fa/breadcrumb-the-shire
1
0
Fork 1
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

weitere updates für instanzierbarkeit und sauberes testing

Browse Source
This commit is contained in:
Felix Schneider
2026-02-24 08:49:40 +01:00
parent 7b53faca37
commit 16759a2732
119 changed files with 6371 additions and 745 deletions
Download Patch File Download Diff File Expand all files Collapse all files

118
tests/Service/Access/SettingsAuthorizationPolicyTest.php Normal file
View File

@@ -0,0 +1,118 @@
<?php
namespace MintyPHP\Tests\Service\Access;
use MintyPHP\Service\Access\PermissionGateway;
use MintyPHP\Service\Access\PermissionService;
use MintyPHP\Service\Access\SettingsAuthorizationPolicy;
use PHPUnit\Framework\TestCase;
class SettingsAuthorizationPolicyTest extends TestCase
{
public function testViewRequiresSettingsViewPermission(): void
{
$permissionGateway = $this->createMock(PermissionGateway::class);
$permissionGateway->expects($this->once())
->method('userHas')
->with(4, PermissionService::SETTINGS_VIEW)
->willReturn(false);
$policy = new SettingsAuthorizationPolicy($permissionGateway);
$decision = $policy->authorize(SettingsAuthorizationPolicy::ABILITY_ADMIN_SETTINGS_VIEW, [
'actor_user_id' => 4,
]);
$this->assertFalse($decision->isAllowed());
$this->assertSame(403, $decision->status());
$this->assertSame('forbidden', $decision->error());
}
public function testViewReturnsUpdateCapability(): void
{
$permissionGateway = $this->createMock(PermissionGateway::class);
$permissionGateway->method('userHas')
->willReturnCallback(static function (int $userId, string $permission): bool {
if ($userId !== 4) {
return false;
}
return in_array($permission, [PermissionService::SETTINGS_VIEW, PermissionService::SETTINGS_UPDATE], true);
});
$policy = new SettingsAuthorizationPolicy($permissionGateway);
$decision = $policy->authorize(SettingsAuthorizationPolicy::ABILITY_ADMIN_SETTINGS_VIEW, [
'actor_user_id' => 4,
]);
$this->assertTrue($decision->isAllowed());
$this->assertTrue((bool) ($decision->attribute('capabilities', [])['can_update_settings'] ?? false));
}
public function testUpdateRequiresSettingsUpdatePermission(): void
{
$permissionGateway = $this->createMock(PermissionGateway::class);
$permissionGateway->expects($this->once())
->method('userHas')
->with(8, PermissionService::SETTINGS_UPDATE)
->willReturn(false);
$policy = new SettingsAuthorizationPolicy($permissionGateway);
$decision = $policy->authorize(SettingsAuthorizationPolicy::ABILITY_ADMIN_SETTINGS_UPDATE, [
'actor_user_id' => 8,
]);
$this->assertFalse($decision->isAllowed());
$this->assertSame(403, $decision->status());
}
public function testBrandingUpdateRequiresSettingsUpdatePermission(): void
{
$permissionGateway = $this->createMock(PermissionGateway::class);
$permissionGateway->expects($this->once())
->method('userHas')
->with(8, PermissionService::SETTINGS_UPDATE)
->willReturn(false);
$policy = new SettingsAuthorizationPolicy($permissionGateway);
$decision = $policy->authorize(SettingsAuthorizationPolicy::ABILITY_ADMIN_SETTINGS_BRANDING_UPDATE, [
'actor_user_id' => 8,
]);
$this->assertFalse($decision->isAllowed());
$this->assertSame(403, $decision->status());
}
public function testTokenRevokeRequiresSettingsUpdatePermission(): void
{
$permissionGateway = $this->createMock(PermissionGateway::class);
$permissionGateway->expects($this->once())
->method('userHas')
->with(8, PermissionService::SETTINGS_UPDATE)
->willReturn(false);
$policy = new SettingsAuthorizationPolicy($permissionGateway);
$decision = $policy->authorize(SettingsAuthorizationPolicy::ABILITY_ADMIN_SETTINGS_TOKENS_REVOKE, [
'actor_user_id' => 8,
]);
$this->assertFalse($decision->isAllowed());
$this->assertSame(403, $decision->status());
}
public function testUserLifecycleRunRequiresSettingsUpdatePermission(): void
{
$permissionGateway = $this->createMock(PermissionGateway::class);
$permissionGateway->expects($this->once())
->method('userHas')
->with(8, PermissionService::SETTINGS_UPDATE)
->willReturn(false);
$policy = new SettingsAuthorizationPolicy($permissionGateway);
$decision = $policy->authorize(SettingsAuthorizationPolicy::ABILITY_ADMIN_SETTINGS_USER_LIFECYCLE_RUN, [
'actor_user_id' => 8,
]);
$this->assertFalse($decision->isAllowed());
$this->assertSame(403, $decision->status());
}
}