function TaxonomyPrivateFileTestCase::testTaxonomyImageAccess

Tests access to a private file on a taxonomy term entity.

File

modules/taxonomy/taxonomy.test, line 2306

Class

TaxonomyPrivateFileTestCase

Tests appropriate access control to private file fields on a term.

Code

public function testTaxonomyImageAccess() {
    $user = $this->drupalCreateUser(array(
        'administer site configuration',
        'administer taxonomy',
        'access user profiles',
    ));
    $this->drupalLogin($user);
    // Create a term and upload the image.
    $term = $this->createTerm($this->vocabulary);
    $files = $this->drupalGetTestFiles('image');
    $image = array_pop($files);
    $edit['files[field_test_' . LANGUAGE_NONE . '_0]'] = drupal_realpath($image->uri);
    $this->drupalPost('taxonomy/term/' . $term->tid . '/edit', $edit, t('Save'));
    $term = taxonomy_term_load($term->tid);
    $this->assertText(t('Updated term @name.', array(
        '@name' => $term->name,
    )));
    // Create a user that should have access to the file and one that doesn't.
    $access_user = $this->drupalCreateUser(array(
        'access content',
    ));
    $no_access_user = $this->drupalCreateUser();
    $image = file_load($term->field_test[LANGUAGE_NONE][0]['fid']);
    $image_url = file_create_url($image->uri);
    $this->drupalLogin($access_user);
    $this->drupalGet($image_url);
    $this->assertResponse(200, 'Private image on term is accessible with right permission');
    $this->drupalLogin($no_access_user);
    $this->drupalGet($image_url);
    $this->assertResponse(403, 'Private image on term not accessible without right permission');
}