mirror of
https://github.com/silverstripe/silverstripe-framework
synced 2024-10-22 14:05:37 +02:00
3ee8f505b7
The main benefit of this is so that authors who make use of
.editorconfig don't end up with whitespace changes in their PRs.
Spaces vs. tabs has been left alone, although that could do with a
tidy-up in SS4 after the switch to PSR-1/2.
The command used was this:
for match in '*.ss' '*.css' '*.scss' '*.html' '*.yml' '*.php' '*.js' '*.csv' '*.inc' '*.php5'; do
find . -path ./thirdparty -not -prune -o -path ./admin/thirdparty -not -prune -o -type f -name "$match" -exec sed -E -i '' 's/[[:space:]]+$//' {} \+
find . -path ./thirdparty -not -prune -o -path ./admin/thirdparty -not -prune -o -type f -name "$match" | xargs perl -pi -e 's/ +$//'
done
128 lines
4.9 KiB
PHP
128 lines
4.9 KiB
PHP
<?php
|
|
|
|
/**
|
|
* @package framework
|
|
* @subpackage tests
|
|
*/
|
|
class PermissionTest extends SapphireTest {
|
|
|
|
protected static $fixture_file = 'PermissionTest.yml';
|
|
|
|
public function testGetCodesGrouped() {
|
|
$codes = Permission::get_codes();
|
|
$this->assertArrayNotHasKey('SITETREE_VIEW_ALL', $codes);
|
|
}
|
|
|
|
public function testGetCodesUngrouped() {
|
|
$codes = Permission::get_codes(false);
|
|
$this->assertArrayHasKey('SITETREE_VIEW_ALL', $codes);
|
|
}
|
|
|
|
public function testDirectlyAppliedPermissions() {
|
|
$member = $this->objFromFixture('Member', 'author');
|
|
$this->assertTrue(Permission::checkMember($member, "SITETREE_VIEW_ALL"));
|
|
}
|
|
|
|
public function testCMSAccess() {
|
|
$members = Member::get()->byIDs($this->allFixtureIDs('Member'));
|
|
foreach ($members as $member) {
|
|
$this->assertTrue(Permission::checkMember($member, 'CMS_ACCESS'));
|
|
}
|
|
|
|
$member = new Member();
|
|
$member->update(array(
|
|
'FirstName' => 'No CMS',
|
|
'Surname' => 'Access',
|
|
'Email' => 'no-access@example.com',
|
|
));
|
|
$member->write();
|
|
$this->assertFalse(Permission::checkMember($member, 'CMS_ACCESS'));
|
|
}
|
|
|
|
public function testLeftAndMainAccessAll() {
|
|
//add user and group
|
|
$member = $this->objFromFixture('Member', 'leftandmain');
|
|
|
|
$this->assertTrue(Permission::checkMember($member, "CMS_ACCESS_MyAdmin"));
|
|
$this->assertTrue(Permission::checkMember($member, "CMS_ACCESS_AssetAdmin"));
|
|
$this->assertTrue(Permission::checkMember($member, "CMS_ACCESS_SecurityAdmin"));
|
|
}
|
|
|
|
public function testPermissionAreInheritedFromOneRole() {
|
|
$member = $this->objFromFixture('Member', 'author');
|
|
$this->assertTrue(Permission::checkMember($member, "CMS_ACCESS_MyAdmin"));
|
|
$this->assertTrue(Permission::checkMember($member, "CMS_ACCESS_AssetAdmin"));
|
|
$this->assertFalse(Permission::checkMember($member, "CMS_ACCESS_SecurityAdmin"));
|
|
}
|
|
|
|
public function testPermissionAreInheritedFromMultipleRoles() {
|
|
$member = $this->objFromFixture('Member', 'access');
|
|
$this->assertTrue(Permission::checkMember($member, "CMS_ACCESS_MyAdmin"));
|
|
$this->assertTrue(Permission::checkMember($member, "CMS_ACCESS_AssetAdmin"));
|
|
$this->assertTrue(Permission::checkMember($member, "CMS_ACCESS_SecurityAdmin"));
|
|
$this->assertTrue(Permission::checkMember($member, "EDIT_PERMISSIONS"));
|
|
$this->assertFalse(Permission::checkMember($member, "SITETREE_VIEW_ALL"));
|
|
}
|
|
|
|
public function testPermissionsForMember() {
|
|
$member = $this->objFromFixture('Member', 'access');
|
|
$permissions = Permission::permissions_for_member($member->ID);
|
|
$this->assertEquals(4, count($permissions));
|
|
$this->assertTrue(in_array('CMS_ACCESS_MyAdmin', $permissions));
|
|
$this->assertTrue(in_array('CMS_ACCESS_AssetAdmin', $permissions));
|
|
$this->assertTrue(in_array('CMS_ACCESS_SecurityAdmin', $permissions));
|
|
$this->assertTrue(in_array('EDIT_PERMISSIONS', $permissions));
|
|
|
|
$group = $this->objFromFixture("Group", "access");
|
|
|
|
Permission::deny($group->ID, "CMS_ACCESS_MyAdmin");
|
|
$permissions = Permission::permissions_for_member($member->ID);
|
|
$this->assertEquals(3, count($permissions));
|
|
$this->assertFalse(in_array('CMS_ACCESS_MyAdmin', $permissions));
|
|
}
|
|
|
|
public function testRolesAndPermissionsFromParentGroupsAreInherited() {
|
|
$member = $this->objFromFixture('Member', 'globalauthor');
|
|
|
|
// Check that permissions applied to the group are there
|
|
$this->assertTrue(Permission::checkMember($member, "SITETREE_EDIT_ALL"));
|
|
|
|
// Check that roles from parent groups are there
|
|
$this->assertTrue(Permission::checkMember($member, "CMS_ACCESS_MyAdmin"));
|
|
$this->assertTrue(Permission::checkMember($member, "CMS_ACCESS_AssetAdmin"));
|
|
|
|
// Check that permissions from parent groups are there
|
|
$this->assertTrue(Permission::checkMember($member, "SITETREE_VIEW_ALL"));
|
|
|
|
// Check that a random permission that shouldn't be there isn't
|
|
$this->assertFalse(Permission::checkMember($member, "CMS_ACCESS_SecurityAdmin"));
|
|
}
|
|
/**
|
|
* Ensure the the get_*_by_permission functions are permission role aware
|
|
*/
|
|
public function testGettingMembersByPermission() {
|
|
$accessMember = $this->objFromFixture('Member', 'access');
|
|
$accessAuthor = $this->objFromFixture('Member', 'author');
|
|
|
|
$result = Permission::get_members_by_permission(array('CMS_ACCESS_SecurityAdmin'));
|
|
$resultIDs = $result ? $result->column() : array();
|
|
|
|
$this->assertContains($accessMember->ID, $resultIDs,
|
|
'Member is found via a permission attached to a role');
|
|
$this->assertNotContains($accessAuthor->ID, $resultIDs);
|
|
}
|
|
|
|
|
|
public function testHiddenPermissions(){
|
|
$permissionCheckboxSet = new PermissionCheckboxSetField('Permissions','Permissions','Permission','GroupID');
|
|
$this->assertContains('CMS_ACCESS_LeftAndMain', $permissionCheckboxSet->Field());
|
|
|
|
Config::inst()->update('Permission', 'hidden_permissions', array('CMS_ACCESS_LeftAndMain'));
|
|
|
|
$this->assertNotContains('CMS_ACCESS_LeftAndMain', $permissionCheckboxSet->Field());
|
|
|
|
Config::inst()->remove('Permission', 'hidden_permissions');
|
|
$this->assertContains('CMS_ACCESS_LeftAndMain', $permissionCheckboxSet->Field());
|
|
}
|
|
}
|