Set created user as current user reference

        $permissionResolver->setCurrentUserReference($user);

        $userService = $repository->getUserService();

        // Load administrator user using UserService, this does not check for permissions

        $administratorUser = $userService->loadUser($administratorUserId);

        // This call will return false as user with Editor role does not have

        // permission to read "Users" subtree

        $canUser = $permissionResolver->canUser('content', 'read', $administratorUser);

        $contentService = $repository->getContentService();

        // Performing an action without necessary permissions will fail with "UnauthorizedException"

        if (!$canUser) {

            $content = $contentService->loadContent($administratorUserId);

        }

        /* END: Use Case */

    }

    /**

     * Test for the canUser() method.

     * @see \eZ\Publish\API\Repository\SectionService::assignSection()

     * @expectedException \eZ\Publish\API\Repository\Exceptions\UnauthorizedException

     */

    public function testAssignSectionThrowsUnauthorizedException()

    {

        $repository = $this->getRepository();

        $standardSectionId = $this->generateId('section', 1);

        $anonymousUserId = $this->generateId('user', 10);

        /* BEGIN: Use Case */

        // $anonymousUserId is the ID of the "Anonymous" user in a eZ

        // Publish demo installation.

        // $standardSectionId is the ID of the "Standard" section in a eZ

        // Publish demo installation.

        // RemoteId of the "Media" page of an eZ Publish demo installation

        $mediaRemoteId = 'a6e35cbcb7cd6ae4b691f3eee30cd262';

        $userService = $repository->getUserService();

        $contentService = $repository->getContentService();

        $sectionService = $repository->getSectionService();

        // Load a content info instance

        $contentInfo = $contentService->loadContentInfoByRemoteId(

            $mediaRemoteId

        );

        // Load the "Standard" section

        $section = $sectionService->loadSection($standardSectionId);

        // Set anonymous user

        $repository->getPermissionResolver()->setCurrentUserReference($userService->loadUser($anonymousUserId));

        // This call will fail with a "UnauthorizedException"

        $sectionService->assignSection($contentInfo, $section);

        /* END: Use Case */

    }

    /**

     * Test for the deleteSection() method.

     * @depends eZ\Publish\API\Repository\Tests\TrashServiceTest::testRecover

     * @depends eZ\Publish\API\Repository\Tests\UserServiceTest::testLoadAnonymousUser

     */

    public function testRecoverThrowsUnauthorizedExceptionWithNewParentLocationParameter()

    {

        $repository = $this->getRepository();

        $trashService = $repository->getTrashService();

        $locationService = $repository->getLocationService();

        $homeLocationId = $this->generateId('location', 2);

        $anonymousUserId = $this->generateId('user', 10);

        /* BEGIN: Use Case */

        // $anonymousUserId is the ID of the "Anonymous" user

        // $homeLocationId is the ID of the "Home" location in an eZ Publish

        // demo installation

        $trashItem = $this->createTrashItem();

        // Get the new parent location

        $newParentLocation = $locationService->loadLocation($homeLocationId);

        // Load user service

        $userService = $repository->getUserService();

        // Set "Anonymous" as current user

        $repository->setCurrentUser($userService->loadUser($anonymousUserId));

        // This call will fail with an "UnauthorizedException"

        $trashService->recover($trashItem, $newParentLocation);

        /* END: Use Case */

    }

    /**

     * Test for the emptyTrash() method.

     * @expectedException \eZ\Publish\API\Repository\Exceptions\UnauthorizedException

     * @depends \eZ\Publish\API\Repository\Tests\URLAliasServiceTest::testRemoveAliases

     */

    public function testRemoveAliasesThrowsUnauthorizedException()

    {

        $repository = $this->getRepository();

        $anonymousUserId = $this->generateId('user', 10);

        $locationService = $repository->getLocationService();

        $someLocation = $locationService->loadLocation(

            $this->generateId('location', 12)

        );

        /* BEGIN: Use Case */

        // $someLocation contains a location with automatically generated

        // aliases assigned

        // $anonymousUserId is the ID of the "Anonymous" user in a eZ

        $urlAliasService = $repository->getURLAliasService();

        $userService = $repository->getUserService();

        $anonymousUser = $userService->loadUser($anonymousUserId);

        $repository->getPermissionResolver()->setCurrentUserReference($anonymousUser);

        $initialAliases = $urlAliasService->listLocationAliases($someLocation);

        // This call will fail with an UnauthorizedException

        $urlAliasService->removeAliases($initialAliases);

        /* END: Use Case */

    }

}

     * @see \eZ\Publish\API\Repository\URLService::updateUrl

     * @expectedException \eZ\Publish\API\Repository\Exceptions\UnauthorizedException

     */

    public function testUpdateUrlThrowsUnauthorizedException()

    {

        $repository = $this->getRepository();

        $anonymousUserId = $this->generateId('user', 10);

        $urlId = $this->generateId('url', 23);

        /* BEGIN: Use Case */

        // $anonymousUserId is the ID of the "Anonymous" user in a eZ

        // Publish demo installation.

        $userService = $repository->getUserService();

        $urlService = $repository->getURLService();

        $repository->getPermissionResolver()->setCurrentUserReference($userService->loadUser($anonymousUserId));

        $url = $urlService->loadById($urlId);

        $updateStruct = $urlService->createUpdateStruct();

        $updateStruct->url = 'https://vimeo.com/';

        // This call will fail with an UnauthorizedException

        $urlService->updateUrl($url, $updateStruct);

        /* END: Use Case */

    }

    /**

     * Test for the loadById() method.

     *

     * @see \eZ\Publish\API\Repository\URLAliasService::removeAliases()

     */

    public function testRemoveAliases()

    {

        $repository = $this->getRepository();

        $locationService = $repository->getLocationService();

        $someLocation = $locationService->loadLocation(

            $this->generateId('location', 12)

        );

        /* BEGIN: Use Case */

        // $someLocation contains a location with automatically generated

        // aliases assigned

        $urlAliasService = $repository->getURLAliasService();

        $initialAliases = $urlAliasService->listLocationAliases($someLocation);

        // Creates a custom alias for $someLocation

        $urlAliasService->createUrlAlias(

            $someLocation,

            '/my/fancy/url/alias/sindelfingen',

            'eng-US'

        );

        $customAliases = $urlAliasService->listLocationAliases($someLocation);

        // The custom alias just created will be removed

        // the automatic aliases stay in tact

        $urlAliasService->removeAliases($customAliases);

        /* END: Use Case */

        $this->assertEquals(

            $initialAliases,

            $urlAliasService->listLocationAliases($someLocation)

        );

    }

    /**

     * Test for the removeAliases() method.