CMSProfileControllerTest.php
2.67 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
<?php
/**
 * @package framework
 * @subpackage tests
 */
class CMSProfileControllerTest extends FunctionalTest {
	protected static $fixture_file = 'CMSProfileControllerTest.yml';
	public $autoFollowRedirection = false;
	public function testMemberCantEditAnother() {
		$member = $this->objFromFixture('Member', 'user1');
		$anotherMember = $this->objFromFixture('Member', 'user2');
		$this->session()->inst_set('loggedInAs', $member->ID);
		$response = $this->post('admin/myprofile/EditForm', array(
			'action_save' => 1,
			'ID' => $anotherMember->ID,
			'FirstName' => 'JoeEdited',
			'Surname' => 'BloggsEdited',
			'Email' => $member->Email,
			'Locale' => $member->Locale,
			'Password[_Password]' => 'password',
			'Password[_ConfirmPassword]' => 'password',
		));
		$anotherMember = $this->objFromFixture('Member', 'user2');
		$this->assertNotEquals($anotherMember->FirstName, 'JoeEdited', 'FirstName field stays the same');
	}
	public function testMemberEditsOwnProfile() {
		$member = $this->objFromFixture('Member', 'user1');
		$this->session()->inst_set('loggedInAs', $member->ID);
		$response = $this->post('admin/myprofile/EditForm', array(
			'action_save' => 1,
			'ID' => $member->ID,
			'FirstName' => 'JoeEdited',
			'Surname' => 'BloggsEdited',
			'Email' => $member->Email,
			'Locale' => $member->Locale,
			'Password[_Password]' => 'password',
			'Password[_ConfirmPassword]' => 'password',
		));
		$member = $this->objFromFixture('Member', 'user1');
		$this->assertEquals($member->FirstName, 'JoeEdited', 'FirstName field was changed');
	}
	public function testExtendedPermissionsStopEditingOwnProfile() {
		$existingExtensions = Config::inst()->get('Member', 'extensions');
		Config::inst()->update('Member', 'extensions', array('CMSProfileControllerTestExtension'));
		$member = $this->objFromFixture('Member', 'user1');
		$this->session()->inst_set('loggedInAs', $member->ID);
		$response = $this->post('admin/myprofile/EditForm', array(
			'action_save' => 1,
			'ID' => $member->ID,
			'FirstName' => 'JoeEdited',
			'Surname' => 'BloggsEdited',
			'Email' => $member->Email,
			'Locale' => $member->Locale,
			'Password[_Password]' => 'password',
			'Password[_ConfirmPassword]' => 'password',
		));
		$member = $this->objFromFixture('Member', 'user1');
		$this->assertNotEquals($member->FirstName, 'JoeEdited',
			'FirstName field was NOT changed because we modified canEdit');
		Config::inst()->remove('Member', 'extensions');
		Config::inst()->update('Member', 'extensions', $existingExtensions);
	}
}
/**
 * @package framework
 * @subpackage tests
 */
class CMSProfileControllerTestExtension extends DataExtension {
	public function canEdit($member = null) {
		return false;
	}
}