Sets up the necessary authorization.

Because of the $method parameter, it's possible to first set up authorization for only GET, then add POST, et cetera. This then also allows for verifying a 403 in case of missing authorization.

Parameters

string $method: The HTTP method for which to set up authorization.

Overrides ResourceTestBase::setUpAuthorization

2 calls to CommentTest::setUpAuthorization()

CommentExtrasTest::testPostIndividualDxWithoutCriticalBaseFields in core/modules/jsonapi/tests/src/Functional/CommentExtrasTest.php

Tests POSTing a comment without critical base fields.

CommentExtrasTest::testPostIndividualSkipCommentApproval in core/modules/jsonapi/tests/src/Functional/CommentExtrasTest.php

Tests POSTing a comment with and without 'skip comment approval'.

File

core/modules/jsonapi/tests/src/Functional/CommentTest.php, line 85

Class

CommentTest

JSON:API integration test for the "Comment" content entity type.

Namespace

Drupal\Tests\jsonapi\Functional

Code

protected function setUpAuthorization($method) {
  switch ($method) {
    case 'GET':
      $this->grantPermissionsToTestedRole([
        'access comments',
        'view test entity',
      ]);
      break;

    case 'POST':
      $this->grantPermissionsToTestedRole([
        'post comments',
      ]);
      break;

    case 'PATCH':
      $this->grantPermissionsToTestedRole([
        'edit own comments',
      ]);
      break;

    case 'DELETE':
      $this->grantPermissionsToTestedRole([
        'administer comments',
      ]);
      break;

  }
}

---