mirror of
https://github.com/gosticks/wordpress-develop.git
synced 2025-10-16 12:05:38 +00:00
8f95800d52
WordPress' code just... wasn't. This is now dealt with. Props jrf, pento, netweb, GaryJ, jdgrimes, westonruter, Greg Sherwood from PHPCS, and everyone who's ever contributed to WPCS and PHPCS. Fixes #41057. git-svn-id: https://develop.svn.wordpress.org/trunk@42343 602fd350-edb4-49c9-b593-d223f7449a82
390 lines
11 KiB
PHP
390 lines
11 KiB
PHP
<?php
|
|
|
|
/**
|
|
* @group user
|
|
* @group capabilities
|
|
*/
|
|
class Tests_User_MapMetaCap extends WP_UnitTestCase {
|
|
|
|
protected static $post_type = 'mapmetacap';
|
|
protected static $super_admins = null;
|
|
protected static $user_id = null;
|
|
protected static $author_id = null;
|
|
protected static $post_id = null;
|
|
|
|
public static function wpSetUpBeforeClass( WP_UnitTest_Factory $factory ) {
|
|
self::$user_id = self::factory()->user->create( array( 'role' => 'administrator' ) );
|
|
self::$author_id = self::factory()->user->create( array( 'role' => 'administrator' ) );
|
|
|
|
if ( isset( $GLOBALS['super_admins'] ) ) {
|
|
self::$super_admins = $GLOBALS['super_admins'];
|
|
}
|
|
$user = new WP_User( self::$user_id );
|
|
$GLOBALS['super_admins'] = array( $user->user_login );
|
|
|
|
register_post_type( self::$post_type );
|
|
|
|
self::$post_id = $factory->post->create(
|
|
array(
|
|
'post_type' => self::$post_type,
|
|
'post_status' => 'private',
|
|
'post_author' => self::$author_id,
|
|
)
|
|
);
|
|
}
|
|
|
|
public static function wpTearDownAfterClass() {
|
|
$GLOBALS['super_admins'] = self::$super_admins;
|
|
unset( $GLOBALS['wp_post_types'][ self::$post_type ] );
|
|
}
|
|
|
|
/**
|
|
* @ticket 13905
|
|
*/
|
|
function test_capability_type_post_with_invalid_id() {
|
|
$this->assertEquals(
|
|
array( 'do_not_allow' ),
|
|
map_meta_cap( 'edit_post', self::$user_id, self::$post_id + 1 )
|
|
);
|
|
}
|
|
|
|
function test_capability_type_post_with_no_extra_caps() {
|
|
|
|
register_post_type(
|
|
self::$post_type, array(
|
|
'capability_type' => 'post',
|
|
)
|
|
);
|
|
$post_type_object = get_post_type_object( self::$post_type );
|
|
|
|
$this->assertTrue( $post_type_object->map_meta_cap );
|
|
|
|
$this->assertEquals(
|
|
array( 'edit_others_posts', 'edit_private_posts' ),
|
|
map_meta_cap( 'edit_post', self::$user_id, self::$post_id )
|
|
);
|
|
$this->assertEquals(
|
|
array( 'edit_others_posts', 'edit_private_posts' ),
|
|
map_meta_cap( $post_type_object->cap->edit_post, self::$user_id, self::$post_id )
|
|
);
|
|
|
|
$this->assertEquals(
|
|
array( 'read_private_posts' ),
|
|
map_meta_cap( 'read_post', self::$user_id, self::$post_id )
|
|
);
|
|
$this->assertEquals(
|
|
array( 'read_private_posts' ),
|
|
map_meta_cap( $post_type_object->cap->read_post, self::$user_id, self::$post_id )
|
|
);
|
|
|
|
$this->assertEquals(
|
|
array( 'delete_others_posts', 'delete_private_posts' ),
|
|
map_meta_cap( 'delete_post', self::$user_id, self::$post_id )
|
|
);
|
|
$this->assertEquals(
|
|
array( 'delete_others_posts', 'delete_private_posts' ),
|
|
map_meta_cap( $post_type_object->cap->delete_post, self::$user_id, self::$post_id )
|
|
);
|
|
}
|
|
|
|
function test_custom_capability_type_with_map_meta_cap() {
|
|
register_post_type(
|
|
self::$post_type, array(
|
|
'capability_type' => 'book',
|
|
'map_meta_cap' => true,
|
|
)
|
|
);
|
|
|
|
$post_type_object = get_post_type_object( self::$post_type );
|
|
|
|
$this->assertEquals(
|
|
array( 'edit_others_books', 'edit_private_books' ),
|
|
map_meta_cap( 'edit_post', self::$user_id, self::$post_id )
|
|
);
|
|
$this->assertEquals(
|
|
array( 'edit_others_books', 'edit_private_books' ),
|
|
map_meta_cap( $post_type_object->cap->edit_post, self::$user_id, self::$post_id )
|
|
);
|
|
|
|
$this->assertEquals(
|
|
array( 'read_private_books' ),
|
|
map_meta_cap( 'read_post', self::$user_id, self::$post_id )
|
|
);
|
|
$this->assertEquals(
|
|
array( 'read_private_books' ),
|
|
map_meta_cap( $post_type_object->cap->read_post, self::$user_id, self::$post_id )
|
|
);
|
|
|
|
$this->assertEquals(
|
|
array( 'delete_others_books', 'delete_private_books' ),
|
|
map_meta_cap( 'delete_post', self::$user_id, self::$post_id )
|
|
);
|
|
$this->assertEquals(
|
|
array( 'delete_others_books', 'delete_private_books' ),
|
|
map_meta_cap( $post_type_object->cap->delete_post, self::$user_id, self::$post_id )
|
|
);
|
|
}
|
|
|
|
function test_capability_type_post_with_one_renamed_cap() {
|
|
register_post_type(
|
|
self::$post_type, array(
|
|
'capability_type' => 'post',
|
|
'capabilities' => array( 'edit_posts' => 'edit_books' ),
|
|
)
|
|
);
|
|
|
|
$post_type_object = get_post_type_object( self::$post_type );
|
|
|
|
$this->assertFalse( $post_type_object->map_meta_cap );
|
|
|
|
$this->assertEquals(
|
|
array( 'edit_post' ),
|
|
map_meta_cap( 'edit_post', self::$user_id, self::$post_id )
|
|
);
|
|
$this->assertEquals(
|
|
array( 'edit_post' ),
|
|
map_meta_cap( $post_type_object->cap->edit_post, self::$user_id, self::$post_id )
|
|
);
|
|
|
|
$this->assertEquals(
|
|
array( 'read_post' ),
|
|
map_meta_cap( 'read_post', self::$user_id, self::$post_id )
|
|
);
|
|
$this->assertEquals(
|
|
array( 'read_post' ),
|
|
map_meta_cap( $post_type_object->cap->read_post, self::$user_id, self::$post_id )
|
|
);
|
|
|
|
$this->assertEquals(
|
|
array( 'delete_post' ),
|
|
map_meta_cap( 'delete_post', self::$user_id, self::$post_id )
|
|
);
|
|
$this->assertEquals(
|
|
array( 'delete_post' ),
|
|
map_meta_cap( $post_type_object->cap->delete_post, self::$user_id, self::$post_id )
|
|
);
|
|
}
|
|
|
|
function test_capability_type_post_map_meta_cap_true_with_renamed_cap() {
|
|
register_post_type(
|
|
self::$post_type, array(
|
|
'capability_type' => 'post',
|
|
'map_meta_cap' => true,
|
|
'capabilities' => array(
|
|
'edit_post' => 'edit_book', // maps back to itself.
|
|
'edit_others_posts' => 'edit_others_books',
|
|
),
|
|
)
|
|
);
|
|
|
|
$post_type_object = get_post_type_object( self::$post_type );
|
|
|
|
$this->assertTrue( $post_type_object->map_meta_cap );
|
|
|
|
$this->assertEquals(
|
|
array( 'edit_others_books', 'edit_private_posts' ),
|
|
map_meta_cap( 'edit_post', self::$user_id, self::$post_id )
|
|
);
|
|
$this->assertEquals(
|
|
array( 'edit_others_books', 'edit_private_posts' ),
|
|
map_meta_cap( $post_type_object->cap->edit_post, self::$user_id, self::$post_id )
|
|
);
|
|
|
|
$this->assertEquals(
|
|
array( 'read_private_posts' ),
|
|
map_meta_cap( 'read_post', self::$user_id, self::$post_id )
|
|
);
|
|
$this->assertEquals(
|
|
array( 'read_private_posts' ),
|
|
map_meta_cap( $post_type_object->cap->read_post, self::$user_id, self::$post_id )
|
|
);
|
|
|
|
$this->assertEquals(
|
|
array( 'delete_others_posts', 'delete_private_posts' ),
|
|
map_meta_cap( 'delete_post', self::$user_id, self::$post_id )
|
|
);
|
|
$this->assertEquals(
|
|
array( 'delete_others_posts', 'delete_private_posts' ),
|
|
map_meta_cap( $post_type_object->cap->delete_post, self::$user_id, self::$post_id )
|
|
);
|
|
}
|
|
|
|
function test_capability_type_post_with_all_meta_caps_renamed() {
|
|
register_post_type(
|
|
self::$post_type, array(
|
|
'capability_type' => 'post',
|
|
'capabilities' => array(
|
|
'edit_post' => 'edit_book',
|
|
'read_post' => 'read_book',
|
|
'delete_post' => 'delete_book',
|
|
),
|
|
)
|
|
);
|
|
|
|
$post_type_object = get_post_type_object( self::$post_type );
|
|
|
|
$this->assertFalse( $post_type_object->map_meta_cap );
|
|
|
|
$this->assertEquals(
|
|
array( 'edit_book' ),
|
|
map_meta_cap( 'edit_post', self::$user_id, self::$post_id )
|
|
);
|
|
$this->assertEquals(
|
|
array( 'edit_book' ),
|
|
map_meta_cap( $post_type_object->cap->edit_post, self::$user_id, self::$post_id )
|
|
);
|
|
|
|
$this->assertEquals(
|
|
array( 'read_book' ),
|
|
map_meta_cap( 'read_post', self::$user_id, self::$post_id )
|
|
);
|
|
$this->assertEquals(
|
|
array( 'read_book' ),
|
|
map_meta_cap( $post_type_object->cap->read_post, self::$user_id, self::$post_id )
|
|
);
|
|
|
|
$this->assertEquals(
|
|
array( 'delete_book' ),
|
|
map_meta_cap( 'delete_post', self::$user_id, self::$post_id )
|
|
);
|
|
$this->assertEquals(
|
|
array( 'delete_book' ),
|
|
map_meta_cap( $post_type_object->cap->delete_post, self::$user_id, self::$post_id )
|
|
);
|
|
}
|
|
|
|
function test_capability_type_post_with_all_meta_caps_renamed_mapped() {
|
|
register_post_type(
|
|
self::$post_type, array(
|
|
'capability_type' => 'post',
|
|
'map_meta_cap' => true,
|
|
'capabilities' => array(
|
|
'edit_post' => 'edit_book',
|
|
'read_post' => 'read_book',
|
|
'delete_post' => 'delete_book',
|
|
),
|
|
)
|
|
);
|
|
|
|
$post_type_object = get_post_type_object( self::$post_type );
|
|
|
|
$this->assertTrue( $post_type_object->map_meta_cap );
|
|
|
|
$this->assertEquals(
|
|
array( 'edit_others_posts', 'edit_private_posts' ),
|
|
map_meta_cap( 'edit_post', self::$user_id, self::$post_id )
|
|
);
|
|
$this->assertEquals(
|
|
array( 'edit_others_posts', 'edit_private_posts' ),
|
|
map_meta_cap( $post_type_object->cap->edit_post, self::$user_id, self::$post_id )
|
|
);
|
|
|
|
$this->assertEquals(
|
|
array( 'read_private_posts' ),
|
|
map_meta_cap( 'read_post', self::$user_id, self::$post_id )
|
|
);
|
|
$this->assertEquals(
|
|
array( 'read_private_posts' ),
|
|
map_meta_cap( $post_type_object->cap->read_post, self::$user_id, self::$post_id )
|
|
);
|
|
|
|
$this->assertEquals(
|
|
array( 'delete_others_posts', 'delete_private_posts' ),
|
|
map_meta_cap( 'delete_post', self::$user_id, self::$post_id )
|
|
);
|
|
$this->assertEquals(
|
|
array( 'delete_others_posts', 'delete_private_posts' ),
|
|
map_meta_cap( $post_type_object->cap->delete_post, self::$user_id, self::$post_id )
|
|
);
|
|
}
|
|
|
|
function test_unfiltered_html_cap() {
|
|
if ( defined( 'DISALLOW_UNFILTERED_HTML' ) ) {
|
|
$this->assertFalse( DISALLOW_UNFILTERED_HTML );
|
|
}
|
|
|
|
if ( is_multisite() ) {
|
|
$this->assertEquals( array( 'do_not_allow' ), map_meta_cap( 'unfiltered_html', 0 ) );
|
|
$this->assertEquals( array( 'unfiltered_html' ), map_meta_cap( 'unfiltered_html', self::$user_id ) );
|
|
} else {
|
|
$this->assertEquals( array( 'unfiltered_html' ), map_meta_cap( 'unfiltered_html', self::$user_id ) );
|
|
}
|
|
}
|
|
|
|
/**
|
|
* @ticket 20488
|
|
*/
|
|
function test_file_edit_caps_not_reliant_on_unfiltered_html_constant() {
|
|
$this->assertFalse( defined( 'DISALLOW_FILE_MODS' ) );
|
|
$this->assertFalse( defined( 'DISALLOW_FILE_EDIT' ) );
|
|
|
|
if ( ! defined( 'DISALLOW_UNFILTERED_HTML' ) ) {
|
|
define( 'DISALLOW_UNFILTERED_HTML', true );
|
|
}
|
|
|
|
$this->assertTrue( DISALLOW_UNFILTERED_HTML );
|
|
$this->assertEquals( array( 'update_core' ), map_meta_cap( 'update_core', self::$user_id ) );
|
|
$this->assertEquals( array( 'edit_plugins' ), map_meta_cap( 'edit_plugins', self::$user_id ) );
|
|
}
|
|
|
|
/**
|
|
* Test a post without an author.
|
|
*
|
|
* @ticket 27020
|
|
*/
|
|
function test_authorless_posts_capabilties() {
|
|
$post_id = self::factory()->post->create(
|
|
array(
|
|
'post_author' => 0,
|
|
'post_type' => 'post',
|
|
'post_status' => 'publish',
|
|
)
|
|
);
|
|
$editor = self::factory()->user->create( array( 'role' => 'editor' ) );
|
|
|
|
$this->assertEquals( array( 'edit_others_posts', 'edit_published_posts' ), map_meta_cap( 'edit_post', $editor, $post_id ) );
|
|
$this->assertEquals( array( 'delete_others_posts', 'delete_published_posts' ), map_meta_cap( 'delete_post', $editor, $post_id ) );
|
|
|
|
}
|
|
|
|
/**
|
|
* Test deleting front page.
|
|
*
|
|
* @ticket 37580
|
|
*/
|
|
function test_only_users_who_can_manage_options_can_delete_page_on_front() {
|
|
$post_id = self::factory()->post->create(
|
|
array(
|
|
'post_type' => 'page',
|
|
'post_status' => 'publish',
|
|
)
|
|
);
|
|
|
|
update_option( 'page_on_front', $post_id );
|
|
$caps = map_meta_cap( 'delete_page', self::$user_id, $post_id );
|
|
delete_option( 'page_on_front' );
|
|
|
|
$this->assertEquals( array( 'manage_options' ), $caps );
|
|
}
|
|
|
|
/**
|
|
* Test deleting posts page.
|
|
*
|
|
* @ticket 37580
|
|
*/
|
|
function test_only_users_who_can_manage_options_can_delete_page_for_posts() {
|
|
$post_id = self::factory()->post->create(
|
|
array(
|
|
'post_type' => 'page',
|
|
'post_status' => 'publish',
|
|
)
|
|
);
|
|
|
|
update_option( 'page_for_posts', $post_id );
|
|
$caps = map_meta_cap( 'delete_page', self::$user_id, $post_id );
|
|
delete_option( 'page_for_posts' );
|
|
|
|
$this->assertEquals( array( 'manage_options' ), $caps );
|
|
}
|
|
}
|