users->newUserWithRole(); $page = $this->entities->page(); $this->permissions->setEntityPermissions($page, ['view'], [$role], false); $this->assertVisibleToUser($page, $user); } public function test_02_explicit_deny() { [$user, $role] = $this->users->newUserWithRole(); $page = $this->entities->page(); $this->permissions->setEntityPermissions($page, [], [$role], false); $this->assertNotVisibleToUser($page, $user); } public function test_03_same_level_conflicting() { [$user, $roleA] = $this->users->newUserWithRole(); $roleB = $this->users->attachNewRole($user); $page = $this->entities->page(); $this->permissions->disableEntityInheritedPermissions($page); $this->permissions->addEntityPermission($page, [], $roleA); $this->permissions->addEntityPermission($page, ['view'], $roleB); $this->assertVisibleToUser($page, $user); } public function test_20_inherit_allow() { [$user, $roleA] = $this->users->newUserWithRole(); $page = $this->entities->pageWithinChapter(); $chapter = $page->chapter; $this->permissions->disableEntityInheritedPermissions($chapter); $this->permissions->addEntityPermission($chapter, ['view'], $roleA); $this->assertVisibleToUser($page, $user); } public function test_21_inherit_deny() { [$user, $roleA] = $this->users->newUserWithRole(); $page = $this->entities->pageWithinChapter(); $chapter = $page->chapter; $this->permissions->disableEntityInheritedPermissions($chapter); $this->permissions->addEntityPermission($chapter, [], $roleA); $this->assertNotVisibleToUser($page, $user); } public function test_22_same_level_conflict_inherit() { [$user, $roleA] = $this->users->newUserWithRole(); $roleB = $this->users->attachNewRole($user); $page = $this->entities->pageWithinChapter(); $chapter = $page->chapter; $this->permissions->disableEntityInheritedPermissions($chapter); $this->permissions->addEntityPermission($chapter, [], $roleA); $this->permissions->addEntityPermission($chapter, ['view'], $roleB); $this->assertVisibleToUser($page, $user); } public function test_30_child_inherit_override_allow() { [$user, $roleA] = $this->users->newUserWithRole(); $page = $this->entities->pageWithinChapter(); $chapter = $page->chapter; $this->permissions->disableEntityInheritedPermissions($chapter); $this->permissions->addEntityPermission($chapter, [], $roleA); $this->permissions->addEntityPermission($page, ['view'], $roleA); $this->assertVisibleToUser($page, $user); } public function test_31_child_inherit_override_deny() { [$user, $roleA] = $this->users->newUserWithRole(); $page = $this->entities->pageWithinChapter(); $chapter = $page->chapter; $this->permissions->disableEntityInheritedPermissions($chapter); $this->permissions->addEntityPermission($chapter, ['view'], $roleA); $this->permissions->addEntityPermission($page, [], $roleA); $this->assertNotVisibleToUser($page, $user); } public function test_40_multi_role_inherit_conflict_override_deny() { [$user, $roleA] = $this->users->newUserWithRole(); $roleB = $this->users->attachNewRole($user); $page = $this->entities->pageWithinChapter(); $chapter = $page->chapter; $this->permissions->disableEntityInheritedPermissions($chapter); $this->permissions->addEntityPermission($page, [], $roleA); $this->permissions->addEntityPermission($chapter, ['view'], $roleB); $this->assertVisibleToUser($page, $user); } public function test_41_multi_role_inherit_conflict_retain_allow() { [$user, $roleA] = $this->users->newUserWithRole(); $roleB = $this->users->attachNewRole($user); $page = $this->entities->pageWithinChapter(); $chapter = $page->chapter; $this->permissions->disableEntityInheritedPermissions($chapter); $this->permissions->addEntityPermission($page, ['view'], $roleA); $this->permissions->addEntityPermission($chapter, [], $roleB); $this->assertVisibleToUser($page, $user); } public function test_50_role_override_allow() { [$user, $roleA] = $this->users->newUserWithRole(); $page = $this->entities->page(); $this->permissions->addEntityPermission($page, ['view'], $roleA); $this->assertVisibleToUser($page, $user); } public function test_51_role_override_deny() { [$user, $roleA] = $this->users->newUserWithRole([], ['page-view-all']); $page = $this->entities->page(); $this->permissions->addEntityPermission($page, [], $roleA); $this->assertNotVisibleToUser($page, $user); } public function test_60_inherited_role_override_allow() { [$user, $roleA] = $this->users->newUserWithRole([], []); $page = $this->entities->pageWithinChapter(); $chapter = $page->chapter; $this->permissions->addEntityPermission($chapter, ['view'], $roleA); $this->assertVisibleToUser($page, $user); } public function test_61_inherited_role_override_deny() { [$user, $roleA] = $this->users->newUserWithRole([], ['page-view-all']); $page = $this->entities->pageWithinChapter(); $chapter = $page->chapter; $this->permissions->addEntityPermission($chapter, [], $roleA); $this->assertNotVisibleToUser($page, $user); } public function test_62_inherited_role_override_deny_on_own() { [$user, $roleA] = $this->users->newUserWithRole([], ['page-view-own']); $page = $this->entities->pageWithinChapter(); $chapter = $page->chapter; $this->permissions->addEntityPermission($chapter, [], $roleA); $this->permissions->changeEntityOwner($page, $user); $this->assertNotVisibleToUser($page, $user); } public function test_70_multi_role_inheriting_deny() { [$user, $roleA] = $this->users->newUserWithRole([], ['page-view-all']); $roleB = $this->users->attachNewRole($user); $page = $this->entities->page(); $this->permissions->addEntityPermission($page, [], $roleB); $this->assertNotVisibleToUser($page, $user); } public function test_71_multi_role_inheriting_deny_on_own() { [$user, $roleA] = $this->users->newUserWithRole([], ['page-view-own']); $roleB = $this->users->attachNewRole($user); $page = $this->entities->page(); $this->permissions->changeEntityOwner($page, $user); $this->permissions->addEntityPermission($page, [], $roleB); $this->assertNotVisibleToUser($page, $user); } public function test_75_multi_role_inherited_deny_via_parent() { [$user, $roleA] = $this->users->newUserWithRole([], ['page-view-all']); $roleB = $this->users->attachNewRole($user); $page = $this->entities->pageWithinChapter(); $chapter = $page->chapter; $this->permissions->addEntityPermission($chapter, [], $roleB); $this->assertNotVisibleToUser($page, $user); } public function test_76_multi_role_inherited_deny_via_parent_on_own() { [$user, $roleA] = $this->users->newUserWithRole([], ['page-view-own']); $roleB = $this->users->attachNewRole($user); $page = $this->entities->pageWithinChapter(); $chapter = $page->chapter; $this->permissions->changeEntityOwner($page, $user); $this->permissions->addEntityPermission($chapter, [], $roleB); $this->assertNotVisibleToUser($page, $user); } public function test_80_fallback_override_allow() { [$user, $roleA] = $this->users->newUserWithRole(); $page = $this->entities->page(); $this->permissions->setFallbackPermissions($page, []); $this->permissions->addEntityPermission($page, ['view'], $roleA); $this->assertVisibleToUser($page, $user); } public function test_81_fallback_override_deny() { [$user, $roleA] = $this->users->newUserWithRole(); $page = $this->entities->page(); $this->permissions->setFallbackPermissions($page, ['view']); $this->permissions->addEntityPermission($page, [], $roleA); $this->assertNotVisibleToUser($page, $user); } public function test_84_fallback_override_allow_multi_role() { [$user, $roleA] = $this->users->newUserWithRole(); $roleB = $this->users->attachNewRole($user); $page = $this->entities->page(); $this->permissions->setFallbackPermissions($page, []); $this->permissions->addEntityPermission($page, ['view'], $roleA); $this->assertVisibleToUser($page, $user); } public function test_85_fallback_override_deny_multi_role() { [$user, $roleA] = $this->users->newUserWithRole(); $roleB = $this->users->attachNewRole($user); $page = $this->entities->page(); $this->permissions->setFallbackPermissions($page, ['view']); $this->permissions->addEntityPermission($page, [], $roleA); $this->assertNotVisibleToUser($page, $user); } public function test_86_fallback_override_allow_inherit() { [$user, $roleA] = $this->users->newUserWithRole(); $page = $this->entities->page(); $chapter = $page->chapter; $this->permissions->setFallbackPermissions($chapter, []); $this->permissions->addEntityPermission($chapter, ['view'], $roleA); $this->assertVisibleToUser($page, $user); } public function test_87_fallback_override_deny_inherit() { [$user, $roleA] = $this->users->newUserWithRole(); $page = $this->entities->page(); $chapter = $page->chapter; $this->permissions->setFallbackPermissions($chapter, ['view']); $this->permissions->addEntityPermission($chapter, [], $roleA); $this->assertNotVisibleToUser($page, $user); } public function test_88_fallback_override_allow_multi_role_inherit() { [$user, $roleA] = $this->users->newUserWithRole(); $roleB = $this->users->attachNewRole($user); $page = $this->entities->page(); $chapter = $page->chapter; $this->permissions->setFallbackPermissions($chapter, []); $this->permissions->addEntityPermission($chapter, ['view'], $roleA); $this->assertVisibleToUser($page, $user); } public function test_89_fallback_override_deny_multi_role_inherit() { [$user, $roleA] = $this->users->newUserWithRole(); $roleB = $this->users->attachNewRole($user); $page = $this->entities->page(); $chapter = $page->chapter; $this->permissions->setFallbackPermissions($chapter, ['view']); $this->permissions->addEntityPermission($chapter, [], $roleA); $this->assertNotVisibleToUser($page, $user); } public function test_90_fallback_overrides_parent_entity_role_deny() { [$user, $roleA] = $this->users->newUserWithRole(); $page = $this->entities->page(); $chapter = $page->chapter; $this->permissions->setFallbackPermissions($chapter, []); $this->permissions->setFallbackPermissions($page, []); $this->permissions->addEntityPermission($chapter, ['view'], $roleA); $this->assertNotVisibleToUser($page, $user); } public function test_91_fallback_overrides_parent_entity_role_inherit() { [$user, $roleA] = $this->users->newUserWithRole(); $page = $this->entities->page(); $chapter = $page->chapter; $book = $page->book; $this->permissions->setFallbackPermissions($book, []); $this->permissions->setFallbackPermissions($chapter, []); $this->permissions->addEntityPermission($book, ['view'], $roleA); $this->assertNotVisibleToUser($page, $user); } }