processmaker/tests/Traits/ForUserScopeTest.php at develop · ProcessMaker/processmaker · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
<?php

namespace Tests\Traits;

use Database\Seeders\PermissionSeeder;
use DB;
use Illuminate\Database\DatabaseManager;
use Illuminate\Foundation\Testing\WithFaker;
use ProcessMaker\Models\Group;
use ProcessMaker\Models\Process;
use ProcessMaker\Models\ProcessCollaboration;
use ProcessMaker\Models\ProcessRequest;
use ProcessMaker\Models\ProcessRequestToken;
use ProcessMaker\Models\SecurityLog;
use ProcessMaker\Models\User;
use ProcessMaker\Providers\AuthServiceProvider;
use Tests\Feature\Shared\RequestHelper;
use Tests\RequestListingPerformanceData;
use Tests\TestCase;

class ForUserScopeTest extends TestCase
{
    use RequestHelper;

    public $withPermissions = true;

    protected function withUserSetup()
    {
        // Make $this->user a regular user insetad of an admin
        $this->user = User::factory()->create();
    }

    public function testUserStarted()
    {
        $startedByUser = ProcessRequest::factory()->create(['user_id' => $this->user->id]);

        $this->assertEquals([
            $startedByUser->id,
        ], $this->requestIds());
    }

    public function testUserHasParticipated()
    {
        $userHasParticipated = ProcessRequest::factory()->create();
        ProcessRequestToken::factory()->create([
            'user_id' => $this->user->id,
            'process_request_id' => $userHasParticipated->id,
        ]);

        $this->assertEquals([
            $userHasParticipated->id,
        ], $this->requestIds());
    }

    public function testUserHasViewPermission()
    {
        $request = ProcessRequest::factory()->create();
        $this->user->giveDirectPermission('view-all_requests');

        $this->assertEquals([$request->id], $this->requestIds());
    }

    public function testUserHasEditPermission()
    {
        $request = ProcessRequest::factory()->create();
        $this->user->giveDirectPermission('edit-request_data');

        $this->assertEquals([$request->id], $this->requestIds());
    }

    public function testUserHasEditProccessDataPermission()
    {
        $group = Group::factory()->create();
        $process1 = Process::factory()->create();
        $process1->usersCanEditData()->sync([$this->user->id => ['method' => 'EDIT_DATA']]);
        $process2 = Process::factory()->create();
        $process2->groupsCanEditData()->sync([$group->id => ['method' => 'EDIT_DATA']]);

        $request1 = ProcessRequest::factory()->create(['process_id' => $process1]);
        $request2 = ProcessRequest::factory()->create(['process_id' => $process2]);

        $this->user->groups()->sync([$group->id]);

        $this->assertEquals([$request1->id, $request2->id], $this->requestIds());
    }

    public function testSelfServeRequests()
    {
        $nonMatchingProcess = ProcessRequest::factory()->create();
        $task1 = ProcessRequestToken::factory()->create([
            'is_self_service' => true,
            'self_service_groups' => [
                'users' => ['999', (string) $this->user->id],
                'groups' => ['4', '5'],
            ],
        ]);
        $request1 = $task1->processRequest;

        $group1 = Group::factory()->create();
        $task2 = ProcessRequestToken::factory()->create([
            'is_self_service' => true,
            'self_service_groups' => [
                'users' => ['999', '555'],
                'groups' => ['444', (string) $group1->id],
            ],
        ]);
        $request2 = $task2->processRequest;

        $group2 = Group::factory()->create();
        $task3 = ProcessRequestToken::factory()->create([
            'is_self_service' => true,
            'self_service_groups' => [
                'users' => ['999', '555'],
                'groups' => ['444', (string) $group2->id],
            ],
        ]);
        $request3 = $task3->processRequest;

        $this->user->groups()->sync([$group1->id, $group2->id]);

        $this->assertEquals([$request1->id, $request2->id, $request3->id], $this->requestIds());
    }

    private function requestIds()
    {
        return ProcessRequest::forUser($this->user)->pluck('id')->toArray();
    }
}