function ShortcutTest::testCollectionFilterAccess

File

core/modules/jsonapi/tests/src/Functional/ShortcutTest.php, line 162

Class

ShortcutTest

JSON:API integration test for the "Shortcut" content entity type.

Namespace

Code

public function testCollectionFilterAccess() : void {
    $label_field_name = 'title';
    // Verify the expected behavior in the common case: default shortcut set.
    $this->grantPermissionsToTestedRole([
        'customize shortcut links',
    ]);
    $this->doTestCollectionFilterAccessBasedOnPermissions($label_field_name, 'access shortcuts');
    $alternate_shortcut_set = ShortcutSet::create([
        'id' => 'alternate',
        'label' => 'Alternate',
    ]);
    $alternate_shortcut_set->save();
    $this->entity->shortcut_set = $alternate_shortcut_set->id();
    $this->entity
        ->save();
    $collection_url = Url::fromRoute('jsonapi.entity_test--bar.collection');
    $collection_filter_url = $collection_url->setOption('query', [
        "filter[spotlight.{$label_field_name}]" => $this->entity
            ->label(),
    ]);
    $request_options = [];
    $request_options[RequestOptions::HEADERS]['Accept'] = 'application/vnd.api+json';
    $request_options = NestedArray::mergeDeep($request_options, $this->getAuthenticationRequestOptions());
    // No results because the current user does not have access to shortcuts
    // not in the user's assigned set or the default set.
    $response = $this->request('GET', $collection_filter_url, $request_options);
    $doc = $this->getDocumentFromResponse($response);
    $this->assertCount(0, $doc['data']);
    // Assign the alternate shortcut set to the current user.
    $this->container
        ->get('entity_type.manager')
        ->getStorage('shortcut_set')
        ->assignUser($alternate_shortcut_set, $this->account);
    // 1 result because the alternate shortcut set is now assigned to the
    // current user.
    $response = $this->request('GET', $collection_filter_url, $request_options);
    $doc = $this->getDocumentFromResponse($response);
    $this->assertCount(1, $doc['data']);
}