-
-
Notifications
You must be signed in to change notification settings - Fork 2.4k
Expand file tree
/
Copy pathUserSearchTest.php
More file actions
132 lines (102 loc) · 4.51 KB
/
UserSearchTest.php
File metadata and controls
132 lines (102 loc) · 4.51 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
<?php
namespace Tests\User;
use BookStack\Permissions\Permission;
use BookStack\Users\Models\User;
use Tests\TestCase;
class UserSearchTest extends TestCase
{
public function test_select_search_matches_by_name()
{
$viewer = $this->users->viewer();
$admin = $this->users->admin();
$resp = $this->actingAs($admin)->get('/search/users/select?search=' . urlencode($viewer->name));
$resp->assertOk();
$resp->assertSee($viewer->name);
$resp->assertDontSee($admin->name);
}
public function test_select_search_shows_first_by_name_without_search()
{
/** @var User $firstUser */
$firstUser = User::query()->orderBy('name', 'desc')->first();
$resp = $this->asAdmin()->get('/search/users/select');
$resp->assertOk();
$resp->assertSee($firstUser->name);
}
public function test_select_search_does_not_match_by_email()
{
$viewer = $this->users->viewer();
$editor = $this->users->editor();
$resp = $this->actingAs($editor)->get('/search/users/select?search=' . urlencode($viewer->email));
$resp->assertDontSee($viewer->name);
}
public function test_select_requires_right_permission()
{
$permissions = ['users-manage', 'restrictions-manage-own', 'restrictions-manage-all'];
$user = $this->users->viewer();
foreach ($permissions as $permission) {
$resp = $this->actingAs($user)->get('/search/users/select?search=a');
$this->assertPermissionError($resp);
$this->permissions->grantUserRolePermissions($user, [$permission]);
$resp = $this->actingAs($user)->get('/search/users/select?search=a');
$resp->assertOk();
$user->roles()->delete();
$user->clearPermissionCache();
}
}
public function test_select_requires_logged_in_user()
{
$this->setSettings(['app-public' => true]);
$this->permissions->grantUserRolePermissions($this->users->guest(), ['users-manage']);
$resp = $this->get('/search/users/select?search=a');
$this->assertPermissionError($resp);
}
public function test_mentions_search_matches_by_name()
{
$viewer = $this->users->viewer();
$editor = $this->users->editor();
$resp = $this->actingAs($editor)->get('/search/users/mention?search=' . urlencode($viewer->name));
$resp->assertOk();
$resp->assertSee($viewer->name);
$resp->assertDontSee($editor->name);
}
public function test_mentions_search_does_not_match_by_email()
{
$viewer = $this->users->viewer();
$resp = $this->asEditor()->get('/search/users/mention?search=' . urlencode($viewer->email));
$resp->assertDontSee($viewer->name);
}
public function test_mentions_search_requires_logged_in_user()
{
$this->setSettings(['app-public' => true]);
$guest = $this->users->guest();
$this->permissions->grantUserRolePermissions($guest, [Permission::CommentCreateAll, Permission::CommentUpdateAll]);
$resp = $this->get('/search/users/mention?search=a');
$this->assertPermissionError($resp);
}
public function test_mentions_search_requires_comment_create_or_update_permission()
{
$viewer = $this->users->viewer();
$editor = $this->users->editor();
$resp = $this->actingAs($viewer)->get('/search/users/mention?search=' . urlencode($editor->name));
$this->assertPermissionError($resp);
$this->permissions->grantUserRolePermissions($viewer, [Permission::CommentCreateAll]);
$resp = $this->actingAs($editor)->get('/search/users/mention?search=' . urlencode($viewer->name));
$resp->assertOk();
$resp->assertSee($viewer->name);
$this->permissions->removeUserRolePermissions($viewer, [Permission::CommentCreateAll]);
$this->permissions->grantUserRolePermissions($viewer, [Permission::CommentUpdateAll]);
$resp = $this->actingAs($editor)->get('/search/users/mention?search=' . urlencode($viewer->name));
$resp->assertOk();
$resp->assertSee($viewer->name);
}
public function test_mentions_search_shows_first_by_name_without_search()
{
/** @var User $firstUser */
$firstUser = User::query()
->orderBy('name', 'asc')
->first();
$resp = $this->asEditor()->get('/search/users/mention');
$resp->assertOk();
$this->withHtml($resp)->assertElementContains('a[data-id]:first-child', $firstUser->name);
}
}