Same name and namespace in other branches

1. 9 core/modules/jsonapi/tests/src/Functional/FileTest.php \Drupal\Tests\jsonapi\Functional\FileTest::setUpAuthorization()
2. 8.9.x core/modules/jsonapi/tests/src/Functional/FileTest.php \Drupal\Tests\jsonapi\Functional\FileTest::setUpAuthorization()
3. 11.x core/modules/jsonapi/tests/src/Functional/FileTest.php \Drupal\Tests\jsonapi\Functional\FileTest::setUpAuthorization()

Sets up the necessary authorization.

Because of the $method parameter, it's possible to first set up authorization for only GET, then add POST, et cetera. This then also allows for verifying a 403 in case of missing authorization.

Parameters

string $method: The HTTP method for which to set up authorization.

Overrides ResourceTestBase::setUpAuthorization

File

core/modules/jsonapi/tests/src/Functional/FileTest.php, line 73

Class

FileTest

JSON:API integration test for the "File" content entity type.

Namespace

Drupal\Tests\jsonapi\Functional

Code

protected function setUpAuthorization($method) {
  switch ($method) {
    case 'GET':
      $this->grantPermissionsToTestedRole([
        'access content',
      ]);
      break;

    case 'PATCH':
      // \Drupal\file\FileAccessControlHandler::checkAccess() grants 'update'
      // access only to the user that owns the file. So there is no permission
      // to grant: instead, the file owner must be changed from its default
      // (user 1) to the current user.
      $this->makeCurrentUserFileOwner();
      return;
    case 'DELETE':
      $this->grantPermissionsToTestedRole([
        'delete any file',
      ]);
      break;

  }
}

---