function UserCancelTest::testUserCancelWithoutPermission

Attempt to cancel account without permission.

File

core/modules/user/tests/src/Functional/UserCancelTest.php, line 49

Class

UserCancelTest

Ensure that account cancellation methods work as expected.

Namespace

Code

public function testUserCancelWithoutPermission() : void {
    $node_storage = $this->container
        ->get('entity_type.manager')
        ->getStorage('node');
    $this->config('user.settings')
        ->set('cancel_method', 'user_cancel_reassign')
        ->save();
    $user_storage = $this->container
        ->get('entity_type.manager')
        ->getStorage('user');
    // Create a user.
    $account = $this->drupalCreateUser([]);
    $this->drupalLogin($account);
    // Load a real user object.
    $user_storage->resetCache([
        $account->id(),
    ]);
    $account = $user_storage->load($account->id());
    // Create a node.
    $node = $this->drupalCreateNode([
        'uid' => $account->id(),
    ]);
    // Attempt to cancel account.
    $this->drupalGet('user/' . $account->id() . '/edit');
    $this->assertSession()
        ->pageTextNotContains("Cancel account");
    // Attempt bogus account cancellation request confirmation.
    $timestamp = $account->getLastLoginTime();
    $this->drupalGet("user/" . $account->id() . "/cancel/confirm/{$timestamp}/" . user_pass_rehash($account, $timestamp));
    $this->assertSession()
        ->statusCodeEquals(403);
    $user_storage->resetCache([
        $account->id(),
    ]);
    $account = $user_storage->load($account->id());
    $this->assertTrue($account->isActive(), 'User account was not canceled.');
    // Confirm user's content has not been altered.
    $node_storage->resetCache([
        $node->id(),
    ]);
    $test_node = $node_storage->load($node->id());
    $this->assertEquals($account->id(), $test_node->getOwnerId(), 'Node of the user has not been altered.');
    $this->assertTrue($test_node->isPublished());
}