ezsystems / ezpublish-kernel

     * @depends \eZ\Publish\API\Repository\Tests\RepositoryTest::testGetContentService

     * @depends \eZ\Publish\API\Repository\Tests\PermissionResolverTest::testHasAccessForCurrentUserNo

     */

    public function testLookupLimitationsForAnonymousUserHasNoAccess(): void

    {

        $repository = $this->getRepository();

        $homeId = $this->generateId('object', 57);

        $anonymousUserId = $this->generateId('user', 10);

        /* BEGIN: Use Case */

        // $anonymousUserId is the ID of the "Anonymous" user in a eZ

        // Publish demo installation.

        // $homeId contains the ID of the "Home" frontpage

        $contentService = $repository->getContentService();

        $userService = $repository->getUserService();

        $permissionResolver = $repository->getPermissionResolver();

        // Load anonymous user

        $anonymousUser = $userService->loadUser($anonymousUserId);

        // Set anonymous user as current user reference

        $permissionResolver->setCurrentUserReference($anonymousUser);

        // Load the ContentInfo for "Home" frontpage

        $contentInfo = $contentService->loadContentInfo($homeId);

        // `$lookupLimitations->hasAccess` will return false because anonymous user does not have access

        // to content removal and hence no permission to remove given content. `$lookupLimitations->lookupPolicyLimitations`

        // will be empty array

        $lookupLimitations = $permissionResolver->lookupLimitations('content', 'remove', $contentInfo);

        /* END: Use Case */

        $this->assertFalse($lookupLimitations->hasAccess);

        $this->assertEquals($lookupLimitations->roleLimitations, []);

        $this->assertEquals($lookupLimitations->lookupPolicyLimitations, []);

    }

    /**

     * Test for the lookupLimitations() method.

     * @depends \eZ\Publish\API\Repository\Tests\RepositoryTest::testGetContentService

     * @depends \eZ\Publish\API\Repository\Tests\PermissionResolverTest::testHasAccessForCurrentUserYes

     */

    public function testLookupLimitationsForAdministratorUser(): void

    {

        $repository = $this->getRepository();

        $administratorUserId = $this->generateId('user', 14);

        $homeId = $this->generateId('object', 57);

        /* BEGIN: Use Case */

        // $administratorUserId contains the ID of the administrator user

        // $homeId contains the ID of the "Home" frontpage

        $contentService = $repository->getContentService();

        $userService = $repository->getUserService();

        $permissionResolver = $repository->getPermissionResolver();

        // Load administrator user

        $administratorUser = $userService->loadUser($administratorUserId);

        // Set administrator user as current user reference

        $permissionResolver->setCurrentUserReference($administratorUser);

        // Load the ContentInfo for "Home" frontpage

        $contentInfo = $contentService->loadContentInfo($homeId);

        // This call will return true

        $lookupLimitations = $permissionResolver->lookupLimitations('content', 'remove', $contentInfo);

        /* END: Use Case */

        $this->assertTrue($lookupLimitations->hasAccess);

        $this->assertEquals($lookupLimitations->roleLimitations, []);

        $this->assertEquals($lookupLimitations->lookupPolicyLimitations, []);

    }

    /**

     * When one of policy pass then all limitation should be returned.