BookStack Code Mirror - bookstack/blob - tests/Permissions/Scenarios/EntityUserPermissions.php

   1 <?php
   2
   3 namespace Tests\Permissions\Scenarios;
   4
   5 class EntityUserPermissions extends PermissionScenarioTestCase
   6 {
   7     public function test_01_explicit_allow()
   8     {
   9         $user = $this->users->newUser();
  10         $page = $this->entities->page();
  11         $this->permissions->disableEntityInheritedPermissions($page);
  12         $this->permissions->addEntityPermission($page, ['view'], null, $user);
  13
  14         $this->assertVisibleToUser($page, $user);
  15     }
  16
  17     public function test_02_explicit_deny()
  18     {
  19         $user = $this->users->newUser();
  20         $page = $this->entities->page();
  21         $this->permissions->disableEntityInheritedPermissions($page);
  22         $this->permissions->addEntityPermission($page, [], null, $user);
  23
  24         $this->assertNotVisibleToUser($page, $user);
  25     }
  26
  27     public function test_10_allow_inherit()
  28     {
  29         $user = $this->users->newUser();
  30         $page = $this->entities->pageWithinChapter();
  31         $chapter = $page->chapter;
  32         $this->permissions->disableEntityInheritedPermissions($chapter);
  33         $this->permissions->addEntityPermission($chapter, ['view'], null, $user);
  34
  35         $this->assertVisibleToUser($page, $user);
  36     }
  37
  38     public function test_11_deny_inherit()
  39     {
  40         $user = $this->users->newUser();
  41         $page = $this->entities->pageWithinChapter();
  42         $chapter = $page->chapter;
  43         $this->permissions->disableEntityInheritedPermissions($chapter);
  44         $this->permissions->addEntityPermission($chapter, [], null, $user);
  45
  46         $this->assertNotVisibleToUser($page, $user);
  47     }
  48
  49     public function test_12_allow_inherit_override()
  50     {
  51         $user = $this->users->newUser();
  52         $page = $this->entities->pageWithinChapter();
  53         $chapter = $page->chapter;
  54         $this->permissions->disableEntityInheritedPermissions($chapter);
  55         $this->permissions->addEntityPermission($chapter, [], null, $user);
  56         $this->permissions->addEntityPermission($page, ['view'], null, $user);
  57
  58         $this->assertVisibleToUser($page, $user);
  59     }
  60
  61     public function test_13_deny_inherit_override()
  62     {
  63         $user = $this->users->newUser();
  64         $page = $this->entities->pageWithinChapter();
  65         $chapter = $page->chapter;
  66         $this->permissions->disableEntityInheritedPermissions($chapter);
  67         $this->permissions->addEntityPermission($chapter, ['view'], null, $user);
  68         $this->permissions->addEntityPermission($page, ['deny'], null, $user);
  69
  70         $this->assertNotVisibleToUser($page, $user);
  71     }
  72
  73     public function test_40_entity_role_override_allow()
  74     {
  75         [$user, $role] = $this->users->newUserWithRole();
  76         $page = $this->entities->page();
  77         $this->permissions->disableEntityInheritedPermissions($page);
  78         $this->permissions->addEntityPermission($page, ['view'], null, $user);
  79         $this->permissions->addEntityPermission($page, [], $role);
  80
  81         $this->assertVisibleToUser($page, $user);
  82     }
  83
  84     public function test_41_entity_role_override_deny()
  85     {
  86         [$user, $role] = $this->users->newUserWithRole();
  87         $page = $this->entities->page();
  88         $this->permissions->disableEntityInheritedPermissions($page);
  89         $this->permissions->addEntityPermission($page, [], null, $user);
  90         $this->permissions->addEntityPermission($page, ['view'], $role);
  91
  92         $this->assertNotVisibleToUser($page, $user);
  93     }
  94
  95     public function test_42_entity_role_override_allow_via_inherit()
  96     {
  97         [$user, $role] = $this->users->newUserWithRole();
  98         $page = $this->entities->pageWithinChapter();
  99         $chapter = $page->chapter;
 100         $this->permissions->disableEntityInheritedPermissions($chapter);
 101         $this->permissions->addEntityPermission($chapter, ['view'], null, $user);
 102         $this->permissions->addEntityPermission($page, [], $role);
 103
 104         $this->assertVisibleToUser($page, $user);
 105     }
 106
 107     public function test_43_entity_role_override_deny_via_inherit()
 108     {
 109         [$user, $role] = $this->users->newUserWithRole();
 110         $page = $this->entities->pageWithinChapter();
 111         $chapter = $page->chapter;
 112         $this->permissions->disableEntityInheritedPermissions($chapter);
 113         $this->permissions->addEntityPermission($chapter, [], null, $user);
 114         $this->permissions->addEntityPermission($page, ['view'], $role);
 115
 116         $this->assertNotVisibleToUser($page, $user);
 117     }
 118 }