WorkspaceViewTest.php

<?php

declare (strict_types=1);
namespace Drupal\Tests\workspaces\Functional;

use Drupal\Tests\BrowserTestBase;
use Drupal\workspaces\Entity\Workspace;

/**
 * Tests permission controls on workspaces.
 *
 * @group workspaces
 */
class WorkspaceViewTest extends BrowserTestBase {
    use WorkspaceTestUtilities;
    
    /**
     * {@inheritdoc}
     */
    protected static $modules = [
        'workspaces',
    ];
    
    /**
     * {@inheritdoc}
     */
    protected $defaultTheme = 'stark';
    
    /**
     * Verifies that a user can view their own workspace.
     */
    public function testViewOwnWorkspace() : void {
        $permissions = [
            'access administration pages',
            'administer site configuration',
            'create workspace',
            'edit own workspace',
            'view own workspace',
        ];
        $editor1 = $this->drupalCreateUser($permissions);
        // Login as a limited-access user and create a workspace.
        $this->drupalLogin($editor1);
        $this->createWorkspaceThroughUi('Bears', 'bears');
        $bears = Workspace::load('bears');
        // Now login as a different user and create a workspace.
        $editor2 = $this->drupalCreateUser($permissions);
        $this->drupalLogin($editor2);
        $this->createWorkspaceThroughUi('Packers', 'packers');
        $packers = Workspace::load('packers');
        // Load the activate form for the Bears workspace. It should fail because
        // the workspace belongs to someone else.
        $this->drupalGet("admin/config/workflow/workspaces/manage/{$bears->id()}/activate");
        $this->assertSession()
            ->statusCodeEquals(403);
        // But editor 2 should be able to activate the Packers workspace.
        $this->drupalGet("admin/config/workflow/workspaces/manage/{$packers->id()}/activate");
        $this->assertSession()
            ->statusCodeEquals(200);
    }
    
    /**
     * Verifies that a user can view any workspace.
     */
    public function testViewAnyWorkspace() : void {
        $permissions = [
            'access administration pages',
            'administer site configuration',
            'create workspace',
            'edit own workspace',
            'view any workspace',
        ];
        $editor1 = $this->drupalCreateUser($permissions);
        // Login as a limited-access user and create a workspace.
        $this->drupalLogin($editor1);
        $this->createWorkspaceThroughUi('Bears', 'bears');
        $bears = Workspace::load('bears');
        // Now login as a different user and create a workspace.
        $editor2 = $this->drupalCreateUser($permissions);
        $this->drupalLogin($editor2);
        $this->createWorkspaceThroughUi('Packers', 'packers');
        $packers = Workspace::load('packers');
        // Load the activate form for the Bears workspace. This user should be
        // able to see both workspaces because of the "view any" permission.
        $this->drupalGet("admin/config/workflow/workspaces/manage/{$bears->id()}/activate");
        $this->assertSession()
            ->statusCodeEquals(200);
        // But editor 2 should be able to activate the Packers workspace.
        $this->drupalGet("admin/config/workflow/workspaces/manage/{$packers->id()}/activate");
        $this->assertSession()
            ->statusCodeEquals(200);
    }

}