[Summary view] [Print] [Text view]

   1  <?php
   2  
   3  /**
   4   * @group core
   5   * @group caps
   6   */
   7  class BP_Tests_Core_Caps extends BP_UnitTestCase {
   8      protected $reset_user_id;
   9      protected $blog_id;
  10  
  11  	public function setUp() {
  12          parent::setUp();
  13  
  14          $this->reset_user_id = get_current_user_id();
  15  
  16          if ( is_multisite() ) {
  17              $this->blog_id = self::factory()->blog->create();
  18          }
  19      }
  20  
  21  	public function tearDown() {
  22          parent::tearDown();
  23  
  24          $this->set_current_user( $this->reset_user_id );
  25      }
  26  
  27      public function test_bp_current_user_can_should_interpret_integer_second_param_as_a_blog_id() {
  28          if ( ! is_multisite() ) {
  29              $this->markTestSkipped( __METHOD__ . ' requires multisite.' );
  30          }
  31  
  32          $b = self::factory()->blog->create();
  33          $u = self::factory()->user->create();
  34  
  35          $this->set_current_user( $u );
  36  
  37          add_filter( 'user_has_cap', array( $this, 'grant_cap_foo' ), 10, 2 );
  38          $can  = bp_current_user_can( 'foo', bp_get_root_blog_id() );
  39          $cant = bp_current_user_can( 'foo', $b );
  40          remove_filter( 'user_has_cap', array( $this, 'grant_cap_foo' ), 10 );
  41  
  42          $this->assertTrue( $can );
  43          $this->assertFalse( $cant );
  44      }
  45  
  46      /**
  47       * @ticket BP6501
  48       */
  49      public function test_bp_current_user_can_should_respect_blog_id_passed_in_args_array() {
  50          if ( ! is_multisite() ) {
  51              $this->markTestSkipped( __METHOD__ . ' requires multisite.' );
  52          }
  53  
  54          $b = self::factory()->blog->create();
  55          $u = self::factory()->user->create();
  56  
  57          $this->set_current_user( $u );
  58  
  59          add_filter( 'user_has_cap', array( $this, 'grant_cap_foo' ), 10, 2 );
  60          $can  = bp_current_user_can( 'foo', array( 'blog_id' => bp_get_root_blog_id() ) );
  61          $cant = bp_current_user_can( 'foo', array( 'blog_id' => $b ) );
  62          remove_filter( 'user_has_cap', array( $this, 'grant_cap_foo' ), 10 );
  63  
  64          $this->assertTrue( $can );
  65          $this->assertFalse( $cant );
  66      }
  67  
  68  	public function grant_cap_foo( $allcaps, $caps ) {
  69          if ( bp_is_root_blog() ) {
  70              $allcaps['foo'] = 1;
  71          }
  72  
  73          return $allcaps;
  74      }
  75  
  76  	public function check_cap_args( $caps, $cap, $user_id, $args ) {
  77          $this->test_args = $args;
  78          return $caps;
  79      }
  80  
  81      /**
  82       * @group bp_moderate
  83       */
  84  	public function test_administrator_can_bp_moderate() {
  85          $u = self::factory()->user->create(
  86              array(
  87                  'role' => 'administrator',
  88              )
  89          );
  90  
  91          $this->set_current_user( $u );
  92  
  93          $this->assertTrue( bp_current_user_can( 'bp_moderate' ), 'Administrator can `bp_moderate` on default WordPress config' );
  94      }
  95  
  96      /**
  97       * @group bp_moderate
  98       */
  99      public function test_role_with_manage_options_cap_can_bp_moderate() {
 100          add_role( 'random_role', 'Random Role', array( 'manage_options' => true ) );
 101  
 102          // Reset roles.
 103          wp_roles()->init_roles();
 104  
 105          $u = self::factory()->user->create(
 106              array(
 107                  'role' => 'random_role',
 108              )
 109          );
 110  
 111          $this->set_current_user( $u );
 112  
 113          $this->assertTrue( bp_current_user_can( 'bp_moderate' ), 'Users having a `manage_options` cap into their role can `bp_moderate`' );
 114  
 115          remove_role( 'random_role' );
 116      }
 117  
 118      /**
 119       * @group bp_moderate
 120       */
 121  	public function test_administrator_can_bp_moderate_emails() {
 122          $u1 = self::factory()->user->create(
 123              array(
 124                  'role' => 'administrator',
 125              )
 126          );
 127          $u2 = self::factory()->user->create(
 128              array(
 129                  'role' => 'administrator',
 130              )
 131          );
 132  
 133          $this->set_current_user( $u1 );
 134  
 135          $email = self::factory()->post->create(
 136              array(
 137                  'post_type'   => 'bp-email',
 138              )
 139          );
 140  
 141          $this->assertTrue( current_user_can( 'edit_post', $email ), 'Administrator should be able to edit emails they created' );
 142  
 143          $this->set_current_user( $u2 );
 144  
 145          $this->assertTrue( current_user_can( 'edit_post', $email ), 'Administrator should be able to edit emails others created when BuddyPress is not network activated' );
 146      }
 147  
 148      /**
 149       * @group bp_moderate
 150       */
 151      public function test_administrator_can_bp_moderate_network_activated() {
 152          if ( ! is_multisite() ) {
 153              $this->markTestSkipped( __METHOD__ . ' requires multisite.' );
 154          }
 155  
 156          $u1 = self::factory()->user->create(
 157              array(
 158                  'role' => 'administrator',
 159              )
 160          );
 161          grant_super_admin( $u1 );
 162  
 163          $u2 = self::factory()->user->create(
 164              array(
 165                  'role' => 'administrator',
 166              )
 167          );
 168  
 169          add_filter( 'bp_is_network_activated', '__return_true' );
 170  
 171          // Swith & restore to reset the roles.
 172          switch_to_blog( $this->blog_id );
 173  
 174          $this->set_current_user( $u1 );
 175          $this->assertTrue( bp_current_user_can( 'bp_moderate' ), 'Only Super Admins can `bp_moderate` when BuddyPress is network activated' );
 176  
 177          $this->set_current_user( $u2 );
 178  
 179          $this->assertFalse( bp_current_user_can( 'bp_moderate' ), 'Regular Admins cannot `bp_moderate` when BuddyPress is network activated' );
 180  
 181          grant_super_admin( $u2 );
 182          $this->assertTrue( bp_current_user_can( 'bp_moderate' ), 'Only Super Admins can `bp_moderate` when BuddyPress is network activated' );
 183  
 184          restore_current_blog();
 185  
 186          remove_filter( 'bp_is_network_activated', '__return_true' );
 187      }
 188  
 189      /**
 190       * @group bp_moderate
 191       */
 192      public function test_administrator_can_bp_moderate_emails_network_activated() {
 193          if ( ! is_multisite() ) {
 194              $this->markTestSkipped( __METHOD__ . ' requires multisite.' );
 195          }
 196  
 197          $u1 = self::factory()->user->create(
 198              array(
 199                  'role' => 'administrator',
 200              )
 201          );
 202          grant_super_admin( $u1 );
 203  
 204          $u2 = self::factory()->user->create(
 205              array(
 206                  'role' => 'administrator',
 207              )
 208          );
 209  
 210          $email = self::factory()->post->create(
 211              array(
 212                  'post_type'   => 'bp-email',
 213              )
 214          );
 215  
 216          add_filter( 'bp_is_network_activated', '__return_true' );
 217  
 218          // Swith & restore to reset the roles.
 219          switch_to_blog( $this->blog_id );
 220          restore_current_blog();
 221  
 222          $this->set_current_user( $u1 );
 223          $this->assertTrue( current_user_can( 'edit_post', $email ), 'Super Admins should be able to edit emails they created' );
 224  
 225          $this->set_current_user( $u2 );
 226          $this->assertFalse( current_user_can( 'edit_post', $email ), 'Administrator should not be able to edit emails others created when BuddyPress is network activated' );
 227  
 228          grant_super_admin( $u2 );
 229          $this->assertTrue( current_user_can( 'edit_post', $email ), 'Super Admins should be able to edit emails others created' );
 230  
 231          remove_filter( 'bp_is_network_activated', '__return_true' );
 232      }
 233  }