NodeAccessFieldTest.php

<?php

namespace Drupal\Tests\node\Functional;

use Drupal\field\Entity\FieldConfig;
use Drupal\field\Entity\FieldStorageConfig;

/**
 * Tests the interaction of the node access system with fields.
 *
 * @group node
 */
class NodeAccessFieldTest extends NodeTestBase {
    
    /**
     * Modules to enable.
     *
     * @var array
     */
    protected static $modules = [
        'node_access_test',
        'field_ui',
    ];
    
    /**
     * {@inheritdoc}
     */
    protected $defaultTheme = 'stark';
    
    /**
     * A user with permission to bypass access content.
     *
     * @var \Drupal\user\UserInterface
     */
    protected $adminUser;
    
    /**
     * A user with permission to manage content types and fields.
     *
     * @var \Drupal\user\UserInterface
     */
    protected $contentAdminUser;
    
    /**
     * The name of the created field.
     *
     * @var string
     */
    protected $fieldName;
    
    /**
     * {@inheritdoc}
     */
    protected function setUp() : void {
        parent::setUp();
        node_access_rebuild();
        // Create some users.
        $this->adminUser = $this->drupalCreateUser([
            'access content',
            'bypass node access',
        ]);
        $this->contentAdminUser = $this->drupalCreateUser([
            'access content',
            'administer content types',
            'administer node fields',
        ]);
        // Add a custom field to the page content type.
        $this->fieldName = mb_strtolower($this->randomMachineName() . '_field_name');
        FieldStorageConfig::create([
            'field_name' => $this->fieldName,
            'entity_type' => 'node',
            'type' => 'text',
        ])
            ->save();
        FieldConfig::create([
            'field_name' => $this->fieldName,
            'entity_type' => 'node',
            'bundle' => 'page',
        ])
            ->save();
        
        /** @var \Drupal\Core\Entity\EntityDisplayRepositoryInterface $display_repository */
        $display_repository = \Drupal::service('entity_display.repository');
        $display_repository->getViewDisplay('node', 'page')
            ->setComponent($this->fieldName)
            ->save();
        $display_repository->getFormDisplay('node', 'page')
            ->setComponent($this->fieldName)
            ->save();
    }
    
    /**
     * Tests administering fields when node access is restricted.
     */
    public function testNodeAccessAdministerField() {
        // Create a page node.
        $fieldData = [];
        $value = $fieldData[0]['value'] = $this->randomMachineName();
        $node = $this->drupalCreateNode([
            $this->fieldName => $fieldData,
        ]);
        // Log in as the administrator and confirm that the field value is present.
        $this->drupalLogin($this->adminUser);
        $this->drupalGet('node/' . $node->id());
        $this->assertSession()
            ->pageTextContains($value);
        // Log in as the content admin and try to view the node.
        $this->drupalLogin($this->contentAdminUser);
        $this->drupalGet('node/' . $node->id());
        $this->assertSession()
            ->pageTextContains('Access denied');
        // Modify the field default as the content admin.
        $edit = [];
        $default = 'Sometimes words have two meanings';
        $edit["default_value_input[{$this->fieldName}][0][value]"] = $default;
        $this->drupalGet("admin/structure/types/manage/page/fields/node.page.{$this->fieldName}");
        $this->submitForm($edit, 'Save settings');
        // Log in as the administrator.
        $this->drupalLogin($this->adminUser);
        // Confirm that the existing node still has the correct field value.
        $this->drupalGet('node/' . $node->id());
        $this->assertSession()
            ->pageTextContains($value);
        // Confirm that the new default value appears when creating a new node.
        $this->drupalGet('node/add/page');
        $this->assertSession()
            ->responseContains($default);
    }

}