UserUpdateRoleMigrateTest.php

<?php

declare (strict_types=1);
namespace Drupal\Tests\user\Functional\Update;

use Drupal\FunctionalTests\Update\UpdatePathTestBase;
use Drupal\user\Entity\Role;

/**
 * Tests user_update_10000() upgrade path.
 *
 * @group Update
 * @group legacy
 */
class UserUpdateRoleMigrateTest extends UpdatePathTestBase {
  
  /**
   * {@inheritdoc}
   */
  protected function setDatabaseDumpFiles() {
    $this->databaseDumpFiles = [
      __DIR__ . '/../../../../../system/tests/fixtures/update/drupal-9.4.0.bare.standard.php.gz',
    ];
  }
  
  /**
   * Tests that roles have only existing permissions.
   */
  public function testRolePermissions() : void {
    /** @var \Drupal\Core\Database\Connection $connection */
    $connection = \Drupal::service('database');
    // Edit the authenticated role to have a non-existent permission.
    $authenticated = $connection->select('config')
      ->fields('config', [
      'data',
    ])
      ->condition('collection', '')
      ->condition('name', 'user.role.authenticated')
      ->execute()
      ->fetchField();
    $authenticated = unserialize($authenticated);
    $authenticated['permissions'][] = 'does_not_exist';
    $connection->update('config')
      ->fields([
      'data' => serialize($authenticated),
    ])
      ->condition('collection', '')
      ->condition('name', 'user.role.authenticated')
      ->execute();
    $authenticated = Role::load('authenticated');
    $this->assertTrue($authenticated->hasPermission('does_not_exist'), 'Authenticated role has a permission that does not exist');
    $this->runUpdates();
    $this->assertSession()
      ->pageTextContains('The role Authenticated user has had non-existent permissions removed. Check the logs for details.');
    $authenticated = Role::load('authenticated');
    $this->assertFalse($authenticated->hasPermission('does_not_exist'), 'Authenticated role does not have a permission that does not exist');
    $this->drupalLogin($this->createUser([
      'access site reports',
    ]));
    $this->drupalGet('admin/reports/dblog', [
      'query' => [
        'type[]' => 'update',
      ],
    ]);
    $this->clickLink('The role Authenticated user has had the following non-…');
    $this->assertSession()
      ->pageTextContains('The role Authenticated user has had the following non-existent permission(s) removed: does_not_exist.');
  }

}