mirror of
https://github.com/silverstripe/silverstripe-framework
synced 2024-09-02 15:57:53 +02:00
174 lines
5.1 KiB
PHP
174 lines
5.1 KiB
PHP
<?php
|
|
|
|
class GridFieldDeleteActionTest extends SapphireTest {
|
|
|
|
/** @var ArrayList */
|
|
protected $list;
|
|
|
|
/** @var GridField */
|
|
protected $gridField;
|
|
|
|
/** @var Form */
|
|
protected $form;
|
|
|
|
/** @var string */
|
|
protected static $fixture_file = 'GridFieldActionTest.yml';
|
|
|
|
/** @var array */
|
|
protected $extraDataObjects = array('GridFieldAction_Delete_Team', 'GridFieldAction_Edit_Team');
|
|
|
|
public function setUp() {
|
|
parent::setUp();
|
|
$this->list = new DataList('GridFieldAction_Delete_Team');
|
|
$config = GridFieldConfig::create()->addComponent(new GridFieldDeleteAction());
|
|
$this->gridField = new GridField('testfield', 'testfield', $this->list, $config);
|
|
$this->form = new Form(new Controller(), 'mockform', new FieldList(array($this->gridField)), new FieldList());
|
|
}
|
|
|
|
public function testDontShowDeleteButtons() {
|
|
if(Member::currentUser()) { Member::currentUser()->logOut(); }
|
|
$content = new CSSContentParser($this->gridField->FieldHolder());
|
|
// Check that there are content
|
|
$this->assertEquals(4, count($content->getBySelector('.ss-gridfield-item')));
|
|
// Make sure that there are no delete buttons
|
|
$this->assertEquals(0, count($content->getBySelector('.gridfield-button-delete')),
|
|
'Delete buttons should not show when not logged in.');
|
|
}
|
|
|
|
public function testShowDeleteButtonsWithAdminPermission() {
|
|
$this->logInWithPermission('ADMIN');
|
|
$content = new CSSContentParser($this->gridField->FieldHolder());
|
|
$deleteButtons = $content->getBySelector('.gridfield-button-delete');
|
|
$this->assertEquals(3, count($deleteButtons), 'Delete buttons should show when logged in.');
|
|
}
|
|
|
|
public function testActionsRequireCSRF() {
|
|
$this->logInWithPermission('ADMIN');
|
|
$this->setExpectedException(
|
|
'SS_HTTPResponse_Exception',
|
|
_t("Form.CSRF_FAILED_MESSAGE",
|
|
"There seems to have been a technical problem. Please click the back button, ".
|
|
"refresh your browser, and try again."
|
|
),
|
|
400
|
|
);
|
|
$stateID = 'testGridStateActionField';
|
|
$request = new SS_HTTPRequest(
|
|
'POST',
|
|
'url',
|
|
array(),
|
|
array(
|
|
'action_gridFieldAlterAction?StateID='.$stateID,
|
|
'SecurityID' => null,
|
|
)
|
|
);
|
|
$this->gridField->gridFieldAlterAction(array('StateID'=>$stateID), $this->form, $request);
|
|
}
|
|
|
|
public function testDeleteActionWithoutCorrectPermission() {
|
|
if(Member::currentUser()) { Member::currentUser()->logOut(); }
|
|
$this->setExpectedException('ValidationException');
|
|
|
|
$stateID = 'testGridStateActionField';
|
|
Session::set(
|
|
$stateID,
|
|
array(
|
|
'grid' => '',
|
|
'actionName' => 'deleterecord',
|
|
'args' => array(
|
|
'RecordID' => $this->idFromFixture('GridFieldAction_Delete_Team', 'team1')
|
|
)
|
|
)
|
|
);
|
|
$token = SecurityToken::inst();
|
|
$request = new SS_HTTPRequest(
|
|
'POST',
|
|
'url',
|
|
array(),
|
|
array(
|
|
'action_gridFieldAlterAction?StateID='.$stateID => true,
|
|
$token->getName() => $token->getValue(),
|
|
)
|
|
);
|
|
$this->gridField->gridFieldAlterAction(array('StateID'=>$stateID), $this->form, $request);
|
|
$this->assertEquals(3, $this->list->count(),
|
|
'User should\'t be able to delete records without correct permissions.');
|
|
}
|
|
|
|
public function testDeleteActionWithAdminPermission() {
|
|
$this->logInWithPermission('ADMIN');
|
|
$stateID = 'testGridStateActionField';
|
|
Session::set(
|
|
$stateID,
|
|
array(
|
|
'grid'=>'',
|
|
'actionName'=>'deleterecord',
|
|
'args' => array(
|
|
'RecordID' => $this->idFromFixture('GridFieldAction_Delete_Team', 'team1')
|
|
)
|
|
)
|
|
);
|
|
$token = SecurityToken::inst();
|
|
$request = new SS_HTTPRequest(
|
|
'POST',
|
|
'url',
|
|
array(),
|
|
array(
|
|
'action_gridFieldAlterAction?StateID='.$stateID=>true,
|
|
$token->getName() => $token->getValue(),
|
|
)
|
|
);
|
|
$this->gridField->gridFieldAlterAction(array('StateID'=>$stateID), $this->form, $request);
|
|
$this->assertEquals(2, $this->list->count(), 'User should be able to delete records with ADMIN permission.');
|
|
}
|
|
|
|
public function testDeleteActionRemoveRelation() {
|
|
$this->logInWithPermission('ADMIN');
|
|
|
|
$config = GridFieldConfig::create()->addComponent(new GridFieldDeleteAction(true));
|
|
|
|
$gridField = new GridField('testfield', 'testfield', $this->list, $config);
|
|
$form = new Form(new Controller(), 'mockform', new FieldList(array($this->gridField)), new FieldList());
|
|
|
|
$stateID = 'testGridStateActionField';
|
|
Session::set(
|
|
$stateID,
|
|
array(
|
|
'grid'=>'',
|
|
'actionName'=>'deleterecord',
|
|
'args' => array(
|
|
'RecordID' => $this->idFromFixture('GridFieldAction_Delete_Team', 'team1')
|
|
)
|
|
)
|
|
);
|
|
$token = SecurityToken::inst();
|
|
$request = new SS_HTTPRequest(
|
|
'POST',
|
|
'url',
|
|
array(),
|
|
array(
|
|
'action_gridFieldAlterAction?StateID='.$stateID=>true,
|
|
$token->getName() => $token->getValue(),
|
|
)
|
|
);
|
|
$this->gridField->gridFieldAlterAction(array('StateID'=>$stateID), $this->form, $request);
|
|
$this->assertEquals(2, $this->list->count(), 'User should be able to delete records with ADMIN permission.');
|
|
|
|
}
|
|
}
|
|
|
|
class GridFieldAction_Delete_Team extends DataObject implements TestOnly {
|
|
private static $db = array(
|
|
'Name' => 'Varchar',
|
|
'City' => 'Varchar'
|
|
);
|
|
|
|
public function canView($member = null) {
|
|
return true;
|
|
}
|
|
|
|
public function canDelete($member = null) {
|
|
return parent::canDelete($member);
|
|
}
|
|
}
|