69 lines
2.3 KiB
PHP
69 lines
2.3 KiB
PHP
<?php
|
|
|
|
declare(strict_types=1);
|
|
|
|
namespace App\Tests\Security;
|
|
|
|
use App\Security\Role;
|
|
use PHPUnit\Framework\TestCase;
|
|
|
|
class RoleTest extends TestCase
|
|
{
|
|
public function testPrivilegedRolesAreNeverImported(): void
|
|
{
|
|
$roles = Role::filterImportable([
|
|
Role::TEAMER,
|
|
Role::ADMIN,
|
|
Role::GROUPS_ADMIN,
|
|
Role::GROUPS_MANAGER,
|
|
Role::HOUSE_MANAGER,
|
|
]);
|
|
|
|
self::assertSame([Role::TEAMER, Role::HOUSE_MANAGER], $roles);
|
|
}
|
|
|
|
public function testResultIsADedupedList(): void
|
|
{
|
|
// CrmAttributesResponseParser applies array_unique(), which preserves keys — a
|
|
// non-list would be persisted as a JSON object instead of an array.
|
|
$roles = Role::filterImportable([0 => Role::ADMIN, 2 => Role::TEAMER, 5 => Role::TEAMER]);
|
|
|
|
self::assertSame([Role::TEAMER], $roles);
|
|
self::assertSame(array_keys($roles), range(0, \count($roles) - 1));
|
|
}
|
|
|
|
public function testAccountWithOnlyPrivilegedRolesFallsBackToCustomer(): void
|
|
{
|
|
self::assertSame([Role::CUSTOMER], Role::filterImportable([Role::ADMIN]));
|
|
self::assertSame([Role::CUSTOMER], Role::filterImportable([]));
|
|
}
|
|
|
|
public function testAssignedOnlyDropsTheImplicitRoleUser(): void
|
|
{
|
|
$roles = Role::assignedOnly([Role::USER, Role::TEAMER, Role::GROUPS_ADMIN]);
|
|
|
|
self::assertSame([Role::TEAMER, Role::GROUPS_ADMIN], $roles);
|
|
// The value is JSON-encoded into the userinfo response and must not become an object.
|
|
self::assertSame(array_keys($roles), range(0, \count($roles) - 1));
|
|
}
|
|
|
|
public function testCombineKeepsEachHalfInItsOwnLane(): void
|
|
{
|
|
$roles = Role::combine([Role::TEAMER, Role::ADMIN], [Role::GROUPS_ADMIN, Role::TEAMER]);
|
|
|
|
// The ADMIN from the synced half and the TEAMER from the privileged half are discarded.
|
|
self::assertSame([Role::TEAMER, Role::GROUPS_ADMIN], $roles);
|
|
self::assertSame(array_keys($roles), range(0, \count($roles) - 1));
|
|
}
|
|
|
|
public function testCombineDropsTheImplicitRoleUser(): void
|
|
{
|
|
self::assertSame([Role::TEAMER], Role::combine([Role::USER, Role::TEAMER], []));
|
|
}
|
|
|
|
public function testEveryRoleHasALabel(): void
|
|
{
|
|
self::assertSame(Role::ALL, array_keys(Role::labels()));
|
|
}
|
|
}
|