diff core/modules/node/tests/src/Functional/NodeAccessMenuLinkTest.php @ 0:4c8ae668cc8c

Initial import (non-working)

--- /dev/null	Thu Jan 01 00:00:00 1970 +0000
+++ b/core/modules/node/tests/src/Functional/NodeAccessMenuLinkTest.php	Wed Nov 29 16:09:58 2017 +0000
@@ -0,0 +1,72 @@
+<?php
+
+namespace Drupal\Tests\node\Functional;
+
+use Drupal\user\RoleInterface;
+
+/**
+ * Tests the interaction of the node access system with menu links.
+ *
+ * @group node
+ */
+class NodeAccessMenuLinkTest extends NodeTestBase {
+
+  /**
+   * Modules to enable.
+   *
+   * @var array
+   */
+  public static $modules = ['menu_ui', 'block'];
+
+  /**
+   * A user with permission to manage menu links and create nodes.
+   *
+   * @var \Drupal\user\UserInterface
+   */
+  protected $contentAdminUser;
+
+  protected function setUp() {
+    parent::setUp();
+
+    $this->drupalPlaceBlock('system_menu_block:main');
+
+    $this->contentAdminUser = $this->drupalCreateUser([
+      'access content',
+      'administer content types',
+      'administer menu'
+    ]);
+
+    $this->config('user.role.' . RoleInterface::ANONYMOUS_ID)->set('permissions', [])->save();
+  }
+
+  /**
+   * SA-CORE-2015-003: Tests menu links to nodes when node access is restricted.
+   */
+  public function testNodeAccessMenuLink() {
+
+    $menu_link_title = $this->randomString();
+
+    $this->drupalLogin($this->contentAdminUser);
+    $edit = [
+      'title[0][value]' => $this->randomString(),
+      'body[0][value]' => $this->randomString(),
+      'menu[enabled]' => 1,
+      'menu[title]' => $menu_link_title,
+    ];
+    $this->drupalPostForm('node/add/page', $edit, t('Save'));
+    $this->assertLink($menu_link_title);
+
+    // Ensure anonymous users without "access content" permission do not see
+    // this menu link.
+    $this->drupalLogout();
+    $this->drupalGet('');
+    $this->assertNoLink($menu_link_title);
+
+    // Ensure anonymous users with "access content" permission see this menu
+    // link.
+    $this->config('user.role.' . RoleInterface::ANONYMOUS_ID)->set('permissions', ['access content'])->save();
+    $this->drupalGet('');
+    $this->assertLink($menu_link_title);
+  }
+
+}