summaryrefslogtreecommitdiffstats
path: root/Core/Tests/Authorization/AccessDecisionManagerTest.php
diff options
context:
space:
mode:
authorBernhard Schussek <bschussek@gmail.com>2013-09-16 10:03:00 +0200
committerFabien Potencier <fabien.potencier@gmail.com>2013-09-18 09:16:41 +0200
commit5a6aaab2c35213f5ca7e57f061fbb2675e2ece35 (patch)
tree461816fef8160401dc113d3fef190fb437d01cc7 /Core/Tests/Authorization/AccessDecisionManagerTest.php
parent513a354be10f0ed87933adcb788e48660f8e6ed4 (diff)
downloadsymfony-security-5a6aaab2c35213f5ca7e57f061fbb2675e2ece35.zip
symfony-security-5a6aaab2c35213f5ca7e57f061fbb2675e2ece35.tar.gz
symfony-security-5a6aaab2c35213f5ca7e57f061fbb2675e2ece35.tar.bz2
[Security] Split the component into 3 sub-components Core, ACL, HTTP
Diffstat (limited to 'Core/Tests/Authorization/AccessDecisionManagerTest.php')
-rw-r--r--Core/Tests/Authorization/AccessDecisionManagerTest.php159
1 files changed, 159 insertions, 0 deletions
diff --git a/Core/Tests/Authorization/AccessDecisionManagerTest.php b/Core/Tests/Authorization/AccessDecisionManagerTest.php
new file mode 100644
index 0000000..0353f99
--- /dev/null
+++ b/Core/Tests/Authorization/AccessDecisionManagerTest.php
@@ -0,0 +1,159 @@
+<?php
+
+/*
+ * This file is part of the Symfony package.
+ *
+ * (c) Fabien Potencier <fabien@symfony.com>
+ *
+ * For the full copyright and license information, please view the LICENSE
+ * file that was distributed with this source code.
+ */
+
+namespace Symfony\Component\Security\Core\Tests\Authorization;
+
+use Symfony\Component\Security\Core\Authorization\AccessDecisionManager;
+use Symfony\Component\Security\Core\Authorization\Voter\VoterInterface;
+
+class AccessDecisionManagerTest extends \PHPUnit_Framework_TestCase
+{
+ public function testSupportsClass()
+ {
+ $manager = new AccessDecisionManager(array(
+ $this->getVoterSupportsClass(true),
+ $this->getVoterSupportsClass(false),
+ ));
+ $this->assertTrue($manager->supportsClass('FooClass'));
+
+ $manager = new AccessDecisionManager(array(
+ $this->getVoterSupportsClass(false),
+ $this->getVoterSupportsClass(false),
+ ));
+ $this->assertFalse($manager->supportsClass('FooClass'));
+ }
+
+ public function testSupportsAttribute()
+ {
+ $manager = new AccessDecisionManager(array(
+ $this->getVoterSupportsAttribute(true),
+ $this->getVoterSupportsAttribute(false),
+ ));
+ $this->assertTrue($manager->supportsAttribute('foo'));
+
+ $manager = new AccessDecisionManager(array(
+ $this->getVoterSupportsAttribute(false),
+ $this->getVoterSupportsAttribute(false),
+ ));
+ $this->assertFalse($manager->supportsAttribute('foo'));
+ }
+
+ /**
+ * @expectedException InvalidArgumentException
+ */
+ public function testSetVotersEmpty()
+ {
+ $manager = new AccessDecisionManager(array());
+ }
+
+ /**
+ * @expectedException \InvalidArgumentException
+ */
+ public function testSetUnsupportedStrategy()
+ {
+ new AccessDecisionManager(array($this->getVoter(VoterInterface::ACCESS_GRANTED)), 'fooBar');
+ }
+
+ /**
+ * @dataProvider getStrategyTests
+ */
+ public function testStrategies($strategy, $voters, $allowIfAllAbstainDecisions, $allowIfEqualGrantedDeniedDecisions, $expected)
+ {
+ $token = $this->getMock('Symfony\Component\Security\Core\Authentication\Token\TokenInterface');
+ $manager = new AccessDecisionManager($voters, $strategy, $allowIfAllAbstainDecisions, $allowIfEqualGrantedDeniedDecisions);
+
+ $this->assertSame($expected, $manager->decide($token, array('ROLE_FOO')));
+ }
+
+ public function getStrategyTests()
+ {
+ return array(
+ // affirmative
+ array('affirmative', $this->getVoters(1, 0, 0), false, true, true),
+ array('affirmative', $this->getVoters(1, 2, 0), false, true, true),
+ array('affirmative', $this->getVoters(0, 1, 0), false, true, false),
+ array('affirmative', $this->getVoters(0, 0, 1), false, true, false),
+ array('affirmative', $this->getVoters(0, 0, 1), true, true, true),
+
+ // consensus
+ array('consensus', $this->getVoters(1, 0, 0), false, true, true),
+ array('consensus', $this->getVoters(1, 2, 0), false, true, false),
+ array('consensus', $this->getVoters(2, 1, 0), false, true, true),
+
+ array('consensus', $this->getVoters(0, 0, 1), false, true, false),
+
+ array('consensus', $this->getVoters(0, 0, 1), true, true, true),
+
+ array('consensus', $this->getVoters(2, 2, 0), false, true, true),
+ array('consensus', $this->getVoters(2, 2, 1), false, true, true),
+
+ array('consensus', $this->getVoters(2, 2, 0), false, false, false),
+ array('consensus', $this->getVoters(2, 2, 1), false, false, false),
+
+ // unanimous
+ array('unanimous', $this->getVoters(1, 0, 0), false, true, true),
+ array('unanimous', $this->getVoters(1, 0, 1), false, true, true),
+ array('unanimous', $this->getVoters(1, 1, 0), false, true, false),
+
+ array('unanimous', $this->getVoters(0, 0, 2), false, true, false),
+ array('unanimous', $this->getVoters(0, 0, 2), true, true, true),
+ );
+ }
+
+ protected function getVoters($grants, $denies, $abstains)
+ {
+ $voters = array();
+ for ($i = 0; $i < $grants; $i++) {
+ $voters[] = $this->getVoter(VoterInterface::ACCESS_GRANTED);
+ }
+ for ($i = 0; $i < $denies; $i++) {
+ $voters[] = $this->getVoter(VoterInterface::ACCESS_DENIED);
+ }
+ for ($i = 0; $i < $abstains; $i++) {
+ $voters[] = $this->getVoter(VoterInterface::ACCESS_ABSTAIN);
+ }
+
+ return $voters;
+ }
+
+ protected function getVoter($vote)
+ {
+ $voter = $this->getMock('Symfony\Component\Security\Core\Authorization\Voter\VoterInterface');
+ $voter->expects($this->any())
+ ->method('vote')
+ ->will($this->returnValue($vote));
+ ;
+
+ return $voter;
+ }
+
+ protected function getVoterSupportsClass($ret)
+ {
+ $voter = $this->getMock('Symfony\Component\Security\Core\Authorization\Voter\VoterInterface');
+ $voter->expects($this->any())
+ ->method('supportsClass')
+ ->will($this->returnValue($ret));
+ ;
+
+ return $voter;
+ }
+
+ protected function getVoterSupportsAttribute($ret)
+ {
+ $voter = $this->getMock('Symfony\Component\Security\Core\Authorization\Voter\VoterInterface');
+ $voter->expects($this->any())
+ ->method('supportsAttribute')
+ ->will($this->returnValue($ret));
+ ;
+
+ return $voter;
+ }
+}