mirror/Part-DB.Part-DB-server
1
0
Fork 1
mirror of https://github.com/Part-DB/Part-DB-server.git synced 2025-07-02 14:34:31 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

Added system to restrict permissions based on API token level

Browse source
This commit is contained in:
Jan Böhmer 2023-08-28 21:20:59 +02:00
parent 56d120cd08
commit fc6643bd6f
8 changed files with 374 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

19
tests/Services/UserSystem/PermissionManagerTest.php
View file

@ -52,7 +52,11 @@ class PermissionManagerTest extends WebTestCase
->setPermissionValue('parts', 'edit', false) //edit
->setPermissionValue('parts', 'create', null) //create
->setPermissionValue('parts', 'move', null) //move
->setPermissionValue('parts', 'delete', null); //delete
->setPermissionValue('parts', 'delete', null) //delete
->setPermissionValue('footprints', 'edit', true)
->setPermissionValue('footprints', 'create', false)
;
$this->user = $this->createMock(User::class);
$this->user->method('getPermissions')->willReturn($user_perms);
@ -170,6 +174,19 @@ class PermissionManagerTest extends WebTestCase
$this->assertNull($this->service->inherit($this->user_withoutGroup, 'parts', 'delete'));
}
public function testInheritWithAPILevel(): void
{
//If no API roles are given, access should be prevented
$this->assertFalse($this->service->inheritWithAPILevel($this->user, [], 'parts', 'read'));
//Allow access with roles
$this->assertTrue($this->service->inheritWithAPILevel($this->user, ['ROLE_API_READ_ONLY', 'ROLE_API_FULL'], 'parts', 'read'));
//Block access if the token has not the sufficient level
$this->assertFalse($this->service->inheritWithAPILevel($this->user, ['ROLE_API_READ_ONLY'], 'footprints', 'edit'));
//And allow with role
$this->assertTrue($this->service->inheritWithAPILevel($this->user, ['ROLE_API_READ_ONLY', 'ROLE_API_EDIT'], 'footprints', 'edit'));
}
public function testSetPermission(): void
{
$user = new User();