silverstripe-framework/tests/php/Security/PermissionRoleTest.php

50 lines
1.5 KiB
PHP
Raw Normal View History

<?php
2016-10-14 03:30:05 +02:00
namespace SilverStripe\Security\Tests;
use SilverStripe\ORM\DataObject;
2016-10-14 03:30:05 +02:00
use SilverStripe\Security\PermissionRole;
2016-06-23 01:37:22 +02:00
use SilverStripe\Security\PermissionRoleCode;
use SilverStripe\Dev\FunctionalTest;
class PermissionRoleTest extends FunctionalTest {
protected static $fixture_file = 'PermissionRoleTest.yml';
2014-08-15 08:53:05 +02:00
public function testDelete() {
2016-10-14 03:30:05 +02:00
$role = $this->objFromFixture(PermissionRole::class, 'role');
2014-08-15 08:53:05 +02:00
$role->delete();
2014-08-15 08:53:05 +02:00
2016-10-14 03:30:05 +02:00
$this->assertEquals(0, DataObject::get(PermissionRole::class, "\"ID\"={$role->ID}")->count(),
'Role is removed');
2016-10-14 03:30:05 +02:00
$this->assertEquals(0, DataObject::get(PermissionRoleCode::class,"\"RoleID\"={$role->ID}")->count(),
'Permissions removed along with the role');
}
public function testValidatesPrivilegedPermissions() {
$nonAdminCode = new PermissionRoleCode(array('Code' => 'CMS_ACCESS_CMSMain'));
$adminCode = new PermissionRoleCode(array('Code' => 'ADMIN'));
$this->logInWithPermission('APPLY_ROLES');
$result = $nonAdminCode->validate();
$this->assertTrue(
$result->isValid(),
'Members with only APPLY_ROLES can create non-privileged permission role codes'
);
$this->logInWithPermission('APPLY_ROLES');
$result = $adminCode->validate();
$this->assertFalse(
$result->isValid(),
'Members with only APPLY_ROLES can\'t create privileged permission role codes'
);
$this->logInWithPermission('ADMIN');
$result = $adminCode->validate();
$this->assertTrue(
$result->isValid(),
'Members with ADMIN can create privileged permission role codes'
);
}
}