gplx/mediawiki/extensions/SemanticMediaWiki/tests/phpunit/MediaWiki/Permission/TitlePermissionsTest.php

<?php

namespace SMW\Tests\MediaWiki\Permission;

use MediaWiki\MediaWikiServices;
use SMW\MediaWiki\Permission\TitlePermissions;

/**
 * @covers \SMW\MediaWiki\Permission\TitlePermissions
 * @group semantic-mediawiki
 *
 * @license GPL-2.0-or-later
 * @since  2.4
 *
 * @author mwjames
 */
class TitlePermissionsTest extends \PHPUnit\Framework\TestCase {

	private $protectionValidator;
	private $permissionManager;

	protected function setUp(): void {
		parent::setUp();

		$this->protectionValidator = $this->getMockBuilder( '\SMW\Protection\ProtectionValidator' )
			->disableOriginalConstructor()
			->getMock();

		$this->permissionManager = $this->getMockBuilder( '\SMW\MediaWiki\PermissionManager' )
			->disableOriginalConstructor()
			->getMock();
	}

	public function testCanConstruct() {
		$this->assertInstanceOf(
			TitlePermissions::class,
			new TitlePermissions( $this->protectionValidator, $this->permissionManager )
		);
	}

	public function testGrantPermissionToMainNamespace() {
		$title = MediaWikiServices::getInstance()->getTitleFactory()->newFromText( 'Foo', NS_MAIN );

		$user = $this->getMockBuilder( '\MediaWiki\User\User' )
			->disableOriginalConstructor()
			->getMock();

		$instance = new TitlePermissions(
			$this->protectionValidator,
			$this->permissionManager
		);

		$this->assertTrue(
			$instance->hasUserPermission( $title, $user, 'edit' )
		);

		$this->assertEmpty(
			$instance->getErrors()
		);
	}

	/**
	 * @dataProvider titleProvider
	 */
	public function testToReturnFalseOnMwNamespacePermissionCheck( $title, $permission, $action, $expected ) {
		$this->protectionValidator->expects( $this->any() )
			->method( 'hasEditProtection' )
			->willReturn( true );

		$user = $this->getMockBuilder( '\MediaWiki\User\User' )
			->disableOriginalConstructor()
			->getMock();

		$this->permissionManager->expects( $this->once() )
			->method( 'userHasRight' )
			->with(
				$user,
				$permission )
			->willReturn( false );

		$result = [];

		$instance = new TitlePermissions(
			$this->protectionValidator,
			$this->permissionManager
		);

		$this->assertFalse(
			$instance->hasUserPermission( $title, $user, $action )
		);

		$this->assertEquals(
			$expected,
			$instance->getErrors()
		);
	}

	public function testNoUserPermissionOnNamespaceWithEditPermissionCheck() {
		$editProtectionRight = 'Foo';

		$title = $this->getMockBuilder( '\MediaWiki\Title\Title' )
			->disableOriginalConstructor()
			->getMock();

		$title->expects( $this->any() )
			->method( 'getDBKey' )
			->willReturn( 'PermissionTest' );

		$title->expects( $this->any() )
			->method( 'exists' )
			->willReturn( true );

		$title->expects( $this->any() )
			->method( 'getNamespace' )
			->willReturn( SMW_NS_PROPERTY );

		$this->protectionValidator->expects( $this->any() )
			->method( 'hasProtection' )
			->willReturn( true );

		$this->protectionValidator->expects( $this->any() )
			->method( 'getEditProtectionRight' )
			->willReturn( $editProtectionRight );

		$this->protectionValidator->expects( $this->any() )
			->method( 'hasEditProtectionOnNamespace' )
			->willReturn( true );

		$user = $this->getMockBuilder( '\MediaWiki\User\User' )
			->disableOriginalConstructor()
			->getMock();

		$this->permissionManager->expects( $this->once() )
			->method( 'userHasRight' )
			->with(
				$user,
				$editProtectionRight )
			->willReturn( false );

		$instance = new TitlePermissions(
			$this->protectionValidator,
			$this->permissionManager
		);

		$this->assertFalse(
			$instance->hasUserPermission( $title, $user, 'edit' )
		);

		$this->assertEquals(
			[ [ 'smw-edit-protection', $editProtectionRight ] ],
			$instance->getErrors()
		);
	}

	public function testFalseEditProtectionRightToNeverCheckPermissionOnNonMwNamespace() {
		$editProtectionRight = false;

		$title = $this->getMockBuilder( '\MediaWiki\Title\Title' )
			->disableOriginalConstructor()
			->getMock();

		$title->expects( $this->any() )
			->method( 'getDBKey' )
			->willReturn( 'PermissionTest' );

		$title->expects( $this->any() )
			->method( 'exists' )
			->willReturn( false );

		$title->expects( $this->any() )
			->method( 'getNamespace' )
			->willReturn( SMW_NS_PROPERTY );

		$this->protectionValidator->expects( $this->any() )
			->method( 'getEditProtectionRight' )
			->willReturn( $editProtectionRight );

		$user = $this->getMockBuilder( '\MediaWiki\User\User' )
			->disableOriginalConstructor()
			->getMock();

		$instance = new TitlePermissions(
			$this->protectionValidator,
			$this->permissionManager
		);

		$this->assertTrue(
			$instance->hasUserPermission( $title, $user, 'edit' )
		);
	}

	public function testNoUserPermissionOnPropertyNamespaceWithCreateProtectionCheck() {
		$createProtectionRight = 'Foo';

		$title = $this->getMockBuilder( '\MediaWiki\Title\Title' )
			->disableOriginalConstructor()
			->getMock();

		$title->expects( $this->any() )
			->method( 'getDBKey' )
			->willReturn( 'PermissionTest' );

		$title->expects( $this->any() )
			->method( 'exists' )
			->willReturn( false );

		$title->expects( $this->any() )
			->method( 'getNamespace' )
			->willReturn( SMW_NS_PROPERTY );

		$this->protectionValidator->expects( $this->any() )
			->method( 'getCreateProtectionRight' )
			->willReturn( $createProtectionRight );

		$user = $this->getMockBuilder( '\MediaWiki\User\User' )
			->disableOriginalConstructor()
			->getMock();

		$instance = new TitlePermissions(
			$this->protectionValidator,
			$this->permissionManager
		);

		$this->assertFalse(
			$instance->hasUserPermission( $title, $user, 'edit' )
		);

		$this->assertEquals(
			[ [ 'smw-create-protection', null, 'Foo' ] ],
			$instance->getErrors()
		);
	}

	public function testNoUserPermissionOnPropertyNamespaceWithCreateProtectionCheck_TitleExists() {
		$createProtectionRight = 'Foo';

		$title = $this->getMockBuilder( '\MediaWiki\Title\Title' )
			->disableOriginalConstructor()
			->getMock();

		$title->expects( $this->any() )
			->method( 'getDBKey' )
			->willReturn( 'PermissionTest' );

		$title->expects( $this->any() )
			->method( 'exists' )
			->willReturn( true );

		$title->expects( $this->any() )
			->method( 'getNamespace' )
			->willReturn( SMW_NS_PROPERTY );

		$this->protectionValidator->expects( $this->any() )
			->method( 'getCreateProtectionRight' )
			->willReturn( $createProtectionRight );

		$user = $this->getMockBuilder( '\MediaWiki\User\User' )
			->disableOriginalConstructor()
			->getMock();

		$instance = new TitlePermissions(
			$this->protectionValidator,
			$this->permissionManager
		);

		$this->assertFalse(
			$instance->hasUserPermission( $title, $user, 'edit' )
		);

		$this->assertEquals(
			[ [ 'smw-create-protection-exists', null, 'Foo' ] ],
			$instance->getErrors()
		);
	}

	public function testNoUserPermissionOnCategoryNamespaceWithChangePropagationProtectionCheck() {
		$title = $this->getMockBuilder( '\MediaWiki\Title\Title' )
			->disableOriginalConstructor()
			->getMock();

		$title->expects( $this->any() )
			->method( 'getDBKey' )
			->willReturn( 'PermissionTest' );

		$title->expects( $this->any() )
			->method( 'exists' )
			->willReturn( true );

		$title->expects( $this->any() )
			->method( 'getNamespace' )
			->willReturn( NS_CATEGORY );

		$this->protectionValidator->expects( $this->any() )
			->method( 'hasChangePropagationProtection' )
			->willReturn( true );

		$user = $this->getMockBuilder( '\MediaWiki\User\User' )
			->disableOriginalConstructor()
			->getMock();

		$instance = new TitlePermissions(
			$this->protectionValidator,
			$this->permissionManager
		);

		$this->assertFalse(
			$instance->hasUserPermission( $title, $user, 'edit' )
		);

		$this->assertEquals(
			[
				[ 'smw-change-propagation-protection' ]
			],
			$instance->getErrors()
		);
	}

	public function testUserPermissionOnCategoryNamespaceWithChangePropagationProtectionCheck() {
		$title = $this->getMockBuilder( '\MediaWiki\Title\Title' )
			->disableOriginalConstructor()
			->getMock();

		$title->expects( $this->any() )
			->method( 'getDBKey' )
			->willReturn( 'PermissionTest' );

		$title->expects( $this->any() )
			->method( 'exists' )
			->willReturn( true );

		$title->expects( $this->any() )
			->method( 'getNamespace' )
			->willReturn( NS_CATEGORY );

		$this->protectionValidator->expects( $this->any() )
			->method( 'hasChangePropagationProtection' )
			->willReturn( false );

		$user = $this->getMockBuilder( '\MediaWiki\User\User' )
			->disableOriginalConstructor()
			->getMock();

		$instance = new TitlePermissions(
			$this->protectionValidator,
			$this->permissionManager
		);

		$this->assertTrue(
			$instance->hasUserPermission( $title, $user, 'edit' )
		);

		$this->assertEquals(
			[],
			$instance->getErrors()
		);
	}

	public function testNoUserEditPermissionOnMissingRight_SchemaNamespace() {
		$editProtectionRight = 'Foo';

		$title = $this->getMockBuilder( '\MediaWiki\Title\Title' )
			->disableOriginalConstructor()
			->getMock();

		$title->expects( $this->any() )
			->method( 'getDBKey' )
			->willReturn( 'PermissionTest' );

		$title->expects( $this->any() )
			->method( 'exists' )
			->willReturn( true );

		$title->expects( $this->any() )
			->method( 'getNamespace' )
			->willReturn( SMW_NS_SCHEMA );

		$user = $this->getMockBuilder( '\MediaWiki\User\User' )
			->disableOriginalConstructor()
			->getMock();

		$this->permissionManager->expects( $this->once() )
			->method( 'userHasRight' )
			->with(
				$user,
				'smw-schemaedit' )
			->willReturn( false );

		$instance = new TitlePermissions(
			$this->protectionValidator,
			$this->permissionManager
		);

		$this->assertFalse(
			$instance->hasUserPermission( $title, $user, 'edit' )
		);

		$this->assertEquals(
			[
				[ 'smw-schema-namespace-edit-protection', 'smw-schemaedit' ]
			],
			$instance->getErrors()
		);
	}

	public function testEditPermissionOnImportPerformer_SchemaNamespace() {
		$title = $this->getMockBuilder( '\MediaWiki\Title\Title' )
			->disableOriginalConstructor()
			->getMock();

		$title->expects( $this->any() )
			->method( 'getDBKey' )
			->willReturn( 'PermissionTest' );

		$title->expects( $this->any() )
			->method( 'exists' )
			->willReturn( true );

		$title->expects( $this->any() )
			->method( 'getNamespace' )
			->willReturn( SMW_NS_SCHEMA );

		$user = $this->getMockBuilder( '\MediaWiki\User\User' )
			->disableOriginalConstructor()
			->getMock();

		$this->permissionManager->expects( $this->once() )
			->method( 'userHasRight' )
			->with(
				$user,
				'smw-schemaedit' )
			->willReturn( true );

		$this->protectionValidator->expects( $this->once() )
			->method( 'isClassifiedAsImportPerformerProtected' )
			->willReturn( true );

		$instance = new TitlePermissions(
			$this->protectionValidator,
			$this->permissionManager
		);

		$this->assertFalse(
			$instance->hasUserPermission( $title, $user, 'edit' )
		);

		$this->assertEquals(
			[
				[ 'smw-schema-namespace-edit-protection-by-import-performer' ]
			],
			$instance->getErrors()
		);
	}

	public function testNoEditcontentmodelPermissionForAnyUser_SchemaNamespace() {
		$editProtectionRight = 'Foo';

		$title = $this->getMockBuilder( '\MediaWiki\Title\Title' )
			->disableOriginalConstructor()
			->getMock();

		$title->expects( $this->any() )
			->method( 'getDBKey' )
			->willReturn( 'PermissionTest' );

		$title->expects( $this->any() )
			->method( 'exists' )
			->willReturn( true );

		$title->expects( $this->any() )
			->method( 'getNamespace' )
			->willReturn( SMW_NS_SCHEMA );

		$user = $this->getMockBuilder( '\MediaWiki\User\User' )
			->disableOriginalConstructor()
			->getMock();

		$this->permissionManager->expects( $this->once() )
			->method( 'userHasRight' )
			->with(
				$user,
				'smw-schemaedit' )
			->willReturn( true );

		$instance = new TitlePermissions(
			$this->protectionValidator,
			$this->permissionManager
		);

		$this->assertFalse(
			$instance->hasUserPermission( $title, $user, 'editcontentmodel' )
		);

		$this->assertEquals(
			[
				[ 'smw-schema-namespace-editcontentmodel-disallowed' ]
			],
			$instance->getErrors()
		);
	}

	public function titleProvider() {
		$titleFactory = MediaWikiServices::getInstance()->getTitleFactory();

		$provider[] = [
			$titleFactory->newFromText( 'Smw_allows_pattern', NS_MEDIAWIKI ),
			'smw-patternedit',
			'edit',
			[ [ 'smw-patternedit-protection', 'smw-patternedit' ] ]
		];

		$provider[] = [
			$titleFactory->newFromText( 'Smw_allows_pattern', NS_MEDIAWIKI ),
			'smw-patternedit',
			'delete',
			[ [ 'smw-patternedit-protection', 'smw-patternedit' ] ]
		];

		$provider[] = [
			$titleFactory->newFromText( 'Smw_allows_pattern', NS_MEDIAWIKI ),
			'smw-patternedit',
			'move',
			[ [ 'smw-patternedit-protection', 'smw-patternedit' ] ]
		];

		return $provider;
	}

}