WorkspaceBypassTest.php

<?php

declare (strict_types=1);
namespace Drupal\Tests\workspaces\Functional;

use Drupal\Tests\BrowserTestBase;
use Drupal\Tests\node\Traits\ContentTypeCreationTrait;
// cspell:ignore ditka

/**
 * Tests access bypass permission controls on workspaces.
 *
 * @group workspaces
 */
class WorkspaceBypassTest extends BrowserTestBase {
  use WorkspaceTestUtilities;
  use ContentTypeCreationTrait;
  
  /**
   * {@inheritdoc}
   */
  protected static $modules = [
    'node',
    'user',
    'block',
    'workspaces',
    'workspaces_ui',
  ];
  
  /**
   * {@inheritdoc}
   */
  protected $defaultTheme = 'stark';
  
  /**
   * Verifies that a user can edit anything in a workspace they own.
   */
  public function testBypassOwnWorkspace() : void {
    $permissions = [
      'create workspace',
      'edit own workspace',
      'view own workspace',
      'bypass entity access own workspace',
    ];
    $this->createContentType([
      'type' => 'test',
      'label' => 'Test',
    ]);
    $this->setupWorkspaceSwitcherBlock();
    $coach = $this->drupalCreateUser(array_merge($permissions, [
      'create test content',
    ]));
    // Login as a limited-access user and create a workspace.
    $this->drupalLogin($coach);
    $bears = $this->createAndActivateWorkspaceThroughUi('Bears', 'bears');
    // Now create a node in the Bears workspace, as the owner of that workspace.
    $coach_bears_node = $this->createNodeThroughUi('Ditka Bears node', 'test');
    $coach_bears_node_id = $coach_bears_node->id();
    // Editing both nodes should be possible.
    $this->drupalGet('/node/' . $coach_bears_node_id . '/edit');
    $this->assertSession()
      ->statusCodeEquals(200);
    // Create a new user that should be able to edit anything in the Bears
    // workspace.
    $this->switchToLive();
    $lombardi = $this->drupalCreateUser(array_merge($permissions, [
      'view any workspace',
    ]));
    $this->drupalLogin($lombardi);
    $this->switchToWorkspace($bears);
    // Editor 2 has the bypass permission but does not own the workspace and so,
    // should not be able to create and edit any node.
    $this->drupalGet('/node/' . $coach_bears_node_id . '/edit');
    $this->assertSession()
      ->statusCodeEquals(403);
  }

}