<?php
namespace Drupal\Tests\paragraphs\Functional\WidgetLegacy;
use Drupal\Core\Entity\Entity\EntityFormDisplay;
use Drupal\image\Entity\ImageStyle;
use Drupal\language\Entity\ConfigurableLanguage;
use Drupal\Tests\field_ui\Traits\FieldUiTestTrait;
use Drupal\user\RoleInterface;
class ParagraphsAccessTest extends ParagraphsTestBase {
use FieldUiTestTrait;
protected static $modules = array(
'content_translation',
'image',
'field',
'field_ui',
'block',
'language',
'node',
);
protected function setUp() : void {
parent::setUp();
ConfigurableLanguage::create([
'id' => 'de',
'label' => '1German',
])
->save();
ConfigurableLanguage::create([
'id' => 'fr',
'label' => '2French',
])
->save();
$this
->addParagraphedContentType('paragraphed_content_demo', 'field_paragraphs_demo');
$this
->loginAsAdmin([
'administer site configuration',
'administer content translation',
'administer languages',
]);
$this
->addParagraphsType('nested_paragraph');
$this
->addParagraphsField('nested_paragraph', 'field_paragraphs_demo', 'paragraph');
$this
->addParagraphsType('images');
static::fieldUIAddNewField('admin/structure/paragraphs_type/images', 'images_demo', 'Images', 'image', [
'cardinality' => -1,
], [
'settings[alt_field]' => FALSE,
]);
$this
->addParagraphsType('text_image');
static::fieldUIAddNewField('admin/structure/paragraphs_type/text_image', 'image_demo', 'Images', 'image', [
'cardinality' => -1,
], [
'settings[alt_field]' => FALSE,
]);
static::fieldUIAddNewField('admin/structure/paragraphs_type/text_image', 'text_demo', 'Text', 'text_long', [], []);
$this
->addParagraphsType('text');
static::fieldUIAddExistingField('admin/structure/paragraphs_type/text', 'field_text_demo', 'Text', []);
$edit = [
'entity_types[node]' => TRUE,
'entity_types[paragraph]' => TRUE,
'settings[node][paragraphed_content_demo][translatable]' => TRUE,
'settings[node][paragraphed_content_demo][fields][field_paragraphs_demo]' => FALSE,
'settings[paragraph][images][translatable]' => TRUE,
'settings[paragraph][text_image][translatable]' => TRUE,
'settings[paragraph][text][translatable]' => TRUE,
'settings[paragraph][nested_paragraph][translatable]' => TRUE,
'settings[paragraph][nested_paragraph][fields][field_paragraphs_demo]' => FALSE,
'settings[paragraph][nested_paragraph][settings][language][language_alterable]' => TRUE,
'settings[paragraph][images][fields][field_images_demo]' => TRUE,
'settings[paragraph][text_image][fields][field_image_demo]' => TRUE,
'settings[paragraph][text_image][fields][field_text_demo]' => TRUE,
'settings[node][paragraphed_content_demo][settings][language][language_alterable]' => TRUE,
];
$this
->drupalGet('admin/config/regional/content-language');
$this
->submitForm($edit, 'Save configuration');
$view_display = \Drupal::service('entity_display.repository')
->getViewDisplay('paragraph', 'images');
$view_display
->setComponent('field_images_demo', [
'settings' => [
'image_style' => 'medium',
],
]);
$view_display
->save();
}
public function testParagraphAccessCheck() {
$admin_user = [
'administer site configuration',
'administer node display',
'administer paragraph display',
'create paragraphed_content_demo content',
'edit any paragraphed_content_demo content',
];
$this
->loginAsAdmin($admin_user);
$role = \Drupal::entityTypeManager()
->getStorage('user_role')
->load(RoleInterface::ANONYMOUS_ID);
$role
->revokePermission('access content');
$role
->save();
$edit = array(
'field_storage[subform][settings][uri_scheme]' => 'private',
);
$this
->drupalGet('admin/structure/paragraphs_type/images/fields/paragraph.images.field_images_demo');
$this
->submitForm($edit, 'Save settings');
$form_display = EntityFormDisplay::load('node.paragraphed_content_demo.default')
->setComponent('field_paragraphs_demo', [
'type' => 'entity_reference_paragraphs',
]);
$form_display
->save();
$this
->drupalGet('node/add/paragraphed_content_demo');
$this
->submitForm([], 'Add images');
$images = $this
->getTestFiles('image');
$file_system = \Drupal::service('file_system');
$file_system
->copy($images[0]->uri, 'temporary://privateImage.jpg');
$file_path = $this->container
->get('file_system')
->realpath('temporary://privateImage.jpg');
$file_system
->copy($images[1]->uri, 'temporary://privateImage2.jpg');
$file_path_2 = $this->container
->get('file_system')
->realpath('temporary://privateImage2.jpg');
$edit = array(
'title[0][value]' => 'Security test node',
'files[field_paragraphs_demo_0_subform_field_images_demo_0][]' => $file_path,
);
$this
->submitForm($edit, 'Upload');
$edit = array(
'files[field_paragraphs_demo_0_subform_field_images_demo_1][]' => $file_path_2,
);
$this
->submitForm($edit, 'Preview');
$image_style = ImageStyle::load('medium');
$img1_url = $image_style
->buildUrl('private://' . date('Y-m') . '/privateImage.jpg');
$image_url = \Drupal::service('file_url_generator')
->transformRelative($img1_url);
$this
->assertSession()
->responseContains($image_url);
$this
->clickLink('Back to content editing');
$this
->submitForm([], 'Save');
$node = $this
->drupalGetNodeByTitle('Security test node');
$this
->drupalGet('node/' . $node
->id());
$this
->assertSession()
->responseContains($image_url);
$this
->drupalGet($img1_url);
$this
->assertSession()
->statusCodeEquals(200);
$this
->drupalLogout();
$img_url = $image_style
->buildUrl('private://' . date('Y-m') . '/privateImage2.jpg');
$image_url = \Drupal::service('file_url_generator')
->transformRelative($img_url);
$this
->assertSession()
->responseNotContains($image_url);
$this
->drupalGet($img_url);
$this
->assertSession()
->statusCodeEquals(403);
$this
->loginAsAdmin($admin_user);
$this
->drupalGet('node/add/paragraphed_content_demo');
$this
->submitForm([], 'Add text');
$this
->assertSession()
->pageTextContains('Text');
$edit = [
'title[0][value]' => 'delete_permissions',
'field_paragraphs_demo[0][subform][field_text_demo][0][value]' => 'Test',
];
$this
->submitForm($edit, 'Save');
$this
->clickLink('Edit');
$this
->assertNotNull($this
->xpath('//*[@name="field_paragraphs_demo_0_remove"]'));
$this
->submitForm([], 'field_paragraphs_demo_0_remove');
$this
->submitForm([], 'field_paragraphs_demo_0_confirm_remove');
$this
->submitForm([], 'Save');
$node = $this
->getNodeByTitle('delete_permissions');
$this
->assertSession()
->addressEquals('node/' . $node
->id());
}
}