function RulesAdminAccessTest::testRespectsAdminPermissions

Test administrative access to plugin configuration UI.

File

tests/src/Unit/Integration/RulesAction/RulesAdminAccessTest.php, line 20

Class

RulesAdminAccessTest

Tests access control for the configuration interface of Rules plugins.

Namespace

Code

public function testRespectsAdminPermissions() {
    // 3 user classes to test.
    $super_admin = $this->prophesize(AccountInterface::class);
    $super_admin->hasPermission(Argument::any())
        ->willReturn(TRUE);
    $power_user = $this->prophesize(AccountInterface::class);
    $power_user->hasPermission('admin this plugin')
        ->willReturn(TRUE);
    $power_user->hasPermission(Argument::any())
        ->willReturn(FALSE);
    $joe_user = $this->prophesize(AccountInterface::class);
    $joe_user->hasPermission(Argument::any())
        ->willReturn(FALSE);
    // Our plug-in will behave as if it has the annotation property
    // 'configuration_access'. getPluginDefinition should be called only
    // twice, since the super admin should get approval before it is called.
    // I use getMockBuilder since I need the actual code from the
    // RulesActionBase class for the test.
    $action = $this->getMockBuilder(RulesActionBase::class)
        ->disableOriginalConstructor()
        ->onlyMethods([
        'getPluginDefinition',
    ])
        ->getMockForAbstractClass();
    $action->expects($this->exactly(2))
        ->method('getPluginDefinition')
        ->willReturn([
        'plugin_id' => 'some_action',
        'configure_permissions' => [
            'admin this plugin',
        ],
    ]);
    $user = $super_admin->reveal();
    $this->assertTrue($action->checkConfigurationAccess($user), "Super-user has admin access");
    $user = $power_user->reveal();
    $this->assertTrue($action->checkConfigurationAccess($user), "Power-user has admin access");
    $user = $joe_user->reveal();
    $this->assertFalse($action->checkConfigurationAccess($user), "Ordinary user lacks admin access");
}