function testPageMemberRetrievalFunctions() { $sc = SiteConfig::current_site_config(); $sc->CanPublishType = 'OnlyTheseUsers'; $sc->PublisherGroups()->removeAll(); $sc->PublisherGroups()->add($this->objFromFixture('Group', 'customauthorsgroup')); $sc->write(); $page = new Page(); // Test inherit $page->CanPublishType = 'Inherit'; $compare1 = $page->PublisherMembers()->column('Email'); $compare2 = array('*****@*****.**', '*****@*****.**'); sort($compare1); sort($compare2); $this->assertEquals($compare1, $compare2); // Test specific groups $page->CanPublishType = 'OnlyTheseUsers'; $pEmails = $page->PublisherMembers()->column('Email'); $this->assertTrue(in_array(strtolower($pEmails[0]), array('*****@*****.**', '*****@*****.**')), 'With CanPublishType set to OnlyTheseUsers, but no groups set up, should return admins'); $page->PublisherGroups()->add($this->objFromFixture('Group', 'custompublishergroup')); $this->assertEquals($page->PublisherMembers()->column('Email'), array('*****@*****.**')); $page->CanPublishType = 'Inherit'; $page->write(); // Test passthru methods $this->assertTrue($page->canPublish($this->objFromFixture('Member', 'customauthor'))); $this->assertTrue($page->canApprove($this->objFromFixture('Member', 'customauthor'))); $this->assertTrue($page->canRequestEdit($this->objFromFixture('Member', 'customauthor'))); // Test 'all' users $page->CanPublishType = 'LoggedInUsers'; $this->assertEquals(4, $page->PublisherMembers()->Count(), 'PublisherMembers returns the 4 users that have CMS access'); }
function testCmsActionsLimited() { // For 2.3 and 2.4 compatibility $bt = defined('DB::USE_ANSI_SQL') ? "\"" : "`"; $custompublisherspage = $this->objFromFixture('SiteTree', 'custompublisherpage'); $custompublishersgroup = $this->objFromFixture('Group', 'custompublishergroup'); $custompublisher = $this->objFromFixture('Member', 'custompublisher'); $workflowadmin = $this->objFromFixture('Member', 'workflowadmin'); $custompublisher->Groups()->add($custompublishersgroup); $customauthorsgroup = $this->objFromFixture('Group', 'customauthorsgroup'); $customauthor = $this->objFromFixture('Member', 'customauthor'); $customauthor->Groups()->add($customauthorsgroup); $unpublishedRecord = new Page(); $unpublishedRecord->CanEditType = 'LoggedInUsers'; $unpublishedRecord->write(); $unpublishedRecord->PublisherGroups()->add($custompublishersgroup); $custompublisher->logIn(); $publishedRecord = new Page(); $publishedRecord->CanEditType = 'LoggedInUsers'; $publishedRecord->write(); $publishedRecord->doPublish(); $publishedRecord->PublisherGroups()->add($custompublishersgroup); $deletedFromLiveRecord = new Page(); $deletedFromLiveRecord->CanEditType = 'LoggedInUsers'; $deletedFromLiveRecord->write(); $deletedFromLiveRecord->doPublish(); $deletedFromLiveRecord->deleteFromStage('Live'); $deletedFromLiveRecord->PublisherGroups()->add($custompublishersgroup); $deletedFromStageRecord = new Page(); $deletedFromStageRecord->CanEditType = 'LoggedInUsers'; $deletedFromStageRecord->write(); $deletedFromStageRecord->PublisherGroups()->add($custompublishersgroup); $deletedFromStageRecord->doPublish(); $deletedFromStageRecordID = $deletedFromStageRecord->ID; $deletedFromStageRecord->deleteFromStage('Stage'); $deletedFromStageRecord = Versioned::get_one_by_stage("SiteTree", "Live", "{$bt}SiteTree{$bt}.{$bt}ID{$bt} = {$deletedFromStageRecordID}"); $changedOnStageRecord = new Page(); $changedOnStageRecord->CanEditType = 'LoggedInUsers'; $changedOnStageRecord->write(); $changedOnStageRecord->publish('Stage', 'Live'); $changedOnStageRecord->Content = 'Changed on Stage'; $changedOnStageRecord->write(); $changedOnStageRecord->PublisherGroups()->add($custompublishersgroup); // test "publish" action for author $this->session()->inst_set('loggedInAs', $customauthor->ID); $this->assertNotContains('action_publish', $unpublishedRecord->getCMSActions()->column('Name'), 'Author cant trigger publish button'); $this->assertNotContains('action_publish', $publishedRecord->getCMSActions()->column('Name'), 'Author cant trigger publish button'); $this->assertNotContains('action_publish', $deletedFromLiveRecord->getCMSActions()->column('Name'), 'Author cant trigger publish button'); $this->assertNotContains('action_publish', $changedOnStageRecord->getCMSActions()->column('Name'), 'Author cant trigger publish button'); // test "publish" action for publisher $this->session()->inst_set('loggedInAs', $custompublisher->ID); WorkflowRequest::set_force_publishers_to_use_workflow(false); $this->assertContains('action_publish', $unpublishedRecord->getCMSActions()->column('Name'), 'Publisher cant trigger publish button'); $this->assertContains('action_publish', $publishedRecord->getCMSActions()->column('Name'), 'Publisher cant trigger publish button'); $this->assertContains('action_publish', $changedOnStageRecord->getCMSActions()->column('Name'), 'Publisher cant trigger publish button'); WorkflowRequest::set_force_publishers_to_use_workflow(true); $this->assertFalse(in_array('action_publish', $unpublishedRecord->getCMSActions()->column('Name')), 'Publisher can trigger publish button even when forced to use workflow'); $this->assertFalse(in_array('action_publish', $publishedRecord->getCMSActions()->column('Name')), 'Publisher can trigger publish button even when forced to use workflow'); $this->assertFalse(in_array('action_publish', $changedOnStageRecord->getCMSActions()->column('Name')), 'Publisher can trigger publish button even when forced to use workflow'); // test "request publication" action for author $this->session()->inst_set('loggedInAs', $customauthor->ID); $this->assertContains('action_cms_requestpublication', $unpublishedRecord->getCMSActions()->column('Name'), 'Author can trigger request publication button if page is not published'); $this->assertNotContains('action_cms_requestpublication', $publishedRecord->getCMSActions()->column('Name'), 'Author cant trigger request publication button if page has been published but not altered on stage'); $this->assertContains('action_cms_requestpublication', $changedOnStageRecord->getCMSActions()->column('Name'), 'Author can trigger request publication button if page has been changed on stage'); // test "request removal" action for author $this->session()->inst_set('loggedInAs', $customauthor->ID); $this->assertNotContains('action_cms_requestdeletefromlive', $unpublishedRecord->getCMSActions()->column('Name'), 'Author cant trigger request removal button if page hasnt been altered'); $this->assertNotContains('action_cms_requestdeletefromlive', $publishedRecord->getCMSActions()->column('Name'), 'Author cant trigger request removal button if page has been published but not altered on stage'); $this->assertNotContains('action_cms_requestdeletefromlive', $changedOnStageRecord->getCMSActions()->column('Name'), 'Author cant trigger request removal button if page has been changed on stage but not deleted from stage'); // test "request removal" action for publisher $this->session()->inst_set('loggedInAs', $custompublisher->ID); // reset login $this->session()->inst_set('loggedInAs', null); }