ilRBACTest Class Reference

Unit tests for tree table needsInstalledILIAS. More...

Inheritance diagram for ilRBACTest:

Collaboration diagram for ilRBACTest:

Public Member Functions
	testRbacFA ()
	RBAC FA tests IL_Init. More...
	testRbacUA ()
	test rbac_ua IL_Init More...
	testRbacTA ()
	rbac ta test IL_Init More...
	testRbacPA ()
	test rbac_pa IL_Init More...
	testConditions ()
	test preconditions IL_Init More...
	testCache ()
	IL_Init More...
	testAssignUser ()
	Test Assign User Method DB: rbac_ua. More...
	testDeassignUser ()
	Test deassign user Method DB: rbac_ua. More...
	testGrantPermission ()
	Test grant Permission Method DB: rbac_pa. More...
	testRevokePermission ()
	Test revoke Permission Method DB: rbac_pa. More...
	testRevokeSubtreePermissions ()
	Test revokeSubtreePermissions Method DB: rbac_pa. More...
	testRevokePermissionList ()
	Test revokePermissionList Method DB: rbac_pa. More...
	testSetRolePermission ()
	Test Set Role Permission Method DB: rbac_template. More...
	testDeleteRolePermission ()
	Test Delete Role Permission Method DB: rbac_template. More...
	testCopyRoleTemplatePermissions ()
	Test Copy Role Template Permission Method DB: rbac_template. More...
	testCopyRolePermissions ()
	Test Method DB: rbac_template DB: rbac_pa. More...
	testCopyRolePermissionIntersection ()
	Test Copy Role Permission Intersection Method DB: rbac_template. More...
	testCopyRolePermissionUnion ()
	Test Copy Role Permission Union Method DB: rbac_template. More...
	testCopyRolePermissionSubtract ()
	Test Copy Role Permission Subtract Method DB: rbac_template. More...
	testAssignOperationToObject ()
	Test assignOperationToObject Method DB: rbac_ta. More...
	testDeassignOperationFromObject ()
	Test deassignOperationFromObject Method ilRbacReview $rbacreview ilRbacAdmin $rbacadmin testAssignOperationToObject. More...

Protected Member Functions
	setUp ()

Protected Attributes
	$backupGlobals = false

Detailed Description

Unit tests for tree table needsInstalledILIAS.

Author

Stefan Meyer meyer.nosp@m.@lei.nosp@m.fos.c.nosp@m.om

Version

$Id$

Definition at line 36 of file ilRBACTest.php.

Member Function Documentation

setUp()

ilRBACTest::setUp ( )

protected

Definition at line 40 of file ilRBACTest.php.

                               : void
    {
        include_once("./Services/PHPUnit/classes/class.ilUnitUtil.php");
        ilUnitUtil::performInitialisation();
    }

testAssignOperationToObject()

ilRBACTest::testAssignOperationToObject

(

)

Test assignOperationToObject Method DB: rbac_ta.

ilRbacReview $rbacreview ilRbacAdmin $rbacadmin

Definition at line 702 of file ilRBACTest.php.

References $DIC.

    {
        global $DIC;

        $rbacreview = $DIC['rbacreview'];
        $rbacadmin = $DIC['rbacadmin'];

        $rbacadmin->assignOperationToObject(1001, 10);
        $rbacadmin->assignOperationToObject(1001, 20);

        $this->assertEquals($rbacreview->getOperationsOnType(1001), array(10,20));
    }

testAssignUser()

ilRBACTest::testAssignUser

(

)

Test Assign User Method DB: rbac_ua.

ilRbacReview $rbacreview ilRbacAdmin $rbacadmin

Definition at line 200 of file ilRBACTest.php.

References $DIC.

    {
        global $DIC;

        $rbacreview = $DIC['rbacreview'];
        $rbacadmin = $DIC['rbacadmin'];
        //assign User 15 to role 10
        $rbacadmin->assignUser(10, 15);

        $this->assertTrue($rbacreview->isAssigned(15, 10));

        //Test double assign
        $rbacadmin->assignUser(10, 15);
    }

testCache()

ilRBACTest::testCache

(

)

IL_Init

Definition at line 180 of file ilRBACTest.php.

References $res.

    {
        include_once './Services/AccessControl/classes/class.ilAccessHandler.php';
        
        $handler = new ilAccessHandler();
        $handler->setResults(array(1,2,3));
        $handler->storeCache();
        $handler->readCache();
        $res = $handler->getResults();
        
        $this->assertEquals(array(1,2,3), $res);
    }

testConditions()

ilRBACTest::testConditions

(

)

test preconditions IL_Init

Parameters

Definition at line 144 of file ilRBACTest.php.

References ilConditionHandler\_deleteTargetConditionsByRefId(), ilConditionHandler\_getCondition(), ilConditionHandler\_getDistinctTargetRefIds(), ilConditionHandler\_getPersistedConditionsOfTarget(), and ilConditionHandler\_getPersistedConditionsOfTrigger().

    {
        include_once './Services/Conditions/classes/class.ilConditionHandler.php';
        
        ilConditionHandler::_getDistinctTargetRefIds();
        ilConditionHandler::_deleteTargetConditionsByRefId(1);
        
        $handler = new ilConditionHandler();
        $handler->setTargetRefId(99999);
        $handler->setTargetObjId(99998);
        $handler->setTargetType('xxx');
        $handler->setTriggerRefId(99997);
        $handler->setTriggerObjId(99996);
        $handler->setTriggerType('yyy');
        $handler->setReferenceHandlingType(0);
        $handler->enableAutomaticValidation(false);
        $suc = $handler->storeCondition();
        $this->assertEquals($suc, true);
        
        $suc = $handler->checkExists();
        $this->assertEquals($suc, false);
        
        $suc = $handler->delete(99999);
        $this->assertEquals($suc, true);
        
        // syntax check
        $handler->deleteByObjId(-1);
        $handler->deleteCondition(-1);
        ilConditionHandler::_getPersistedConditionsOfTrigger(-1, -1);
        ilConditionHandler::_getPersistedConditionsOfTarget(-1, -1);
        ilConditionHandler::_getCondition(-1);
    }

Here is the call graph for this function:

testCopyRolePermissionIntersection()

ilRBACTest::testCopyRolePermissionIntersection

(

)

Test Copy Role Permission Intersection Method DB: rbac_template.

ilRbacReview $rbacreview ilRbacAdmin $rbacadmin testSetRolePermission

Definition at line 576 of file ilRBACTest.php.

References $DIC.

    {
        global $DIC;

        $rbacreview = $DIC['rbacreview'];
        $rbacadmin = $DIC['rbacadmin'];
        $rbacadmin->deleteTemplate(1010);
        $rbacadmin->deleteTemplate(2020);
        $rbacadmin->deleteTemplate(3030);

        $rbacadmin->setRolePermission(1010, "a", array(10,11,13,15), 1100);
        $rbacadmin->setRolePermission(2020, "a", array(11,12,13,16), 2200);

        $rbacadmin->setRolePermission(1010, "b", array(20,22,23,25), 1100);
        $rbacadmin->setRolePermission(2020, "b", array(20,23,24,26), 2200);

        $rbacadmin->setRolePermission(3030, "c", array(30,33), 3300);
        $rbacadmin->setRolePermission(3030, "a", array(30,33), 3300);
        $rbacadmin->setRolePermission(3030, "b", array(30,33), 3300);

        $rbacadmin->copyRolePermissionIntersection(1010, 1100, 2020, 2200, 3300, 3030);

        $intersect = array("a" => array(11,13), "b" => array(20,23));
        $dest = $rbacreview->getAllOperationsOfRole(3030, 3300);

        //sort
        sort($dest["a"]);
        sort($dest["b"]);

        $this->assertEquals($intersect, $dest);

        $rbacadmin->deleteTemplate(1010);
        $rbacadmin->deleteTemplate(2020);
        $rbacadmin->deleteTemplate(3030);
    }

testCopyRolePermissions()

ilRBACTest::testCopyRolePermissions

(

)

Test Method DB: rbac_template DB: rbac_pa.

ilRbacReview $rbacreview ilRbacAdmin $rbacadmin testGrantPermission testRevokePermission testSetRolePermission

Definition at line 506 of file ilRBACTest.php.

References $DIC, $ilDB, XapiProxy\$req, and $type.

    {
        global $DIC;

        $rbacreview = $DIC['rbacreview'];
        $rbacadmin = $DIC['rbacadmin'];
        $ilDB = $DIC['ilDB'];

        $req = $ilDB->query("SELECT ref.ref_id FROM object_reference AS ref LEFT JOIN object_data AS data ON data.obj_id = ref.obj_id WHERE data.type='seas';");

        $seas = 0;

        while ($row = $ilDB->fetchAssoc($req)) {
            $seas = $row["ref_id"];
        }

        $req = $ilDB->query("SELECT ref.ref_id FROM object_reference AS ref LEFT JOIN object_data AS data ON data.obj_id = ref.obj_id WHERE data.type='mail';");

        $mail = 0;

        while ($row = $ilDB->fetchAssoc($req)) {
            $mail = $row["ref_id"];
        }

        $req = $ilDB->query("SELECT obj_id FROM object_data WHERE type='role';");
        $ilDB->fetchAssoc($req);//First role is protected. Dont use it!
        $role = $ilDB->fetchAssoc($req)["obj_id"];

        //save normal operations
        $opt_mail = $rbacreview->getActiveOperationsOfRole($mail, $role);
        $opt_seas = $rbacreview->getActiveOperationsOfRole($seas, $role);
        $opt_temp_seas = $rbacreview->getAllOperationsOfRole($role, $seas);
        $opt_temp_mail = $rbacreview->getAllOperationsOfRole($role, $mail);

        //set values
        $rbacadmin->setRolePermission($role, "mail", array(1,2,3,4,5), $mail);
        $rbacadmin->grantPermission($role, array(1,2,3,4,5), $mail);
        $rbacadmin->setRolePermission($role, "seas", array(5,6,7,8,9), $seas);
        $rbacadmin->grantPermission($role, array(5,6,7,8,9), $seas);

        $rbacadmin->copyRolePermissions($role, $seas, $mail, $role);
        $this->assertEquals(
            $rbacreview->getActiveOperationsOfRole($seas, $role),
            $rbacreview->getActiveOperationsOfRole($mail, $role)
        );

        //set normal operations
        $rbacadmin->grantPermission($role, $opt_seas, $seas);
        $rbacadmin->grantPermission($role, $opt_mail, $mail);

        $rbacadmin->deleteRolePermission($role, $mail);
        $rbacadmin->deleteRolePermission($role, $seas);

        foreach ($opt_temp_seas as $type => $opt) {
            $rbacadmin->setRolePermission($role, $type, $opt, $seas);
        }

        foreach ($opt_temp_mail as $type => $opt) {
            $rbacadmin->setRolePermission($role, $type, $opt, $mail);
        }
    }

testCopyRolePermissionSubtract()

ilRBACTest::testCopyRolePermissionSubtract

(

)

Test Copy Role Permission Subtract Method DB: rbac_template.

ilRbacReview $rbacreview ilRbacAdmin $rbacadmin testSetRolePermission

Definition at line 663 of file ilRBACTest.php.

References $DIC.

    {
        global $DIC;

        $rbacreview = $DIC['rbacreview'];
        $rbacadmin = $DIC['rbacadmin'];
        $rbacadmin->deleteTemplate(1010);
        $rbacadmin->deleteTemplate(2020);

        $rbacadmin->setRolePermission(1010, "a", array(10,11,13,15), 1100);
        $rbacadmin->setRolePermission(2020, "a", array(11,12,13,16), 2200);

        $rbacadmin->setRolePermission(1010, "b", array(20,22,23,25), 1100);
        $rbacadmin->setRolePermission(2020, "b", array(20,23,24,26), 2200);

        $rbacadmin->setRolePermission(2020, "c", array(30,33,34,35), 2200);

        $rbacadmin->copyRolePermissionSubtract(1010, 1100, 2020, 2200);

        $subtract = array("a" => array(12,16), "b" => array(24,26), "c" => array(30,33,34,35));
        $dest = $rbacreview->getAllOperationsOfRole(2020, 2200);

        sort($dest["a"]);
        sort($dest["b"]);
        sort($dest["c"]);

        $this->assertEquals($subtract, $dest);

        $rbacadmin->deleteTemplate(1010);
        $rbacadmin->deleteTemplate(2020);
    }

testCopyRolePermissionUnion()

ilRBACTest::testCopyRolePermissionUnion

(

)

Test Copy Role Permission Union Method DB: rbac_template.

ilRbacReview $rbacreview ilRbacAdmin $rbacadmin testCopyRoleTemplatePermissions testSetRolePermission

Definition at line 621 of file ilRBACTest.php.

References $DIC.

    {
        global $DIC;

        $rbacreview = $DIC['rbacreview'];
        $rbacadmin = $DIC['rbacadmin'];
        $rbacadmin->deleteTemplate(1010);
        $rbacadmin->deleteTemplate(2020);
        $rbacadmin->deleteTemplate(3030);

        $rbacadmin->setRolePermission(1010, "a", array(10,11,13,15), 1100);
        $rbacadmin->setRolePermission(2020, "a", array(11,12,13,16), 2200);

        $rbacadmin->setRolePermission(1010, "b", array(20,22,23,25), 1100);
        $rbacadmin->setRolePermission(2020, "b", array(20,23,24,26), 2200);

        $rbacadmin->setRolePermission(1010, "c", array(30,33,34,35), 1100);

        $rbacadmin->copyRolePermissionUnion(1010, 1100, 2020, 2200, 3030, 3300);

        $union = array("a" => array(10,11,12,13,15,16), "b" => array(20,22,23,24,25,26), "c" => array(30,33,34,35));
        $dest = $rbacreview->getAllOperationsOfRole(3030, 3300);

        sort($dest["a"]);
        sort($dest["b"]);
        sort($dest["c"]);

        $this->assertEquals($union, $dest);

        $rbacadmin->deleteTemplate(1010);
        $rbacadmin->deleteTemplate(2020);
        $rbacadmin->deleteTemplate(3030);
    }

testCopyRoleTemplatePermissions()

ilRBACTest::testCopyRoleTemplatePermissions

(

)

Test Copy Role Template Permission Method DB: rbac_template.

ilRbacReview $rbacreview ilRbacAdmin $rbacadmin testSetRolePermission

Definition at line 472 of file ilRBACTest.php.

References $DIC.

    {
        global $DIC;

        $rbacreview = $DIC['rbacreview'];
        $rbacadmin = $DIC['rbacadmin'];
        $rbacadmin->deleteTemplate(1010);
        $rbacadmin->deleteTemplate(2020);

        $rbacadmin->setRolePermission(1010, "blub", array(10,11), 1100);
        $rbacadmin->setRolePermission(2020, "bulb", array(20,22), 2200);

        $rbacadmin->copyRoleTemplatePermissions(1010, 1100, 2200, 2020);

        $one = $rbacreview->getAllOperationsOfRole(1010, 1100);
        $two = $rbacreview->getAllOperationsOfRole(2020, 2200);
        sort($one["blub"]);
        sort($two["blub"]);
        $this->assertEquals($one, $two);
        $rbacadmin->deleteTemplate(1010);
        $rbacadmin->deleteTemplate(2020);
    }

testDeassignOperationFromObject()

ilRBACTest::testDeassignOperationFromObject

(

)

Test deassignOperationFromObject Method ilRbacReview $rbacreview ilRbacAdmin $rbacadmin testAssignOperationToObject.

Definition at line 721 of file ilRBACTest.php.

References $DIC.

    {
        global $DIC;

        $rbacreview = $DIC['rbacreview'];
        $rbacadmin = $DIC['rbacadmin'];
        $rbacadmin->deassignOperationFromObject(1001, 10);

        $this->assertEquals($rbacreview->getOperationsOnType(1001), array(20));

        $rbacadmin->deassignOperationFromObject(1001, 20);

        $this->assertEmpty($rbacreview->getOperationsOnType(1001));
    }

testDeassignUser()

ilRBACTest::testDeassignUser

(

)

Test deassign user Method DB: rbac_ua.

ilRbacReview $rbacreview ilRbacAdmin $rbacadmin testAssignUser

Definition at line 223 of file ilRBACTest.php.

References $DIC.

    {
        global $DIC;

        $rbacreview = $DIC['rbacreview'];
        $rbacadmin = $DIC['rbacadmin'];
        //deassign User 15 from role 10
        $rbacadmin->deassignUser(10, 15);

        $this->assertFalse($rbacreview->isAssigned(15, 10));
    }

testDeleteRolePermission()

ilRBACTest::testDeleteRolePermission

(

)

Test Delete Role Permission Method DB: rbac_template.

ilRbacReview $rbacreview ilRbacAdmin $rbacadmin testSetRolePermission

Definition at line 434 of file ilRBACTest.php.

References $DIC.

    {
        global $DIC;

        $rbacreview = $DIC['rbacreview'];
        $rbacadmin = $DIC['rbacadmin'];
        $rbacadmin->deleteTemplate(1010);

        $rbacadmin->setRolePermission(1010, "a", array(10,11,13,15), 1100);
        $rbacadmin->setRolePermission(1010, "b", array(20,22,23,25), 1100);

        $rbacadmin->deleteRolePermission(1010, 1100);

        $this->assertEmpty($rbacreview->getAllOperationsOfRole(1010, 1100));

        $rbacadmin->setRolePermission(1010, "a", array(10,11,13,15), 1100);
        $rbacadmin->setRolePermission(1010, "b", array(20,22,23,25), 1100);

        $rbacadmin->deleteRolePermission(1010, 1100, "a");

        $assert = array("b" => array(20,22,23,25));
        $dest = $rbacreview->getAllOperationsOfRole(1010, 1100);

        sort($dest["b"]);

        $this->assertEquals($assert, $dest);

        $rbacadmin->deleteTemplate(1010);
    }

testGrantPermission()

ilRBACTest::testGrantPermission

(

)

Test grant Permission Method DB: rbac_pa.

ilRbacReview $rbacreview ilRbacAdmin $rbacadmin

Definition at line 242 of file ilRBACTest.php.

References $DIC.

    {
        global $DIC;

        $rbacreview = $DIC['rbacreview'];
        $rbacadmin = $DIC['rbacadmin'];
        //grant permissions 10,20 and 30 for role 10 on object 60
        $rbacadmin->grantPermission(10, array(10,20,30), 60);

        $this->assertEquals($rbacreview->getActiveOperationsOfRole(60, 10), array(10,20,30));
    }

testRbacFA()

ilRBACTest::testRbacFA

(

)

RBAC FA tests IL_Init.

Parameters

Definition at line 52 of file ilRBACTest.php.

References $DIC.

    {
        global $DIC;

        $rbacreview = $DIC['rbacreview'];
        $rbacadmin = $DIC['rbacadmin'];
        
        // Protected
        #$rbacadmin->setProtected(1,4,'y');
        #$prot = $rbacreview->isProtected(8,4);
        #$this->assertEquals($prot,true);
        #$rbacadmin->setProtected(1,4,'n');
        #$prot = $rbacreview->isProtected(8,4);
        #$this->assertEquals($prot,false);
        
        $rbacreview->getRoleListByObject(8);
        $rbacreview->getAssignableRoles();
        
        
        $ass = $rbacreview->isAssignable(4, 8);
        $this->assertEquals($ass, true);

        $roles = $rbacreview->getRolesOfObject(8);

        $obj = $rbacreview->getObjectOfRole(4);
        $this->assertEquals(8, $obj);
    }

testRbacPA()

ilRBACTest::testRbacPA

(

)

test rbac_pa IL_Init

Definition at line 125 of file ilRBACTest.php.

References $DIC.

    {
        global $DIC;

        $rbacreview = $DIC['rbacreview'];
        $rbacadmin = $DIC['rbacadmin'];
        
        $sess_ops = $rbacreview->getOperationsOnTypeString('cat');
        
        $rbacadmin->revokePermission(1, 4);
        $rbacadmin->grantPermission(4, array(2,3), 1);
    }

testRbacTA()

ilRBACTest::testRbacTA

(

)

rbac ta test IL_Init

Parameters

Definition at line 103 of file ilRBACTest.php.

References $DIC.

    {
        global $DIC;

        $rbacreview = $DIC['rbacreview'];
        $rbacadmin = $DIC['rbacadmin'];
        
        $sess_ops = $rbacreview->getOperationsOnTypeString('sess');
        
        $rbacadmin->assignOperationToObject($rbacreview->getTypeId('sess'), '7');
        //$new_sess_ops = $rbacreview->getOperationsOnTypeString('sess');
        //$this->assertEquals(array_merge($sess_ops,array(7)),$new_sess_ops);
        
        $rbacadmin->deassignOperationFromObject($rbacreview->getTypeId('sess'), '7');
        $new_sess_ops = $rbacreview->getOperationsOnTypeString('sess');
        $this->assertEquals($sess_ops, $new_sess_ops);
    }

testRbacUA()

ilRBACTest::testRbacUA

(

)

test rbac_ua IL_Init

Definition at line 84 of file ilRBACTest.php.

References $DIC, and ilUtil\_getObjectsByOperations().

    {
        global $DIC;

        $rbacreview = $DIC['rbacreview'];
        $rbacadmin = $DIC['rbacadmin'];
        
        $obj = ilUtil::_getObjectsByOperations('crs', 'join');
        
        $rbacreview->assignedUsers(4);
        $rbacreview->assignedRoles(6);
    }

Here is the call graph for this function:

testRevokePermission()

ilRBACTest::testRevokePermission

(

)

Test revoke Permission Method DB: rbac_pa.

ilRbacReview $rbacreview ilRbacAdmin $rbacadmin testGrantPermission

Definition at line 263 of file ilRBACTest.php.

References $DIC, $ilDB, and XapiProxy\$req.

    {
        global $DIC;

        $rbacreview = $DIC['rbacreview'];
        $rbacadmin = $DIC['rbacadmin'];
        $ilDB = $DIC['ilDB'];

        $req = $ilDB->query("SELECT ref.ref_id FROM object_reference AS ref LEFT JOIN object_data AS data ON data.obj_id = ref.obj_id WHERE data.type='seas';");

        $ref_id = 0;

        while ($row = $ilDB->fetchAssoc($req)) {
            $ref_id = $row["ref_id"];
        }

        $req = $ilDB->query("SELECT obj_id FROM object_data WHERE type='role';");
        $ilDB->fetchAssoc($req);//First role is protected. Dont use it!
        $role1 = $ilDB->fetchAssoc($req)["obj_id"];
        $role2 = $ilDB->fetchAssoc($req)["obj_id"];
        $role3 = $ilDB->fetchAssoc($req)["obj_id"];

        //save normal operations
        $opt1 = $rbacreview->getActiveOperationsOfRole($ref_id, $role1);
        $opt2 = $rbacreview->getActiveOperationsOfRole($ref_id, $role2);
        $opt3 = $rbacreview->getActiveOperationsOfRole($ref_id, $role3);

        $rbacadmin->grantPermission($role1, array(1,2,3,4,5), $ref_id);
        $rbacadmin->grantPermission($role2, array(1,2,3,4,5), $ref_id);
        //$this->assertEquals($rbacreview->getActiveOperationsOfRole($ref_id,$role1), array(1,2,3,4,5));
        //$this->assertEquals($rbacreview->getActiveOperationsOfRole($ref_id,$role2), array(1,2,3,4,5));
        $rbacadmin->revokePermission($ref_id);
        $this->assertEmpty($rbacreview->getActiveOperationsOfRole($ref_id, $role1));
        $this->assertEmpty($rbacreview->getActiveOperationsOfRole($ref_id, $role2));


        $rbacadmin->grantPermission($role1, array(1,2,3,4,5), $ref_id);
        //$this->assertEquals($rbacreview->getActiveOperationsOfRole($ref_id,$role1), array(1,2,3,4,5));
        $rbacadmin->revokePermission($ref_id, $role1);
        $this->assertEmpty($rbacreview->getActiveOperationsOfRole($ref_id, $role1));


        $rbacadmin->grantPermission($role2, array(1,2,3,4,5), $ref_id);
        $rbacadmin->grantPermission($role3, array(1,2,3,4,5), $ref_id);
        //$this->assertEquals($rbacreview->getActiveOperationsOfRole($ref_id,$role2), array(1,2,3,4,5));
        //$this->assertEquals($rbacreview->getActiveOperationsOfRole($ref_id,$role3), array(1,2,3,4,5));
        $rbacadmin->revokePermission($ref_id, 0, false);
        $this->assertEmpty($rbacreview->getActiveOperationsOfRole($ref_id, $role2));
        $this->assertEmpty($rbacreview->getActiveOperationsOfRole($ref_id, $role3));

        $rbacadmin->grantPermission($role3, array(1,2,3,4,5), $ref_id);
        //$this->assertEquals($rbacreview->getActiveOperationsOfRole($ref_id,$role3), array(1,2,3,4,5));
        $rbacadmin->revokePermission($ref_id, $role3, false);
        $this->assertEmpty($rbacreview->getActiveOperationsOfRole($ref_id, $role3));

        //set normal operations
        $rbacadmin->grantPermission($role1, $opt1, $ref_id);
        $rbacadmin->grantPermission($role2, $opt2, $ref_id);
        $rbacadmin->grantPermission($role3, $opt3, $ref_id);
    }

testRevokePermissionList()

ilRBACTest::testRevokePermissionList

(

)

Test revokePermissionList Method DB: rbac_pa.

ilRbacReview $rbacreview ilRbacAdmin $rbacadmin testGrantPermission

Definition at line 378 of file ilRBACTest.php.

References $DIC.

    {
        global $DIC;

        $rbacreview = $DIC['rbacreview'];
        $rbacadmin = $DIC['rbacadmin'];
        $list = array(1001, 1003, 1005, 1007);

        foreach ($list as $id) {
            $rbacadmin->grantPermission(123, array(1,2,3,4,5), $id);
        }

        $rbacadmin->revokePermissionList($list, 123);

        foreach ($list as $id) {
            $this->assertEmpty($rbacreview->getActiveOperationsOfRole($id, 123));
        }
    }

testRevokeSubtreePermissions()

ilRBACTest::testRevokeSubtreePermissions

(

)

Test revokeSubtreePermissions Method DB: rbac_pa.

ilRbacReview $rbacreview ilRbacAdmin $rbacadmin testGrantPermission

Definition at line 332 of file ilRBACTest.php.

References $DIC, $ilDB, and XapiProxy\$req.

    {
        global $DIC;

        $rbacreview = $DIC['rbacreview'];
        $rbacadmin = $DIC['rbacadmin'];
        $tree = $DIC['tree'];
        $ilDB = $DIC['ilDB'];
        $req = $ilDB->query("SELECT ref.ref_id FROM object_reference AS ref LEFT JOIN object_data AS data ON data.obj_id = ref.obj_id WHERE data.type='adm';");

        $ref_id = 0;

        while ($row = $ilDB->fetchAssoc($req)) {
            $ref_id = $row["ref_id"];
        }

        $childs = $tree->getChildIds($ref_id);

        $req = $ilDB->query("SELECT obj_id FROM object_data WHERE type='role';");
        $ilDB->fetchAssoc($req);//First role is protected. Dont use it!
        $role = $ilDB->fetchAssoc($req)["obj_id"];

        $ops = array();

        foreach ($childs as $id) {
            $ops[$id] = $rbacreview->getActiveOperationsOfRole($id, $role);//save normal operations
            $rbacadmin->grantPermission($role, array(1,2,3,4,5), $id);
            //$this->assertEquals($rbacreview->getActiveOperationsOfRole($id,$role), array(1,2,3,4,5));
        }

        $rbacadmin->revokeSubtreePermissions($ref_id, $role);

        foreach ($childs as $id) {
            $this->assertEmpty($rbacreview->getActiveOperationsOfRole($id, $role));
            $rbacadmin->grantPermission($role, $ops[$id], $id);//set normal operations
        }
    }

testSetRolePermission()

ilRBACTest::testSetRolePermission

(

)

Test Set Role Permission Method DB: rbac_template.

ilRbacReview $rbacreview ilRbacAdmin $rbacadmin

Definition at line 404 of file ilRBACTest.php.

References $DIC.

    {
        global $DIC;

        $rbacreview = $DIC['rbacreview'];
        $rbacadmin = $DIC['rbacadmin'];
        $rbacadmin->deleteTemplate(1010);

        $rbacadmin->setRolePermission(1010, "a", array(10,11,13,15), 1100);
        $rbacadmin->setRolePermission(1010, "b", array(20,22,23,25), 1100);

        $assert = array("a" => array(10,11,13,15),"b" => array(20,22,23,25));
        $dest = $rbacreview->getAllOperationsOfRole(1010, 1100);

        sort($dest["a"]);
        sort($dest["b"]);

        $this->assertEquals($assert, $dest);

        $rbacadmin->deleteTemplate(1010);
    }

Field Documentation

$backupGlobals

ilRBACTest::$backupGlobals = false

protected

Definition at line 38 of file ilRBACTest.php.

---

The documentation for this class was generated from the following file:

• Services/AccessControl/test/ilRBACTest.php