Cutlery/invoiceninja
1
0
Fork 0
mirror of https://github.com/invoiceninja/invoiceninja.git synced 2025-07-09 03:14:30 -04:00
Code Issues Packages Projects Releases Wiki Activity

Update PermissionsCest.php

Browse Source
This commit is contained in:
David Bomba 2018-07-24 22:40:38 +10:00 committed by GitHub
parent f30eb2b574
commit 396d4dc535
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 120 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

119
tests/functional/PermissionsCest.php
View File

@ -288,4 +288,123 @@ class PermissionsCest
$I->seeResponseCodeIs(403);
}
/****
* Test the edge case with Invoice and Quote Permissions
*/
public function setQuoteOnlyPermissions(FunctionalTester $I)
{
$I->wantTo('create a quote view only permission user');
$permissions = [];
array_push($permissions, 'view_quote');
array_push($permissions, 'edit_quote');
array_push($permissions, 'create_quote');
$I->updateInDatabase('users',
['is_admin' => 0,
'permissions' => json_encode(array_diff(array_values($permissions),[0]))
],
['email' => Fixtures::get('permissions_username')]
);
}
public function testCreateInvoice(FunctionalTester $I)
{
$I->amOnPage('/invoices/create');
$I->seeResponseCodeIs(403);
}
/*
*
public function testViewInvoice(FunctionalTester $I)
{
$I->amOnPage('/invoices/1');
$I->seeResponseCodeIs(403);
}
public function testEditInvoice(FunctionalTester $I)
{
$I->amOnPage('/invoices/11/edit');
$I->seeResponseCodeIs(403);
}
*/
public function testCreateQuote(FunctionalTester $I)
{
$I->amOnPage('/quotes/create');
$I->seeResponseCodeIs(200);
}
public function testEditQuote(FunctionalTester $I)
{
$I->amOnPage('/quotes/1/edit');
$I->seeResponseCodeIs(200);
}
public function testViewQuote(FunctionalTester $I)
{
$I->amOnPage('/quotes/1');
$I->seeResponseCodeIs(200);
}
public function setInvoiceOnlyPermissions(FunctionalTester $I)
{
$I->wantTo('create a invoice view only permission user');
$permissions = [];
array_push($permissions, 'view_invoice');
array_push($permissions, 'edit_invoice');
array_push($permissions, 'create_invoice');
$I->updateInDatabase('users',
['is_admin' => 0,
'permissions' => json_encode(array_diff(array_values($permissions),[0]))
],
['email' => Fixtures::get('permissions_username')]
);
}
public function testCreateInvoiceOnly(FunctionalTester $I)
{
$I->amOnPage('/invoices/create');
$I->seeResponseCodeIs(200);
}
public function testViewInvoiceOnly(FunctionalTester $I)
{
$I->amOnPage('/invoices/1');
$I->seeResponseCodeIs(200);
}
public function testEditInvoiceOnly(FunctionalTester $I)
{
$I->amOnPage('/invoices/1/edit');
$I->seeResponseCodeIs(200);
}
public function testCreateQuoteOnly(FunctionalTester $I)
{
$I->amOnPage('/quotes/create');
$I->seeResponseCodeIs(403);
}
public function testEditQuoteOnly(FunctionalTester $I)
{
$I->amOnPage('/quotes/1/edit');
$I->seeResponseCodeIs(403);
}
public function testViewQuoteOnly(FunctionalTester $I)
{
$I->amOnPage('/quotes/1');
$I->seeResponseCodeIs(403);
}
}