RoleServiceAuthorizationTest::testRemoveRoleAssignmentFromUserGroupThrowsUnauthorizedException() - Code Metrics - Inspection of "EZP-30971: Updated bc document" - ezsystems/ezpublish-kernel - Measure and Improve Code Quality continuously with Scrutinizer

Completed
Push — ezp-30928-as_a_developer_i_wan... ( 0570c5 )

unknown
created 2019-10-01 07:12 UTC
testRemoveRoleAssignmentFromUserGroupThrowsUnauthorizedException() A

↳ Parent: RoleServiceAuthorizationTest
Complexity

Conditions	3
Paths	3
Size

Total Lines
Duplication

Lines	0
Ratio	0 %
Importance

Changes
Metric	Value
cc	3
nc	3
nop	0
dl	0
loc	35
rs	9.36
c	0
b	0
f	0
<?php

/**
 * File containing the RoleServiceAuthorizationTest class.
 *
 * @copyright Copyright (C) eZ Systems AS. All rights reserved.
 * @license For full copyright and license information view LICENSE file distributed with this source code.
 */
namespace eZ\Publish\API\Repository\Tests;

use eZ\Publish\API\Repository\Values\User\Limitation\SubtreeLimitation;

/**
 * Test case for operations in the RoleService using in memory storage.
 *
 * @see eZ\Publish\API\Repository\RoleService
 * @group integration
 * @group authorization
 */
class RoleServiceAuthorizationTest extends BaseTest
{
    /**
     * Test for the createRole() method.
     *
     * @see \eZ\Publish\API\Repository\RoleService::createRole()
     * @depends eZ\Publish\API\Repository\Tests\RoleServiceTest::testCreateRole
     * @depends eZ\Publish\API\Repository\Tests\UserServiceTest::testCreateUser
     */
    public function testCreateRoleThrowsUnauthorizedException()
    {
        $this->expectException(\eZ\Publish\API\Repository\Exceptions\UnauthorizedException::class);

        $repository = $this->getRepository();
        $permissionResolver = $repository->getPermissionResolver();

        /* BEGIN: Use Case */
        $user = $this->createUserVersion1();

        // Set "Editor" user as current user.
        $permissionResolver->setCurrentUserReference($user);

        // Get the role service
        $roleService = $repository->getRoleService();

        // Instantiate a role create struct.
        $roleCreate = $roleService->newRoleCreateStruct('roleName');

        // This call will fail with an "UnauthorizedException"
        $roleService->createRole($roleCreate);
        /* END: Use Case */
    }

    /**
     * Test for the loadRole() method.
     *
     * @see \eZ\Publish\API\Repository\RoleService::loadRole()
     * @depends eZ\Publish\API\Repository\Tests\RoleServiceTest::testLoadRole
     * @depends eZ\Publish\API\Repository\Tests\UserServiceTest::testCreateUser
     */
    public function testLoadRoleThrowsUnauthorizedException()
    {
        $this->expectException(\eZ\Publish\API\Repository\Exceptions\UnauthorizedException::class);

        $repository = $this->getRepository();
        $roleService = $repository->getRoleService();
        $permissionResolver = $repository->getPermissionResolver();

        /* BEGIN: Use Case */
        $user = $this->createUserVersion1();

        $role = $this->createRole();

        // Set "Editor" user as current user.
        $permissionResolver->setCurrentUserReference($user);

        // This call will fail with an "UnauthorizedException"
        $roleService->loadRole($role->id);
        /* END: Use Case */
    }

    /**
     * Test for the loadRoleByIdentifier() method.
     *
     * @see \eZ\Publish\API\Repository\RoleService::loadRoleByIdentifier()
     * @depends eZ\Publish\API\Repository\Tests\RoleServiceTest::testLoadRoleByIdentifier
     * @depends eZ\Publish\API\Repository\Tests\UserServiceTest::testCreateUser
     */
    public function testLoadRoleByIdentifierThrowsUnauthorizedException()
    {
        $this->expectException(\eZ\Publish\API\Repository\Exceptions\UnauthorizedException::class);

        $repository = $this->getRepository();
        $roleService = $repository->getRoleService();
        $permissionResolver = $repository->getPermissionResolver();

        /* BEGIN: Use Case */
        $user = $this->createUserVersion1();

        $role = $this->createRole();

        // Set "Editor" user as current user.
        $permissionResolver->setCurrentUserReference($user);

        // This call will fail with an "UnauthorizedException"
        $roleService->loadRoleByIdentifier($role->identifier);
        /* END: Use Case */
    }

    /**
     * Test for the loadRoles() method.
     *
     * @see \eZ\Publish\API\Repository\RoleService::loadRoles()
     */
    public function testLoadRolesLoadsEmptyListForAnonymousUser()
    {
        $repository = $this->getRepository();
        $permissionResolver = $repository->getPermissionResolver();

        /* BEGIN: Use Case */
        $user = $this->createUserVersion1();

        // Set "Editor" user as current user.
        $permissionResolver->setCurrentUserReference($user);

        // Get the role service
        $roleService = $repository->getRoleService();
        /* END: Use Case */

        $this->assertEquals([], $roleService->loadRoles());
    }

    /**
     * Test for the loadRoles() method.
     *
     * @see \eZ\Publish\API\Repository\RoleService::loadRoles()
     */
    public function testLoadRolesForUserWithSubtreeLimitation()
    {
        $repository = $this->getRepository();
        $roleService = $repository->getRoleService();

        /* BEGIN: Use Case */
        // create user that can read/create/delete but cannot edit or content
        $this->createRoleWithPolicies('roleReader', [
            ['module' => 'role', 'function' => 'read'],
        ]);

        $user = $this->createCustomUserWithLogin(
            'user',
            '[email protected]',
            'roleReaders',
            'roleReader',
            new SubtreeLimitation(['limitationValues' => ['/1/2/']])
        );

        $repository->getPermissionResolver()->setCurrentUserReference($user);
        /* END: Use Case */

        $this->assertCount(6, $roleService->loadRoles());
    }

    /**
     * Test for the deleteRole() method.
     *
     * @see \eZ\Publish\API\Repository\RoleService::deleteRole()
     * @depends eZ\Publish\API\Repository\Tests\RoleServiceTest::testDeleteRole
     * @depends eZ\Publish\API\Repository\Tests\UserServiceTest::testCreateUser
     */
    public function testDeleteRoleThrowsUnauthorizedException()
    {
        $this->expectException(\eZ\Publish\API\Repository\Exceptions\UnauthorizedException::class);

        $repository = $this->getRepository();
        $roleService = $repository->getRoleService();
        $permissionResolver = $repository->getPermissionResolver();

        /* BEGIN: Use Case */
        $user = $this->createUserVersion1();

        $role = $this->createRole();

        // Set "Editor" user as current user.
        $permissionResolver->setCurrentUserReference($user);

        // This call will fail with an "UnauthorizedException"
        $roleService->deleteRole($role);
        /* END: Use Case */
    }

    /**
     * Test for the updatePolicy() method.
     *
     * @see \eZ\Publish\API\Repository\RoleService::updatePolicyByRoleDraft()
     * @depends eZ\Publish\API\Repository\Tests\RoleServiceTest::testUpdatePolicyByRoleDraft
     * @depends eZ\Publish\API\Repository\Tests\UserServiceTest::testCreateUser
     */
    public function testUpdatePolicyByRoleDraftThrowsUnauthorizedException()
    {
        $this->expectException(\eZ\Publish\API\Repository\Exceptions\UnauthorizedException::class);

        $repository = $this->getRepository();
        $roleService = $repository->getRoleService();
        $permissionResolver = $repository->getPermissionResolver();

        /* BEGIN: Use Case */
        $user = $this->createUserVersion1();

        $role = $this->createRole();
        $roleDraft = $roleService->createRoleDraft($role);
        // Get first role policy
        $policies = $roleDraft->getPolicies();
        $policy = reset($policies);

        // Set "Editor" user as current user.
        $permissionResolver->setCurrentUserReference($user);

        // Get a policy update struct and add a limitation
        $policyUpdate = $roleService->newPolicyUpdateStruct();
        $policyUpdate->addLimitation(
            new SubtreeLimitation(
                [
                    'limitationValues' => ['/1/'],
                ]
            )
        );

        // This call will fail with an "UnauthorizedException"
        $roleService->updatePolicyByRoleDraft(
            $roleDraft,
            $policy,
            $policyUpdate
        );
        $roleService->publishRoleDraft($roleDraft);
        /* END: Use Case */
    }

    /**
     * Test for the removePolicy() method.
     *
     * @see \eZ\Publish\API\Repository\RoleService::removePolicy()
     * @depends eZ\Publish\API\Repository\Tests\RoleServiceTest::testRemovePolicyByRoleDraft
     * @depends eZ\Publish\API\Repository\Tests\UserServiceTest::testCreateUser
     */
    public function testRemovePolicyThrowsUnauthorizedException()
    {
        $this->expectException(\eZ\Publish\API\Repository\Exceptions\UnauthorizedException::class);

        $repository = $this->getRepository();
        $roleService = $repository->getRoleService();
        $permissionResolver = $repository->getPermissionResolver();

        /* BEGIN: Use Case */
        $user = $this->createUserVersion1();

        $roleCreate = $roleService->newRoleCreateStruct('newRole');

        // @todo uncomment when support for multilingual names and descriptions is added EZP-24776
        // $roleCreate->mainLanguageCode = 'eng-US';

        // Create a new role with two policies
        $roleDraft = $roleService->createRole($roleCreate);
        $roleService->addPolicyByRoleDraft(
            $roleDraft,
            $roleService->newPolicyCreateStruct('content', 'create')
        );
        $roleDraft = $roleService->addPolicyByRoleDraft(
            $roleDraft,
            $roleService->newPolicyCreateStruct('content', 'delete')
        );

        // Set "Editor" user as current user.
        $permissionResolver->setCurrentUserReference($user);

        // This call will fail with an "UnauthorizedException"
        $roleService->removePolicyByRoleDraft($roleDraft, $roleDraft->getPolicies()[0]);

        /* END: Use Case */
    }

    /**
     * Test for the removePolicyByRoleDraft() method.
     *
     * @see \eZ\Publish\API\Repository\RoleService::removePolicyByRoleDraft()
     * @depends eZ\Publish\API\Repository\Tests\RoleServiceTest::testRemovePolicyByRoleDraft
     * @depends eZ\Publish\API\Repository\Tests\UserServiceTest::testCreateUser
     */
    public function testDeletePolicyThrowsUnauthorizedException()
    {
        $this->expectException(\eZ\Publish\API\Repository\Exceptions\UnauthorizedException::class);

        $repository = $this->getRepository();
        $roleService = $repository->getRoleService();
        $permissionResolver = $repository->getPermissionResolver();

        /* BEGIN: Use Case */
        $user = $this->createUserVersion1();

        $role = $this->createRole();

        // Get first role policy
        $roleDraft = $roleService->createRoleDraft($role);
        $policiesDrafts = $roleDraft->getPolicies();
        $policyDraft = reset($policiesDrafts);

        // Set "Editor" user as current user.
        $permissionResolver->setCurrentUserReference($user);

        // This call will fail with an "UnauthorizedException"
        $roleService->removePolicyByRoleDraft($roleDraft, $policyDraft);
        /* END: Use Case */
    }

    /**
     * Test for the assignRoleToUserGroup() method.
     *
     * @see \eZ\Publish\API\Repository\RoleService::assignRoleToUserGroup()
     * @depends eZ\Publish\API\Repository\Tests\RoleServiceTest::testAssignRoleToUserGroup
     * @depends eZ\Publish\API\Repository\Tests\UserServiceTest::testCreateUser
     */
    public function testAssignRoleToUserGroupThrowsUnauthorizedException()
    {
        $this->expectException(\eZ\Publish\API\Repository\Exceptions\UnauthorizedException::class);

        $repository = $this->getRepository();
        $userService = $repository->getUserService();
        $roleService = $repository->getRoleService();
        $permissionResolver = $repository->getPermissionResolver();

        $editorsGroupId = $this->generateId('group', 13);

        /* BEGIN: Use Case */
        $user = $this->createUserVersion1();

        $role = $this->createRole();

        // Load the "Editors" user group
        $userGroup = $userService->loadUserGroup($editorsGroupId);

        // Set "Editor" user as current user.
        $permissionResolver->setCurrentUserReference($user);

        // This call will fail with an "UnauthorizedException"
        $roleService->assignRoleToUserGroup($role, $userGroup);
        /* END: Use Case */
    }

    /**
     * Test for the assignRoleToUserGroup() method.
     *
     * @see \eZ\Publish\API\Repository\RoleService::assignRoleToUserGroup($role, $userGroup, $roleLimitation)
     * @depends eZ\Publish\API\Repository\Tests\RoleServiceTest::testAssignRoleToUserGroup
     * @depends eZ\Publish\API\Repository\Tests\UserServiceTest::testCreateUser
     */
    public function testAssignRoleToUserGroupThrowsUnauthorizedExceptionWithRoleLimitationParameter()
    {
        $this->expectException(\eZ\Publish\API\Repository\Exceptions\UnauthorizedException::class);

        $repository = $this->getRepository();
        $userService = $repository->getUserService();
        $roleService = $repository->getRoleService();
        $permissionResolver = $repository->getPermissionResolver();

        $editorsGroupId = $this->generateId('group', 13);

        /* BEGIN: Use Case */
        $user = $this->createUserVersion1();

        $role = $this->createRole();

        // Load the "Editors" user group
        $userGroup = $userService->loadUserGroup($editorsGroupId);

        // Set "Editor" user as current user.
        $permissionResolver->setCurrentUserReference($user);

        // Create a subtree role limitation
        $limitation = new SubtreeLimitation(
            [
                'limitationValues' => ['/1/2/'],
            ]
        );

        // This call will fail with an "UnauthorizedException"
        $roleService->assignRoleToUserGroup($role, $userGroup, $limitation);
        /* END: Use Case */
    }

    /**
     * Test for the removeRoleAssignment() method.
     *
     * @see \eZ\Publish\API\Repository\RoleService::removeRoleAssignment()
     * @depends eZ\Publish\API\Repository\Tests\RoleServiceTest::testRemoveRoleAssignmentFromUserGroup
     * @depends eZ\Publish\API\Repository\Tests\UserServiceTest::testCreateUser
     */
    public function testRemoveRoleAssignmentFromUserGroupThrowsUnauthorizedException()
    {
        $this->expectException(\eZ\Publish\API\Repository\Exceptions\UnauthorizedException::class);

        $repository = $this->getRepository();
        $userService = $repository->getUserService();
        $roleService = $repository->getRoleService();
        $permissionResolver = $repository->getPermissionResolver();

        $editorsGroupId = $this->generateId('group', 13);

        /* BEGIN: Use Case */
        $user = $this->createUserVersion1();

        $role = $this->createRole();

        // Load the "Editors" user group
        $userGroup = $userService->loadUserGroup($editorsGroupId);

        // Assign new role to "Editors" user group
        $roleService->assignRoleToUserGroup($role, $userGroup);

        // Set "Editor" user as current user.
        $permissionResolver->setCurrentUserReference($user);

        $roleAssignments = $roleService->getRoleAssignmentsForUserGroup($userGroup);

        // This call will fail with an "UnauthorizedException"
        foreach ($roleAssignments as $roleAssignment) {
            if ($roleAssignment->role->id === $role->id) {
                $roleService->removeRoleAssignment($roleAssignment);
            }
        }
        /* END: Use Case */
    }

    /**
     * Test for the assignRoleToUser() method.
     *
     * @see \eZ\Publish\API\Repository\RoleService::assignRoleToUser()
     * @depends eZ\Publish\API\Repository\Tests\RoleServiceTest::testAssignRoleToUser
     * @depends eZ\Publish\API\Repository\Tests\UserServiceTest::testCreateUser
     */
    public function testAssignRoleToUserThrowsUnauthorizedException()
    {
        $this->expectException(\eZ\Publish\API\Repository\Exceptions\UnauthorizedException::class);

        $repository = $this->getRepository();
        $roleService = $repository->getRoleService();
        $permissionResolver = $repository->getPermissionResolver();

        /* BEGIN: Use Case */
        $user = $this->createUserVersion1();

        $role = $this->createRole();

        // Set "Editor" user as current user.
        $permissionResolver->setCurrentUserReference($user);

        // This call will fail with an "UnauthorizedException"
        $roleService->assignRoleToUser($role, $user);
        /* END: Use Case */
    }

    /**
     * Test for the assignRoleToUser() method.
     *
     * @see \eZ\Publish\API\Repository\RoleService::assignRoleToUser($role, $user, $roleLimitation)
     * @depends eZ\Publish\API\Repository\Tests\RoleServiceTest::testAssignRoleToUser
     * @depends eZ\Publish\API\Repository\Tests\UserServiceTest::testCreateUser
     */
    public function testAssignRoleToUserThrowsUnauthorizedExceptionWithRoleLimitationParameter()
    {
        $this->expectException(\eZ\Publish\API\Repository\Exceptions\UnauthorizedException::class);

        $repository = $this->getRepository();
        $roleService = $repository->getRoleService();
        $permissionResolver = $repository->getPermissionResolver();

        /* BEGIN: Use Case */
        $user = $this->createUserVersion1();

        $role = $this->createRole();

        // Set "Editor" user as current user.
        $permissionResolver->setCurrentUserReference($user);

        // Create a subtree role limitation
        $limitation = new SubtreeLimitation(
            [
                'limitationValues' => ['/1/2/'],
            ]
        );

        // This call will fail with an "UnauthorizedException"
        $roleService->assignRoleToUser($role, $user, $limitation);
        /* END: Use Case */
    }

    /**
     * Test for the removeRoleAssignment() method.
     *
     * @see \eZ\Publish\API\Repository\RoleService::removeRoleAssignment()
     * @depends eZ\Publish\API\Repository\Tests\RoleServiceTest::testRemoveRoleAssignment
     * @depends eZ\Publish\API\Repository\Tests\UserServiceTest::testCreateUser
     */
    public function testRemoveRoleAssignmentThrowsUnauthorizedException()
    {
        $this->expectException(\eZ\Publish\API\Repository\Exceptions\UnauthorizedException::class);

        $repository = $this->getRepository();
        $roleService = $repository->getRoleService();
        $permissionResolver = $repository->getPermissionResolver();

        /* BEGIN: Use Case */
        $user = $this->createUserVersion1();

        $role = $this->createRole();

        // Assign new role to "Editor" user
        $roleService->assignRoleToUser($role, $user);

        // Set "Editor" user as current user.
        $permissionResolver->setCurrentUserReference($user);
        $roleAssignments = $roleService->getRoleAssignmentsForUser($user);

        // This call will fail with an "UnauthorizedException"
        foreach ($roleAssignments as $roleAssignment) {
            if ($roleAssignment->role->id === $role->id) {
                $roleService->removeRoleAssignment($roleAssignment);
            }
        }
        /* END: Use Case */
    }

    /**
     * Test for the getRoleAssignments() method.
     *
     * @see \eZ\Publish\API\Repository\RoleService::getRoleAssignments()
     * @depends eZ\Publish\API\Repository\Tests\RoleServiceTest::testGetRoleAssignments
     * @depends eZ\Publish\API\Repository\Tests\UserServiceTest::testCreateUser
     */
    public function testGetRoleAssignmentsThrowsUnauthorizedException()
    {
        $this->expectException(\eZ\Publish\API\Repository\Exceptions\UnauthorizedException::class);

        $repository = $this->getRepository();
        $roleService = $repository->getRoleService();
        $permissionResolver = $repository->getPermissionResolver();

        /* BEGIN: Use Case */
        $user = $this->createUserVersion1();

        $role = $this->createRole();

        // Set "Editor" user as current user.
        $permissionResolver->setCurrentUserReference($user);

        // This call will fail with an "UnauthorizedException"
        $roleService->getRoleAssignments($role);
        /* END: Use Case */
    }

    /**
     * Test for the getRoleAssignmentsForUser() method.
     *
     * @see \eZ\Publish\API\Repository\RoleService::getRoleAssignmentsForUser()
     */
    public function testGetRoleAssignmentsForUserLoadsEmptyListForAnonymousUser()
    {
        $repository = $this->getRepository();
        $roleService = $repository->getRoleService();

        /* BEGIN: Use Case */
        $user = $this->createUserVersion1();

        $this->createRole();

        // Set "Editor" user as current user.
        $repository->getPermissionResolver()->setCurrentUserReference($user);
        /* END: Use Case */

        $this->assertSame([], $roleService->getRoleAssignmentsForUser($user));
    }

    /**
     * Test for the getRoleAssignmentsForUser() method.
     *
     * @see \eZ\Publish\API\Repository\RoleService::getRoleAssignmentsForUser()
     */
    public function testGetRoleAssignmentsForUserWithSubtreeLimitation()
    {
        $repository = $this->getRepository();
        $roleService = $repository->getRoleService();

        /* BEGIN: Use Case */
        $user = $this->createUserWithPolicies(
            'trash_test_user',
            [
                ['module' => 'role', 'function' => 'read'],
            ],
            new SubtreeLimitation(['limitationValues' => ['/1/2/']])
        );

        $repository->getPermissionResolver()->setCurrentUserReference($user);
        /* END: Use Case */

        $roleAssignments = $roleService->getRoleAssignmentsForUser($user);
        $this->assertCount(1, $roleAssignments);

        $roleAssignment = $roleAssignments[0];
        $this->assertSame($user, $roleAssignment->user);
    }

    /**
     * Test for the getRoleAssignmentsForUserGroup() method.
     *
     * @see \eZ\Publish\API\Repository\RoleService::getRoleAssignmentsForUserGroup()
     * @depends eZ\Publish\API\Repository\Tests\RoleServiceTest::testGetRoleAssignmentsForUserGroup
     * @depends eZ\Publish\API\Repository\Tests\UserServiceTest::testCreateUser
     */
    public function testGetRoleAssignmentsForUserGroupThrowsUnauthorizedException()
    {
        $this->expectException(\eZ\Publish\API\Repository\Exceptions\UnauthorizedException::class);

        $repository = $this->getRepository();
        $roleService = $repository->getRoleService();
        $userService = $repository->getUserService();
        $permissionResolver = $repository->getPermissionResolver();

        $editorsGroupId = $this->generateId('group', 13);

        /* BEGIN: Use Case */
        $user = $this->createUserVersion1();

        $this->createRole();

        // Load the "Editors" user group
        $userGroup = $userService->loadUserGroup($editorsGroupId);

        // Set "Editor" user as current user.
        $permissionResolver->setCurrentUserReference($user);

        // This call will fail with an "UnauthorizedException"
        $roleService->getRoleAssignmentsForUserGroup($userGroup);
        /* END: Use Case */
    }

    /**
     * Create a role fixture in a variable named <b>$role</b>,.
     *
     * @return \eZ\Publish\API\Repository\Values\User\Role
     */
    private function createRole()
    {
        $repository = $this->getRepository();

        /* BEGIN: Inline */
        // Get the role service
        $roleService = $repository->getRoleService();

        // Get new policy create struct
        $policyCreate = $roleService->newPolicyCreateStruct('content', '*');

        // Get a role create struct instance and set properties
        $roleCreate = $roleService->newRoleCreateStruct('testRole');

        // @todo uncomment when support for multilingual names and descriptions is added EZP-24776
        // $roleCreate->mainLanguageCode = 'eng-GB';

        $roleCreate->addPolicy($policyCreate);

        // Create a new role instance.
        $roleDraft = $roleService->createRole($roleCreate);
        $roleService->publishRoleDraft($roleDraft);
        $role = $roleService->loadRole($roleDraft->id);
        /* END: Inline */

        return $role;
    }
}

ezsystems / ezpublish-kernel

Push — ezp-30928-as_a_developer_i_wan... ( 0570c5 )

testRemoveRoleAssignmentFromUserGroupThrowsUnauthorizedException() A

Complexity

Size

Duplication

Importance

Duplication Side-by-Side

Filter issues like
