major update
This commit is contained in:
@@ -9,6 +9,8 @@ use PHPUnit\Framework\TestCase;
|
||||
|
||||
class SettingsAuthorizationPolicyTest extends TestCase
|
||||
{
|
||||
use AuthorizationPolicyTestSupport;
|
||||
|
||||
public function testViewRequiresSettingsViewPermission(): void
|
||||
{
|
||||
$permissionGateway = $this->createMock(PermissionGateway::class);
|
||||
@@ -22,22 +24,14 @@ class SettingsAuthorizationPolicyTest extends TestCase
|
||||
'actor_user_id' => 4,
|
||||
]);
|
||||
|
||||
$this->assertFalse($decision->isAllowed());
|
||||
$this->assertSame(403, $decision->status());
|
||||
$this->assertSame('forbidden', $decision->error());
|
||||
$this->assertForbiddenDecision($decision);
|
||||
}
|
||||
|
||||
public function testViewReturnsUpdateCapability(): void
|
||||
{
|
||||
$permissionGateway = $this->createMock(PermissionGateway::class);
|
||||
$permissionGateway->method('userHas')
|
||||
->willReturnCallback(static function (int $userId, string $permission): bool {
|
||||
if ($userId !== 4) {
|
||||
return false;
|
||||
}
|
||||
|
||||
return in_array($permission, [PermissionService::SETTINGS_VIEW, PermissionService::SETTINGS_UPDATE], true);
|
||||
});
|
||||
$permissionGateway = $this->permissionGatewayAllowing([
|
||||
4 => [PermissionService::SETTINGS_VIEW, PermissionService::SETTINGS_UPDATE],
|
||||
]);
|
||||
|
||||
$policy = new SettingsAuthorizationPolicy($permissionGateway);
|
||||
$decision = $policy->authorize(SettingsAuthorizationPolicy::ABILITY_ADMIN_SETTINGS_VIEW, [
|
||||
@@ -61,8 +55,7 @@ class SettingsAuthorizationPolicyTest extends TestCase
|
||||
'actor_user_id' => 8,
|
||||
]);
|
||||
|
||||
$this->assertFalse($decision->isAllowed());
|
||||
$this->assertSame(403, $decision->status());
|
||||
$this->assertDeniedDecision($decision, 403, 'forbidden');
|
||||
}
|
||||
|
||||
public function testBrandingUpdateRequiresSettingsUpdatePermission(): void
|
||||
@@ -78,8 +71,7 @@ class SettingsAuthorizationPolicyTest extends TestCase
|
||||
'actor_user_id' => 8,
|
||||
]);
|
||||
|
||||
$this->assertFalse($decision->isAllowed());
|
||||
$this->assertSame(403, $decision->status());
|
||||
$this->assertDeniedDecision($decision, 403, 'forbidden');
|
||||
}
|
||||
|
||||
public function testTokenRevokeRequiresSettingsUpdatePermission(): void
|
||||
@@ -95,8 +87,7 @@ class SettingsAuthorizationPolicyTest extends TestCase
|
||||
'actor_user_id' => 8,
|
||||
]);
|
||||
|
||||
$this->assertFalse($decision->isAllowed());
|
||||
$this->assertSame(403, $decision->status());
|
||||
$this->assertDeniedDecision($decision, 403, 'forbidden');
|
||||
}
|
||||
|
||||
public function testUserLifecycleRunRequiresSettingsUpdatePermission(): void
|
||||
@@ -112,7 +103,6 @@ class SettingsAuthorizationPolicyTest extends TestCase
|
||||
'actor_user_id' => 8,
|
||||
]);
|
||||
|
||||
$this->assertFalse($decision->isAllowed());
|
||||
$this->assertSame(403, $decision->status());
|
||||
$this->assertDeniedDecision($decision, 403, 'forbidden');
|
||||
}
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user