public function testFactoryGeneratesBlacklistAclFromConfiguration()
{
$config = ['deny_by_default' => true, ['resource' => 'ZendCon\\V1\\Rest\\Session\\Controller::collection', 'privileges' => ['GET']], ['resource' => 'ZendCon\\V1\\Rest\\Session\\Controller::entity', 'privileges' => ['GET']], ['resource' => 'ZendCon\\V1\\Rpc\\Message\\Controller::message', 'privileges' => ['GET']]];
$acl = AclAuthorizationFactory::factory($config);
$this->assertInstanceOf('ZF\\MvcAuth\\Authorization\\AclAuthorization', $acl);
$this->assertInstanceOf('Zend\\Permissions\\Acl\\Acl', $acl);
$this->assertTrue($acl->hasRole('guest'));
$this->assertFalse($acl->hasRole('authenticated'));
// Add a non-guest role to the ACL
$acl->addRole('authenticated');
// Test access to a collection that has ACLs in place
$this->assertTrue($acl->isAllowed('authenticated', 'ZendCon\\V1\\Rest\\Session\\Controller::collection', 'POST'));
$this->assertTrue($acl->isAllowed('authenticated', 'ZendCon\\V1\\Rest\\Session\\Controller::collection', 'GET'));
$this->assertFalse($acl->isAllowed('guest', 'ZendCon\\V1\\Rest\\Session\\Controller::collection', 'POST'));
$this->assertTrue($acl->isAllowed('guest', 'ZendCon\\V1\\Rest\\Session\\Controller::collection', 'GET'));
// Test access to a resource that has ACLs in place
$this->assertTrue($acl->isAllowed('authenticated', 'ZendCon\\V1\\Rest\\Session\\Controller::entity', 'PATCH'));
$this->assertTrue($acl->isAllowed('authenticated', 'ZendCon\\V1\\Rest\\Session\\Controller::entity', 'GET'));
$this->assertFalse($acl->isAllowed('guest', 'ZendCon\\V1\\Rest\\Session\\Controller::entity', 'POST'));
$this->assertTrue($acl->isAllowed('guest', 'ZendCon\\V1\\Rest\\Session\\Controller::entity', 'GET'));
// Test access to an RPC service that has ACLs in place
$this->assertTrue($acl->isAllowed('authenticated', 'ZendCon\\V1\\Rpc\\Message\\Controller::message', 'POST'));
$this->assertTrue($acl->isAllowed('authenticated', 'ZendCon\\V1\\Rpc\\Message\\Controller::message', 'GET'));
$this->assertFalse($acl->isAllowed('guest', 'ZendCon\\V1\\Rpc\\Message\\Controller::message', 'POST'));
$this->assertTrue($acl->isAllowed('guest', 'ZendCon\\V1\\Rpc\\Message\\Controller::message', 'GET'));
}
/**
* Generate the ACL instance based on the zf-mvc-auth "authorization" configuration
*
* Consumes the AclFactory in order to create the AclAuthorization instance.
*
* @param array $config
* @return AclAuthorization
*/
protected function createAclFromConfig(array $config)
{
$aclConfig = [];
$denyByDefault = false;
if (array_key_exists('deny_by_default', $config)) {
$denyByDefault = $aclConfig['deny_by_default'] = (bool) $config['deny_by_default'];
unset($config['deny_by_default']);
}
foreach ($config as $controllerService => $privileges) {
$this->createAclConfigFromPrivileges($controllerService, $privileges, $aclConfig, $denyByDefault);
}
return AclFactory::factory($aclConfig);
}