145 lines
4.0 KiB
PHP
145 lines
4.0 KiB
PHP
<?php
|
|
declare(strict_types = 1);
|
|
|
|
namespace acceptance;
|
|
|
|
use AcceptanceTester;
|
|
use Helper\Acceptance;
|
|
use PDO;
|
|
|
|
class T122_MemberManageability_Cest{
|
|
private const ROWS_USER3_ROLELESS = [
|
|
'User1' => 1,
|
|
'Manager1' => 2,
|
|
'Manager2' => 3,
|
|
'User2' => 4,
|
|
'RoleLess' => 5,
|
|
'User3' => 6,
|
|
];
|
|
|
|
private const ROWS_USER3_ADMINISTRATOR = [
|
|
'User1' => 1,
|
|
'Manager1' => 2,
|
|
'User3' => 3,
|
|
'Manager2' => 4,
|
|
'User2' => 5,
|
|
'RoleLess' => 6,
|
|
];
|
|
|
|
private const ROWS_USER3_MODERATOR_OR_DEVELOPER = [
|
|
'User1' => 1,
|
|
'Manager1' => 2,
|
|
'Manager2' => 3,
|
|
'User3' => 4,
|
|
'User2' => 5,
|
|
'RoleLess' => 6,
|
|
];
|
|
|
|
public function _after(): void{
|
|
Acceptance::assignUser3Role('p1', null);
|
|
}
|
|
|
|
private function startManagingAs(AcceptanceTester $I, string $user): void{
|
|
$I->amLoggedIn($user);
|
|
$I->amOnPage('/project/p1/members');
|
|
$I->dontSee('Permission Error', 'h2');
|
|
}
|
|
|
|
private function ensureCanOnlyManage(AcceptanceTester $I, array $rows, array $users): void{
|
|
$user_ids = Acceptance::getDB()->query('SELECT name, id FROM users')->fetchAll(PDO::FETCH_KEY_PAIR);
|
|
|
|
foreach($users as $user){
|
|
$I->seeElement('tbody tr:nth-child('.$rows[$user].') a[href^="http://localhost/project/p1/members/"]');
|
|
$I->seeElement('tbody tr:nth-child('.$rows[$user].') form[action$="/remove"]');
|
|
}
|
|
|
|
$missing = array_diff(array_keys($rows), $users);
|
|
|
|
foreach($missing as $user){
|
|
$I->dontSeeElement('tbody tr:nth-child('.$rows[$user].') a[href^="http://localhost/project/p1/members/"]');
|
|
$I->dontSeeElement('tbody tr:nth-child('.$rows[$user].') form[action$="/remove"]');
|
|
}
|
|
|
|
foreach($users as $user){
|
|
$I->amOnPage('/project/p1/members/'.$user_ids[$user]);
|
|
$I->dontSee('Permission Error', 'h2');
|
|
}
|
|
|
|
foreach($missing as $user){
|
|
$id = $user_ids[$user];
|
|
|
|
foreach([$id, $id.'/remove'] as $suffix){
|
|
$I->amOnPage('/project/p1/members/'.$suffix);
|
|
$I->see('Permission Error', 'h2');
|
|
}
|
|
}
|
|
}
|
|
|
|
public function trackerAdminCanManageAllButOwnerDespiteNotBeingAMember(AcceptanceTester $I): void{
|
|
$this->startManagingAs($I, 'Admin');
|
|
$I->dontSee('Admin', 'table td:first-child');
|
|
|
|
$this->ensureCanOnlyManage($I, self::ROWS_USER3_ROLELESS, [
|
|
'Manager1',
|
|
'Manager2',
|
|
'User2',
|
|
'RoleLess',
|
|
'User3',
|
|
]);
|
|
}
|
|
|
|
public function trackerModeratorCanManageAllButOwnerDespiteNotBeingAMember(AcceptanceTester $I): void{
|
|
$this->startManagingAs($I, 'Moderator');
|
|
$I->dontSee('Moderator', 'table td:first-child');
|
|
|
|
$this->ensureCanOnlyManage($I, self::ROWS_USER3_ROLELESS, [
|
|
'Manager1',
|
|
'Manager2',
|
|
'User2',
|
|
'RoleLess',
|
|
'User3',
|
|
]);
|
|
}
|
|
|
|
public function ownerCanManageAllButSelf(AcceptanceTester $I): void{
|
|
$this->startManagingAs($I, 'User1');
|
|
|
|
$this->ensureCanOnlyManage($I, self::ROWS_USER3_ROLELESS, [
|
|
'Manager1',
|
|
'Manager2',
|
|
'User2',
|
|
'RoleLess',
|
|
'User3',
|
|
]);
|
|
}
|
|
|
|
public function memberWithAdministratorRoleCanOnlyManageLowerRoles(AcceptanceTester $I): void{
|
|
Acceptance::assignUser3Role('p1', 'Administrator');
|
|
$this->startManagingAs($I, 'User3');
|
|
|
|
$this->ensureCanOnlyManage($I, self::ROWS_USER3_ADMINISTRATOR, [
|
|
'Manager2',
|
|
'User2',
|
|
'RoleLess',
|
|
]);
|
|
}
|
|
|
|
public function memberWithModeratorRoleCanOnlyManageLowerRoles(AcceptanceTester $I): void{
|
|
Acceptance::assignUser3Role('p1', 'Moderator');
|
|
$this->startManagingAs($I, 'User3');
|
|
|
|
$this->ensureCanOnlyManage($I, self::ROWS_USER3_MODERATOR_OR_DEVELOPER, [
|
|
'User2',
|
|
'RoleLess',
|
|
]);
|
|
}
|
|
|
|
public function memberWithDeveloperRoleCannotManageAnyone(AcceptanceTester $I): void{
|
|
Acceptance::assignUser3Role('p1', 'Developer');
|
|
$this->startManagingAs($I, 'User3');
|
|
$this->ensureCanOnlyManage($I, self::ROWS_USER3_MODERATOR_OR_DEVELOPER, []);
|
|
}
|
|
}
|
|
|
|
?>
|