WorkspaceBypassTest.php

<?php

declare (strict_types=1);
namespace Drupal\Tests\workspaces\Functional;

use Drupal\Tests\BrowserTestBase;
use Drupal\Tests\node\Traits\ContentTypeCreationTrait;
// cspell:ignore ditka

/**
 * Tests access bypass permission controls on workspaces.
 *
 * @group workspaces
 */
class WorkspaceBypassTest extends BrowserTestBase {
    use WorkspaceTestUtilities;
    use ContentTypeCreationTrait;
    
    /**
     * {@inheritdoc}
     */
    protected static $modules = [
        'node',
        'user',
        'block',
        'workspaces',
        'workspaces_ui',
    ];
    
    /**
     * {@inheritdoc}
     */
    protected $defaultTheme = 'stark';
    
    /**
     * Verifies that a user can edit anything in a workspace they own.
     */
    public function testBypassOwnWorkspace() : void {
        $permissions = [
            'create workspace',
            'edit own workspace',
            'view own workspace',
            'bypass entity access own workspace',
        ];
        $this->createContentType([
            'type' => 'test',
            'label' => 'Test',
        ]);
        $this->setupWorkspaceSwitcherBlock();
        $coach = $this->drupalCreateUser(array_merge($permissions, [
            'create test content',
        ]));
        // Login as a limited-access user and create a workspace.
        $this->drupalLogin($coach);
        $bears = $this->createAndActivateWorkspaceThroughUi('Bears', 'bears');
        // Now create a node in the Bears workspace, as the owner of that workspace.
        $coach_bears_node = $this->createNodeThroughUi('Ditka Bears node', 'test');
        $coach_bears_node_id = $coach_bears_node->id();
        // Editing both nodes should be possible.
        $this->drupalGet('/node/' . $coach_bears_node_id . '/edit');
        $this->assertSession()
            ->statusCodeEquals(200);
        // Create a new user that should be able to edit anything in the Bears
        // workspace.
        $this->switchToLive();
        $lombardi = $this->drupalCreateUser(array_merge($permissions, [
            'view any workspace',
        ]));
        $this->drupalLogin($lombardi);
        $this->switchToWorkspace($bears);
        // Editor 2 has the bypass permission but does not own the workspace and so,
        // should not be able to create and edit any node.
        $this->drupalGet('/node/' . $coach_bears_node_id . '/edit');
        $this->assertSession()
            ->statusCodeEquals(403);
    }

}