mirror/Part-DB.Part-DB-server
1
0
Fork 1
mirror of https://github.com/Part-DB/Part-DB-server.git synced 2025-07-24 04:44:35 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

Forbid access to homepage if a user has no allow permission

Browse source 
This allows to block access to everything (even the homepage) for anonymous access. This fixes issue #290
This commit is contained in:
Jan Böhmer 2023-08-20 12:33:08 +02:00
parent e66ff40733
commit 0e5613b57b
4 changed files with 102 additions and 7 deletions
Download patch file Download diff file Expand all files Collapse all files

41
tests/Services/UserSystem/PermissionManagerTest.php
View file

@ -31,15 +31,12 @@ use Symfony\Bundle\FrameworkBundle\Test\WebTestCase;
class PermissionManagerTest extends WebTestCase
{
protected $user_withoutGroup;
protected ?User $user_withoutGroup = null;
protected $user;
protected $group;
protected ?User $user = null;
protected ?Group $group = null;
/**
* @var PermissionManager
*/
protected $service;
protected ?PermissionManager $service = null;
protected function setUp(): void
{
@ -294,4 +291,34 @@ class PermissionManagerTest extends WebTestCase
$this->assertTrue($this->service->dontInherit($user, 'parts', 'edit'));
$this->assertTrue($this->service->dontInherit($user, 'categories', 'read'));
}
public function testHasAnyPermissionSetToAllowInherited(): void
{
//For empty user this should return false
$user = new User();
$this->assertFalse($this->service->hasAnyPermissionSetToAllowInherited($user));
//If all permissions are set to false this should return false
$this->service->setAllPermissions($user, false);
$this->assertFalse($this->service->hasAnyPermissionSetToAllowInherited($user));
//If all permissions are set to null this should return false
$this->service->setAllPermissions($user, null);
$this->assertFalse($this->service->hasAnyPermissionSetToAllowInherited($user));
//If all permissions are set to true this should return true
$this->service->setAllPermissions($user, true);
$this->assertTrue($this->service->hasAnyPermissionSetToAllowInherited($user));
//The test data should return true
$this->assertTrue($this->service->hasAnyPermissionSetToAllowInherited($this->user));
$this->assertTrue($this->service->hasAnyPermissionSetToAllowInherited($this->user_withoutGroup));
//Create a user with a group
$user = new User();
$user->setGroup($this->group);
//This should return true
$this->assertTrue($this->service->hasAnyPermissionSetToAllowInherited($user));
}
}