Fix tests for group restrictions

Signed-off-by: Julius Härtl <jus@bitgrid.net>
This commit is contained in:
Julius Härtl
2018-12-04 09:25:35 +01:00
parent 7c95783ab5
commit 0528bd59d1
4 changed files with 59 additions and 30 deletions

View File

@@ -37,6 +37,7 @@ use OCP\IConfig;
use OCP\IGroupManager; use OCP\IGroupManager;
use OCP\ILogger; use OCP\ILogger;
use OCP\IUserManager; use OCP\IUserManager;
use OCP\Share\IManager;
class PermissionService { class PermissionService {
@@ -53,6 +54,8 @@ class PermissionService {
private $groupManager; private $groupManager;
/** @var IConfig */ /** @var IConfig */
private $config; private $config;
/** @var IManager */
private $shareManager;
/** @var string */ /** @var string */
private $userId; private $userId;
/** @var array */ /** @var array */
@@ -64,6 +67,7 @@ class PermissionService {
BoardMapper $boardMapper, BoardMapper $boardMapper,
IUserManager $userManager, IUserManager $userManager,
IGroupManager $groupManager, IGroupManager $groupManager,
IManager $shareManager,
IConfig $config, IConfig $config,
$userId $userId
) { ) {
@@ -72,6 +76,7 @@ class PermissionService {
$this->logger = $logger; $this->logger = $logger;
$this->userManager = $userManager; $this->userManager = $userManager;
$this->groupManager = $groupManager; $this->groupManager = $groupManager;
$this->shareManager = $shareManager;
$this->config = $config; $this->config = $config;
$this->userId = $userId; $this->userId = $userId;
} }
@@ -90,7 +95,7 @@ class PermissionService {
Acl::PERMISSION_EDIT => $owner || $this->userCan($acls, Acl::PERMISSION_EDIT), Acl::PERMISSION_EDIT => $owner || $this->userCan($acls, Acl::PERMISSION_EDIT),
Acl::PERMISSION_MANAGE => $owner || $this->userCan($acls, Acl::PERMISSION_MANAGE), Acl::PERMISSION_MANAGE => $owner || $this->userCan($acls, Acl::PERMISSION_MANAGE),
Acl::PERMISSION_SHARE => ($owner || $this->userCan($acls, Acl::PERMISSION_SHARE)) Acl::PERMISSION_SHARE => ($owner || $this->userCan($acls, Acl::PERMISSION_SHARE))
&& (!\OC::$server->getShareManager()->sharingDisabledForUser($this->userId)) && (!$this->shareManager->sharingDisabledForUser($this->userId))
]; ];
} }
@@ -109,7 +114,7 @@ class PermissionService {
Acl::PERMISSION_EDIT => $owner || $this->userCan($acls, Acl::PERMISSION_EDIT), Acl::PERMISSION_EDIT => $owner || $this->userCan($acls, Acl::PERMISSION_EDIT),
Acl::PERMISSION_MANAGE => $owner || $this->userCan($acls, Acl::PERMISSION_MANAGE), Acl::PERMISSION_MANAGE => $owner || $this->userCan($acls, Acl::PERMISSION_MANAGE),
Acl::PERMISSION_SHARE => ($owner || $this->userCan($acls, Acl::PERMISSION_SHARE)) Acl::PERMISSION_SHARE => ($owner || $this->userCan($acls, Acl::PERMISSION_SHARE))
&& (!\OC::$server->getShareManager()->sharingDisabledForUser($this->userId)) && (!$this->shareManager->sharingDisabledForUser($this->userId))
]; ];
} }
@@ -132,7 +137,7 @@ class PermissionService {
throw new NoPermissionException('Permission denied'); throw new NoPermissionException('Permission denied');
} }
if ($permission === Acl::PERMISSION_SHARE && !\OC::$server->getShareManager()->sharingDisabledForUser($this->userId)) { if ($permission === Acl::PERMISSION_SHARE && $this->shareManager->sharingDisabledForUser($this->userId)) {
return false; return false;
} }

View File

@@ -150,6 +150,9 @@ class BoardServiceTest extends TestCase {
$this->boardMapper->expects($this->once()) $this->boardMapper->expects($this->once())
->method('insert') ->method('insert')
->willReturn($board); ->willReturn($board);
$this->permissionService->expects($this->once())
->method('canCreate')
->willReturn(true);
$b = $this->service->create('MyBoard', 'admin', '00ff00'); $b = $this->service->create('MyBoard', 'admin', '00ff00');
$this->assertEquals($b->getTitle(), 'MyBoard'); $this->assertEquals($b->getTitle(), 'MyBoard');
@@ -158,6 +161,20 @@ class BoardServiceTest extends TestCase {
$this->assertCount(4, $b->getLabels()); $this->assertCount(4, $b->getLabels());
} }
/**
* @expectedException \OCA\Deck\NoPermissionException
*/
public function testCreateDenied() {
$board = new Board();
$board->setTitle('MyBoard');
$board->setOwner('admin');
$board->setColor('00ff00');
$this->permissionService->expects($this->once())
->method('canCreate')
->willReturn(false);
$b = $this->service->create('MyBoard', 'admin', '00ff00');
}
public function testUpdate() { public function testUpdate() {
$board = new Board(); $board = new Board();
$board->setTitle('MyBoard'); $board->setTitle('MyBoard');

View File

@@ -31,11 +31,13 @@ use OCA\Deck\Db\IPermissionMapper;
use OCA\Deck\Db\User; use OCA\Deck\Db\User;
use OCA\Deck\NoPermissionException; use OCA\Deck\NoPermissionException;
use OCP\AppFramework\Db\DoesNotExistException; use OCP\AppFramework\Db\DoesNotExistException;
use OCP\IConfig;
use OCP\IGroup; use OCP\IGroup;
use OCP\IGroupManager; use OCP\IGroupManager;
use OCP\ILogger; use OCP\ILogger;
use OCP\IUser; use OCP\IUser;
use OCP\IUserManager; use OCP\IUserManager;
use OCP\Share\IManager;
class PermissionServiceTest extends \Test\TestCase { class PermissionServiceTest extends \Test\TestCase {
@@ -51,21 +53,22 @@ class PermissionServiceTest extends \Test\TestCase {
private $userManager; private $userManager;
/** @var IGroupManager */ /** @var IGroupManager */
private $groupManager; private $groupManager;
/** @var IManager */
private $shareManager;
/** @var IConfig */
private $config;
/** @var string */ /** @var string */
private $userId = 'admin'; private $userId = 'admin';
public function setUp() { public function setUp() {
parent::setUp(); parent::setUp();
$this->logger = $this->request = $this->getMockBuilder(ILogger::class) $this->logger = $this->request = $this->createMock(ILogger::class);
->disableOriginalConstructor() $this->aclMapper = $this->createMock(AclMapper::class);
->getMock(); $this->boardMapper = $this->createMock(BoardMapper::class);
$this->aclMapper = $this->getMockBuilder(AclMapper::class)
->disableOriginalConstructor()->getMock();
$this->boardMapper = $this->getMockBuilder(BoardMapper::class)
->disableOriginalConstructor()->getMock();
$this->userManager = $this->createMock(IUserManager::class); $this->userManager = $this->createMock(IUserManager::class);
$this->groupManager = $this->getMockBuilder(IGroupManager::class) $this->groupManager = $this->createMock(IGroupManager::class);
->disableOriginalConstructor()->getMock(); $this->shareManager = $this->createMock(IManager::class);
$this->config = $this->createMock(IConfig::class);
$this->service = new PermissionService( $this->service = new PermissionService(
$this->logger, $this->logger,
@@ -73,6 +76,8 @@ class PermissionServiceTest extends \Test\TestCase {
$this->boardMapper, $this->boardMapper,
$this->userManager, $this->userManager,
$this->groupManager, $this->groupManager,
$this->shareManager,
$this->config,
'admin' 'admin'
); );
} }
@@ -226,6 +231,9 @@ class PermissionServiceTest extends \Test\TestCase {
$acls = $this->getAcls($boardId); $acls = $this->getAcls($boardId);
$this->aclMapper->expects($this->any())->method('findAll')->willReturn($acls); $this->aclMapper->expects($this->any())->method('findAll')->willReturn($acls);
$this->shareManager->expects($this->any())
->method('sharingDisabledForUser')
->willReturn(false);
if($result) { if($result) {
$actual = $this->service->checkPermission($mapper, 1234, $permission); $actual = $this->service->checkPermission($mapper, 1234, $permission);
@@ -251,6 +259,7 @@ class PermissionServiceTest extends \Test\TestCase {
$acls = $this->getAcls($boardId); $acls = $this->getAcls($boardId);
$this->aclMapper->expects($this->any())->method('findAll')->willReturn($acls); $this->aclMapper->expects($this->any())->method('findAll')->willReturn($acls);
if($result) { if($result) {
$actual = $this->service->checkPermission($mapper, 1234, $permission); $actual = $this->service->checkPermission($mapper, 1234, $permission);
$this->assertTrue($actual); $this->assertTrue($actual);

View File

@@ -24,6 +24,9 @@
namespace OCA\Deck\Controller; namespace OCA\Deck\Controller;
use OCA\Deck\Service\PermissionService;
use OCP\IL10N;
use OCP\IRequest;
use PHPUnit_Framework_TestCase; use PHPUnit_Framework_TestCase;
use OCA\Deck\Service\DefaultBoardService; use OCA\Deck\Service\DefaultBoardService;
use OCA\Deck\Db\Board; use OCA\Deck\Db\Board;
@@ -36,23 +39,18 @@ class PageControllerTest extends \Test\TestCase {
private $l10n; private $l10n;
private $userId = 'john'; private $userId = 'john';
private $defaultBoardService; private $defaultBoardService;
private $permissionService;
private $config; private $config;
public function setUp() { public function setUp() {
$this->l10n = $this->request = $this->getMockBuilder( $this->l10n = $this->createMock(IL10N::class);
'\OCP\IL10n') $this->request = $this->createMock(IRequest::class);
->disableOriginalConstructor()
->getMock();
$this->request = $this->getMockBuilder(
'\OCP\IRequest')
->disableOriginalConstructor()
->getMock();
$this->defaultBoardService = $this->createMock(DefaultBoardService::class); $this->defaultBoardService = $this->createMock(DefaultBoardService::class);
$this->permissionService = $this->createMock(PermissionService::class);
$this->config = $this->createMock(IConfig::class); $this->config = $this->createMock(IConfig::class);
$this->controller = new PageController( $this->controller = new PageController(
'deck', $this->request, $this->defaultBoardService, $this->l10n, $this->userId 'deck', $this->request, $this->defaultBoardService, $this->permissionService, $this->l10n, $this->userId
); );
} }