function NodeAdminTest::testContentAdminPageWithLimitedContentViewer

Tests that the content overview page does not filter out nodes.

File

core/modules/node/tests/src/Functional/NodeAdminTest.php, line 246

Class

NodeAdminTest

Tests node administration page functionality.

Namespace

Code

public function testContentAdminPageWithLimitedContentViewer() : void {
  \Drupal::service('module_installer')->install([
    'node_access_test',
  ]);
  $this->addPrivateField(NodeType::load('page'));
  node_access_rebuild();
  $role_id = $this->drupalCreateRole([
    'access content overview',
    'view own unpublished content',
    'node test view',
  ]);
  $viewer_user = $this->drupalCreateUser(values: [
    'roles' => [
      $role_id,
    ],
  ]);
  // Create published and unpublished content authored by an administrator and
  // the viewer user.
  $nodes_visible = [];
  $nodes_visible[] = $this->drupalCreateNode([
    'type' => 'page',
    'uid' => $this->adminUser
      ->id(),
    'title' => 'Published page by admin',
  ]);
  $nodes_visible[] = $this->drupalCreateNode([
    'type' => 'page',
    'uid' => $viewer_user->id(),
    'title' => 'Published own page',
  ]);
  $nodes_visible[] = $this->drupalCreateNode([
    'type' => 'page',
    'uid' => $this->adminUser
      ->id(),
    'title' => 'Published private page by admin',
    'private' => [
      'value' => 1,
    ],
  ]);
  $nodes_visible[] = $this->drupalCreateNode([
    'type' => 'page',
    'uid' => $viewer_user->id(),
    'title' => 'Published own private page',
    'private' => [
      'value' => 1,
    ],
  ]);
  $nodes_visible[] = $this->drupalCreateNode([
    'type' => 'page',
    'uid' => $viewer_user->id(),
    'title' => 'Unpublished own page',
    'status' => NodeInterface::NOT_PUBLISHED,
  ]);
  $nodes_visible[] = $this->drupalCreateNode([
    'type' => 'page',
    'uid' => $viewer_user->id(),
    'title' => 'Unpublished own private page',
    'status' => NodeInterface::NOT_PUBLISHED,
    'private' => [
      'value' => 1,
    ],
  ]);
  $nodes_visible[] = $this->drupalCreateNode([
    'type' => 'page',
    'uid' => $this->adminUser
      ->id(),
    'title' => 'Unpublished private page by admin',
    'status' => NodeInterface::NOT_PUBLISHED,
    'private' => [
      'value' => 1,
    ],
  ]);
  $this->drupalLogin($viewer_user);
  // Confirm the current user has limited privileges.
  $admin_permissions = [
    'administer nodes',
    'bypass node access',
  ];
  foreach ($admin_permissions as $admin_permission) {
    $this->assertFalse(\Drupal::service('current_user')->hasPermission($admin_permission), sprintf('The current user does not have "%s" permission.', $admin_permission));
  }
  // Confirm that the nodes are visible to the less privileged user.
  foreach ($nodes_visible as $node) {
    self::assertTrue($node->access('view', $viewer_user));
    $this->drupalGet('admin/content');
    $this->assertSession()
      ->linkByHrefExists('node/' . $node->id(), 0, sprintf('The "%s" node is visible on the admin/content page.', $node->getTitle()));
  }
  // Without the "node test view" permission the unpublished page of the
  // admin user is not visible.
  $this->drupalLogin($this->drupalCreateUser(values: [
    'roles' => [
      $this->drupalCreateRole([
        'access content overview',
        'view own unpublished content',
      ]),
    ],
  ]));
  $unpublished_node_by_admin = $this->drupalCreateNode([
    'type' => 'page',
    'uid' => $this->adminUser
      ->id(),
    'title' => 'Unpublished page by admin',
    'status' => 0,
  ]);
  self::assertFalse($unpublished_node_by_admin->access('view'));
  $this->drupalGet('admin/content');
  $this->assertSession()
    ->linkByHrefNotExists('node/' . $unpublished_node_by_admin->id());
}