patilswapnilv / shortcodely

        $this->assertArrayNotHasKey('administrator', $user->caps);

    }

    public function test_update_user_role_invalid_privilege_escalation() 

    {

        wp_set_current_user(self::$editor);

        $request = new WP_REST_Request('PUT', sprintf('/wp/v2/users/%d', self::$editor));

        $request->set_param('roles', array( 'administrator' ));

        $response = $this->server->dispatch($request);

        $this->assertErrorResponse('rest_cannot_edit_roles', $response, 403);

        $user = get_userdata(self::$editor);

        $this->assertArrayHasKey('editor', $user->caps);

        $this->assertArrayNotHasKey('administrator', $user->caps);

        $request = new WP_REST_Request('PUT', '/wp/v2/users/me');

        $request->set_param('roles', array( 'administrator' ));

        $response = $this->server->dispatch($request);

        $this->assertErrorResponse('rest_cannot_edit_roles', $response, 403);

        $user = get_userdata(self::$editor);

        $this->assertArrayHasKey('editor', $user->caps);

        $this->assertArrayNotHasKey('administrator', $user->caps);

    }

    public function test_update_user_role_invalid_privilege_deescalation() 

    }

    public function test_update_user_role_invalid_role() 

    {

        wp_set_current_user(self::$user);

        $this->allow_user_to_manage_multisite();

        $request = new WP_REST_Request('PUT', sprintf('/wp/v2/users/%d', self::$editor));

        $request->set_param('roles', array( 'BeSharp' ));

        $response = $this->server->dispatch($request);

        $this->assertErrorResponse('rest_user_invalid_role', $response, 400);

        $user = get_userdata(self::$editor);

        $this->assertArrayHasKey('editor', $user->caps);

        $this->assertArrayNotHasKey('BeSharp', $user->caps);

        $request = new WP_REST_Request('PUT', '/wp/v2/users/me');

        $request->set_param('roles', array( 'BeSharp' ));

        $response = $this->server->dispatch($request);

        $this->assertErrorResponse('rest_user_invalid_role', $response, 400);

        $user = get_userdata(self::$editor);

        $this->assertArrayHasKey('editor', $user->caps);

        $this->assertArrayNotHasKey('BeSharp', $user->caps);

    }

    public function test_update_user_without_permission()