mirror of
https://github.com/silverstripe/silverstripe-framework
synced 2024-09-15 22:16:32 +02:00
65b1bc4839
git-svn-id: svn://svn.silverstripe.com/silverstripe/open/modules/sapphire/branches/2.4@92428 467b73ca-7a2a-4603-9d3b-597d59a354a9
57 lines
2.6 KiB
PHP
57 lines
2.6 KiB
PHP
<?php
|
|
|
|
class PermissionTest extends SapphireTest {
|
|
static $fixture_file = 'sapphire/tests/security/PermissionTest.yml';
|
|
|
|
function testDirectlyAppliedPermissions() {
|
|
$member = $this->objFromFixture('Member', 'author');
|
|
$this->assertTrue(Permission::checkMember($member, "SITETREE_VIEW_ALL"));
|
|
}
|
|
|
|
function testPermissionAreInheritedFromOneRole() {
|
|
$member = $this->objFromFixture('Member', 'author');
|
|
$this->assertTrue(Permission::checkMember($member, "CMS_ACCESS_CMSMain"));
|
|
$this->assertTrue(Permission::checkMember($member, "CMS_ACCESS_AssetAdmin"));
|
|
$this->assertFalse(Permission::checkMember($member, "CMS_ACCESS_SecurityAdmin"));
|
|
}
|
|
|
|
function testPermissionAreInheritedFromMultipleRoles() {
|
|
$member = $this->objFromFixture('Member', 'access');
|
|
$this->assertTrue(Permission::checkMember($member, "CMS_ACCESS_CMSMain"));
|
|
$this->assertTrue(Permission::checkMember($member, "CMS_ACCESS_AssetAdmin"));
|
|
$this->assertTrue(Permission::checkMember($member, "CMS_ACCESS_SecurityAdmin"));
|
|
$this->assertTrue(Permission::checkMember($member, "EDIT_PERMISSIONS"));
|
|
$this->assertFalse(Permission::checkMember($member, "SITETREE_VIEW_ALL"));
|
|
}
|
|
|
|
function testRolesAndPermissionsFromParentGroupsAreInherited() {
|
|
$member = $this->objFromFixture('Member', 'globalauthor');
|
|
|
|
// Check that permissions applied to the group are there
|
|
$this->assertTrue(Permission::checkMember($member, "SITETREE_EDIT_ALL"));
|
|
|
|
// Check that roles from parent groups are there
|
|
$this->assertTrue(Permission::checkMember($member, "CMS_ACCESS_CMSMain"));
|
|
$this->assertTrue(Permission::checkMember($member, "CMS_ACCESS_AssetAdmin"));
|
|
|
|
// Check that permissions from parent groups are there
|
|
$this->assertTrue(Permission::checkMember($member, "SITETREE_VIEW_ALL"));
|
|
|
|
// Check that a random permission that shouldn't be there isn't
|
|
$this->assertFalse(Permission::checkMember($member, "CMS_ACCESS_SecurityAdmin"));
|
|
}
|
|
|
|
function testHiddenPermissions(){
|
|
$permissionCheckboxSet = new PermissionCheckboxSetField('Permissions','Permissions','Permission','GroupID');
|
|
$this->assertContains('CMS_ACCESS_CMSMain', $permissionCheckboxSet->Field());
|
|
$this->assertContains('CMS_ACCESS_AssetAdmin', $permissionCheckboxSet->Field());
|
|
|
|
Permission::add_to_hidden_permissions('CMS_ACCESS_CMSMain');
|
|
Permission::add_to_hidden_permissions('CMS_ACCESS_AssetAdmin');
|
|
$this->assertNotContains('CMS_ACCESS_CMSMain', $permissionCheckboxSet->Field());
|
|
$this->assertNotContains('CMS_ACCESS_AssetAdmin', $permissionCheckboxSet->Field());
|
|
|
|
Permission::remove_from_hidden_permissions('CMS_ACCESS_AssetAdmin');
|
|
$this->assertContains('CMS_ACCESS_AssetAdmin', $permissionCheckboxSet->Field());
|
|
}
|
|
} |