ApplicationTest\Acl\AclTest::testIsCurrentUserAllowed()

Complexity

Conditions	1
Paths	1

Size

Total Lines	58
Code Lines	46

Duplication

Lines	0
Ratio	0 %

Importance

Changes

0

<?php
    public function testIsCurrentUserAllowed(): void
    {
        $acl = new Acl();
        $card = new Card();
        $card->setSite(Site::Dilps);

        $ownerStudent = new User();
        $ownerStudent->setSite(Site::Dilps);
        $ownerStudent->setLogin('Sarah');
        User::setCurrent($ownerStudent);
        $card->timestampCreation();

        User::setCurrent(null);
        self::assertFalse($acl->isCurrentUserAllowed($card, 'update'), 'anonymous cannot update');
        self::assertSame('Non-logged user with role anonymous is not allowed on resource "Card#null" with privilege "update"', $acl->getLastDenialMessage());

        User::setCurrent($ownerStudent);
        self::assertFalse($acl->isCurrentUserAllowed($card, 'update'), 'student cannot update even if owner');
        self::assertSame('User "Sarah" with role student is not allowed on resource "Card#null" with privilege "update"', $acl->getLastDenialMessage());

        $ownerJunior = new User(User::ROLE_JUNIOR);
        $ownerJunior->setSite(Site::Dilps);
        $ownerJunior->setLogin('Kyle');
        User::setCurrent($ownerJunior);
        $card->timestampCreation();

        self::assertTrue($acl->isCurrentUserAllowed($card, 'update'), 'only junior owner can update');
        self::assertNull($acl->getLastDenialMessage());
        self::assertTrue($acl->isCurrentUserAllowed($card, 'delete'), 'junior can delete his card');
        self::assertNull($acl->getLastDenialMessage());

        $change = new Change();
        $change->setSuggestion($card);
        self::assertFalse($acl->isCurrentUserAllowed($card, 'delete'), 'junior cannot delete his card if it is a suggestion');
        self::assertSame('User "Kyle" with role junior is not allowed on resource "Card#null" with privilege "delete"', $acl->getLastDenialMessage());

        $otherStudent = new User();
        $otherStudent->setSite(Site::Dilps);
        $otherStudent->setLogin('John');
        User::setCurrent($otherStudent);
        self::assertFalse($acl->isCurrentUserAllowed($card, 'update'), 'other user cannot update');
        self::assertSame('User "John" with role student is not allowed on resource "Card#null" with privilege "update" because it is not the owner, nor one of the responsible', $acl->getLastDenialMessage());

        $administrator = new User(User::ROLE_ADMINISTRATOR);
        $administrator->setSite(Site::Dilps);
        $administrator->setLogin('Jane');
        User::setCurrent($administrator);
        self::assertTrue($acl->isCurrentUserAllowed($card, 'update'), 'admin can do anything');
        self::assertNull($acl->getLastDenialMessage());

        $collection = new Collection();
        $collection->setSite(Site::Dilps);
        self::assertFalse($acl->isCurrentUserAllowed($collection, 'read'), 'admin cannot read non-admin collection');
        self::assertSame('User "Jane" with role administrator is not allowed on resource "Collection#null" with privilege "read" because it is not the owner, nor one of the responsible', $acl->getLastDenialMessage());

        $collection->setVisibility(CollectionVisibility::Administrator);
        self::assertTrue($acl->isCurrentUserAllowed($collection, 'read'), 'admin can do anything');
        self::assertNull($acl->getLastDenialMessage());
    }