Sets up the necessary authorization.

Because of the $method parameter, it's possible to first set up authorization for only GET, then add POST, et cetera. This then also allows for verifying a 403 in case of missing authorization.

Parameters

string $method: The HTTP method for which to set up authorization.

Overrides ResourceTestBase::setUpAuthorization

4 calls to UserTest::setUpAuthorization()

UserTest::sendDeleteRequestForUser in core/modules/jsonapi/tests/src/Functional/UserTest.php

UserTest::testDeleteRespectsUserCancelDelete in core/modules/jsonapi/tests/src/Functional/UserTest.php

Tests if JSON:API respects user.settings.cancel_method: user_cancel_delete.

UserTest::testQueryInvolvingRoles in core/modules/jsonapi/tests/src/Functional/UserTest.php

Tests good error DX when trying to filter users by role.

UserTest::testResaveAccountName in core/modules/jsonapi/tests/src/Functional/UserTest.php

Tests users with altered display names.

File

core/modules/jsonapi/tests/src/Functional/UserTest.php, line 82

Class

UserTest

JSON:API integration test for the "User" content entity type.

Namespace

Drupal\Tests\jsonapi\Functional

Code

protected function setUpAuthorization($method) {
  // @todo Remove this in
  $this->grantPermissionsToTestedRole([
    'access content',
  ]);
  switch ($method) {
    case 'GET':
      $this->grantPermissionsToTestedRole([
        'access user profiles',
      ]);
      break;

    case 'POST':
    case 'PATCH':
    case 'DELETE':
      $this->grantPermissionsToTestedRole([
        'administer users',
      ]);
      break;

  }
}

---