* * For the full copyright and license information, please view the LICENSE * file that was distributed with this source code. */ namespace Flarum\Tests\integration\api\Controller; use Carbon\Carbon; use Flarum\Api\Controller\ShowDiscussionController; use Flarum\Discussion\Discussion; use Flarum\Event\ScopeModelVisibility; use Flarum\User\User; use Illuminate\Contracts\Events\Dispatcher; use Illuminate\Support\Arr; class ShowDiscussionControllerTest extends ApiControllerTestCase { protected $controller = ShowDiscussionController::class; /** * @var Discussion */ protected $discussion; public function setUp() { parent::setUp(); $this->prepareDatabase([ 'discussions' => [ ['id' => 1, 'title' => 'Empty discussion', 'created_at' => Carbon::now()->toDateTimeString(), 'user_id' => 2, 'first_post_id' => null, 'comment_count' => 0, 'is_private' => 0], ['id' => 2, 'title' => 'Discussion with post', 'created_at' => Carbon::now()->toDateTimeString(), 'user_id' => 2, 'first_post_id' => 1, 'comment_count' => 1, 'is_private' => 0], ['id' => 3, 'title' => 'Private discussion', 'created_at' => Carbon::now()->toDateTimeString(), 'user_id' => 2, 'first_post_id' => null, 'comment_count' => 0, 'is_private' => 1], ['id' => 4, 'title' => 'Discussion with hidden post', 'created_at' => Carbon::now()->toDateTimeString(), 'user_id' => 2, 'first_post_id' => 2, 'comment_count' => 1, 'is_private' => 0], ], 'posts' => [ ['id' => 1, 'discussion_id' => 2, 'created_at' => Carbon::now()->toDateTimeString(), 'user_id' => 2, 'type' => 'comment', 'content' => 'a normal reply - too-obscure'], ['id' => 2, 'discussion_id' => 4, 'created_at' => Carbon::now()->toDateTimeString(), 'user_id' => 2, 'type' => 'comment', 'content' => 'a hidden reply - too-obscure', 'hidden_at' => Carbon::now()->toDateTimeString()], ], 'users' => [ $this->normalUser(), ], 'groups' => [ $this->guestGroup(), $this->memberGroup(), ], 'group_user' => [ ['user_id' => 2, 'group_id' => 3], ], 'group_permission' => [ ['permission' => 'viewDiscussions', 'group_id' => 2], ['permission' => 'viewDiscussions', 'group_id' => 3], ] ]); } /** * @test */ public function author_can_see_discussion() { $this->actor = User::find(2); $response = $this->callWith([], ['id' => 1]); $this->assertEquals(200, $response->getStatusCode()); } /** * @test */ public function guest_cannot_see_empty_discussion() { $response = $this->callWith([], ['id' => 1]); $this->assertEquals(404, $response->getStatusCode()); } /** * @test */ public function guest_cannot_see_hidden_posts() { $response = $this->callWith([], ['id' => 4]); $json = json_decode($response->getBody()->getContents(), true); $this->assertNull(Arr::get($json, 'data.relationships.posts')); } /** * @test */ public function author_can_see_hidden_posts() { $this->actor = User::find(2); $response = $this->callWith([], ['id' => 4]); $json = json_decode($response->getBody()->getContents(), true); $this->assertEquals(2, Arr::get($json, 'data.relationships.posts.data.0.id')); } /** * @test */ public function when_allowed_guests_can_see_hidden_posts() { /** @var Dispatcher $events */ $events = app(Dispatcher::class); $events->listen(ScopeModelVisibility::class, function (ScopeModelVisibility $event) { $event->query->orWhereRaw('1=1'); }); $response = $this->callWith([], ['id' => 4]); $json = json_decode($response->getBody()->getContents(), true); $this->assertEquals(2, Arr::get($json, 'data.relationships.posts.data.0.id')); } /** * @test */ public function guest_can_see_discussion() { $response = $this->callWith([], ['id' => 2]); $this->assertEquals(200, $response->getStatusCode()); } /** * @test */ public function guests_cannot_see_private_discussion() { $response = $this->callWith([], ['id' => 3]); $this->assertEquals(404, $response->getStatusCode()); } }
a normal reply - too-obscure
a hidden reply - too-obscure