function ShortcutLinksTest::verifyAccessShortcutsPermissionForEditPages

Tests that the 'access shortcuts' permission is required for shortcut set administration page access.

File

core/modules/shortcut/tests/src/Functional/ShortcutLinksTest.php, line 405

Class

ShortcutLinksTest

Create, view, edit, delete, and change shortcut links.

Namespace

Code

private function verifyAccessShortcutsPermissionForEditPages() {
    // Create a user with customize links and switch sets permissions  but
    // without the 'access shortcuts' permission.
    $test_permissions = [
        'customize shortcut links',
        'switch shortcut sets',
    ];
    $noaccess_user = $this->drupalCreateUser($test_permissions);
    $this->drupalLogin($noaccess_user);
    // Verify that set administration pages are inaccessible without the
    // 'access shortcuts' permission.
    $this->drupalGet('admin/config/user-interface/shortcut/manage/default/customize');
    $this->assertSession()
        ->statusCodeEquals(403);
    $this->drupalGet('admin/config/user-interface/shortcut/manage/default');
    $this->assertSession()
        ->statusCodeEquals(403);
    $this->drupalGet('user/' . $noaccess_user->id() . '/shortcuts');
    $this->assertSession()
        ->statusCodeEquals(403);
}