function FieldNoteItemTest::testFieldNoteAccess

Test multiple access scenarios for the fieldnote field.

File

modules/field_permission_example/tests/src/Kernel/FieldNoteItemTest.php, line 178

Class

FieldNoteItemTest

Tests our sticky-note field type.

Namespace

Code

public function testFieldNoteAccess() {
    // Let's set up some scenarios.
    $scenarios = [
        'admin_type' => [
            'perms' => [
                'administer the fieldnote field',
            ],
            'can_view_any' => TRUE,
            'can_edit_any' => TRUE,
            'can_view_own' => TRUE,
            'can_edit_own' => TRUE,
        ],
        'low_access' => [
            'perms' => [
                'view test entity',
            ],
            'can_view_any' => FALSE,
            'can_edit_any' => FALSE,
            'can_view_own' => FALSE,
            'can_edit_own' => FALSE,
        ],
        'view_any' => [
            'perms' => [
                'view test entity',
                'view any fieldnote',
            ],
            'can_view_any' => TRUE,
            'can_edit_any' => FALSE,
            'can_view_own' => FALSE,
            'can_edit_own' => FALSE,
        ],
        'edit_any' => [
            'perms' => [
                'view test entity',
                'view any fieldnote',
                'edit any fieldnote',
            ],
            'can_view_any' => TRUE,
            'can_edit_any' => TRUE,
            'can_view_own' => FALSE,
            'can_edit_own' => FALSE,
        ],
        'view_own' => [
            'perms' => [
                'view test entity',
                'view own fieldnote',
            ],
            'can_view_any' => FALSE,
            'can_edit_any' => FALSE,
            'can_view_own' => TRUE,
            'can_edit_own' => FALSE,
        ],
        'edit_own' => [
            'perms' => [
                'view test entity',
                'view own fieldnote',
                'edit own fieldnote',
            ],
            'can_view_any' => FALSE,
            'can_edit_any' => FALSE,
            'can_view_own' => TRUE,
            'can_edit_own' => TRUE,
        ],
    ];
    $value = 'This is an epic entity';
    // We also need to test users as an entity to attach to.  They work
    // a little differently than most content entity types:
    $arbitrary_user = $this->createUser([], 'Some User');
    $arbitrary_user->user_fieldnote = $value;
    $arbitrary_user->save();
    $storage = $this->container
        ->get('entity_type.manager')
        ->getStorage('entity_test');
    foreach ($scenarios as $name => $scenario) {
        $test_user = $this->createUser($scenario['perms'], $name);
        $entity = $storage->create([
            'entity_test',
        ]);
        $entity->field_fieldnote = $value;
        $entity->name->value = $this->randomMachineName();
        $entity->save();
        foreach ([
            'can_view_any',
            'can_edit_any',
        ] as $op) {
            $this->doAccessAssertion($entity, 'field_fieldnote', $test_user, $name, $op, $scenario[$op]);
            $this->doAccessAssertion($arbitrary_user, 'user_fieldnote', $test_user, $name, $op, $scenario[$op]);
        }
        if ($scenario['can_view_own'] or $scenario['can_edit_own']) {
            $entity->user_id = $test_user;
            $entity->save();
            $test_user->user_fieldnote = $value;
            $test_user->save();
            foreach ([
                'can_view_own',
                'can_edit_own',
            ] as $op) {
                $this->doAccessAssertion($entity, 'field_fieldnote', $test_user, $name, $op, $scenario[$op]);
                $this->doAccessAssertion($test_user, 'user_fieldnote', $test_user, $name, $op, $scenario[$op]);
            }
        }
    }
}