mirror of
https://github.com/silverstripe/silverstripe-framework
synced 2024-07-05 19:09:27 +02:00
74a04df3c8
ENHANCEMENT Allow ungrouped retrieval of Permission::get_codes() through new $grouped switch (from r97819) git-svn-id: svn://svn.silverstripe.com/silverstripe/open/modules/sapphire/trunk@102536 467b73ca-7a2a-4603-9d3b-597d59a354a9
53 lines
2.2 KiB
PHP
53 lines
2.2 KiB
PHP
<?php
|
|
|
|
class PermissionTest extends SapphireTest {
|
|
static $fixture_file = 'sapphire/tests/security/PermissionTest.yml';
|
|
|
|
function testGetCodesGrouped() {
|
|
$codes = Permission::get_codes();
|
|
$this->assertArrayNotHasKey('SITETREE_VIEW_ALL', $codes);
|
|
}
|
|
|
|
function testGetCodesUngrouped() {
|
|
$codes = Permission::get_codes(null, false);
|
|
$this->assertArrayHasKey('SITETREE_VIEW_ALL', $codes);
|
|
}
|
|
|
|
function testDirectlyAppliedPermissions() {
|
|
$member = $this->objFromFixture('Member', 'author');
|
|
$this->assertTrue(Permission::checkMember($member, "SITETREE_VIEW_ALL"));
|
|
}
|
|
|
|
function testPermissionAreInheritedFromOneRole() {
|
|
$member = $this->objFromFixture('Member', 'author');
|
|
$this->assertTrue(Permission::checkMember($member, "CMS_ACCESS_CMSMain"));
|
|
$this->assertTrue(Permission::checkMember($member, "CMS_ACCESS_AssetAdmin"));
|
|
$this->assertFalse(Permission::checkMember($member, "CMS_ACCESS_SecurityAdmin"));
|
|
}
|
|
|
|
function testPermissionAreInheritedFromMultipleRoles() {
|
|
$member = $this->objFromFixture('Member', 'access');
|
|
$this->assertTrue(Permission::checkMember($member, "CMS_ACCESS_CMSMain"));
|
|
$this->assertTrue(Permission::checkMember($member, "CMS_ACCESS_AssetAdmin"));
|
|
$this->assertTrue(Permission::checkMember($member, "CMS_ACCESS_SecurityAdmin"));
|
|
$this->assertTrue(Permission::checkMember($member, "EDIT_PERMISSIONS"));
|
|
$this->assertFalse(Permission::checkMember($member, "SITETREE_VIEW_ALL"));
|
|
}
|
|
|
|
function testRolesAndPermissionsFromParentGroupsAreInherited() {
|
|
$member = $this->objFromFixture('Member', 'globalauthor');
|
|
|
|
// Check that permissions applied to the group are there
|
|
$this->assertTrue(Permission::checkMember($member, "SITETREE_EDIT_ALL"));
|
|
|
|
// Check that roles from parent groups are there
|
|
$this->assertTrue(Permission::checkMember($member, "CMS_ACCESS_CMSMain"));
|
|
$this->assertTrue(Permission::checkMember($member, "CMS_ACCESS_AssetAdmin"));
|
|
|
|
// Check that permissions from parent groups are there
|
|
$this->assertTrue(Permission::checkMember($member, "SITETREE_VIEW_ALL"));
|
|
|
|
// Check that a random permission that shouldn't be there isn't
|
|
$this->assertFalse(Permission::checkMember($member, "CMS_ACCESS_SecurityAdmin"));
|
|
}
|
|
} |