Chris@0: <?php
Chris@0: 
Chris@0: namespace Drupal\Tests\node\Functional;
Chris@0: 
Chris@0: use Drupal\user\RoleInterface;
Chris@0: 
Chris@0: /**
Chris@0:  * Tests the interaction of the node access system with menu links.
Chris@0:  *
Chris@0:  * @group node
Chris@0:  */
Chris@0: class NodeAccessMenuLinkTest extends NodeTestBase {
Chris@0: 
Chris@0:   /**
Chris@0:    * Modules to enable.
Chris@0:    *
Chris@0:    * @var array
Chris@0:    */
Chris@0:   public static $modules = ['menu_ui', 'block'];
Chris@0: 
Chris@0:   /**
Chris@0:    * A user with permission to manage menu links and create nodes.
Chris@0:    *
Chris@0:    * @var \Drupal\user\UserInterface
Chris@0:    */
Chris@0:   protected $contentAdminUser;
Chris@0: 
Chris@0:   protected function setUp() {
Chris@0:     parent::setUp();
Chris@0: 
Chris@0:     $this->drupalPlaceBlock('system_menu_block:main');
Chris@0: 
Chris@0:     $this->contentAdminUser = $this->drupalCreateUser([
Chris@0:       'access content',
Chris@0:       'administer content types',
Chris@17:       'administer menu',
Chris@0:     ]);
Chris@0: 
Chris@0:     $this->config('user.role.' . RoleInterface::ANONYMOUS_ID)->set('permissions', [])->save();
Chris@0:   }
Chris@0: 
Chris@0:   /**
Chris@0:    * SA-CORE-2015-003: Tests menu links to nodes when node access is restricted.
Chris@0:    */
Chris@0:   public function testNodeAccessMenuLink() {
Chris@0: 
Chris@0:     $menu_link_title = $this->randomString();
Chris@0: 
Chris@0:     $this->drupalLogin($this->contentAdminUser);
Chris@0:     $edit = [
Chris@0:       'title[0][value]' => $this->randomString(),
Chris@0:       'body[0][value]' => $this->randomString(),
Chris@0:       'menu[enabled]' => 1,
Chris@0:       'menu[title]' => $menu_link_title,
Chris@0:     ];
Chris@0:     $this->drupalPostForm('node/add/page', $edit, t('Save'));
Chris@0:     $this->assertLink($menu_link_title);
Chris@0: 
Chris@0:     // Ensure anonymous users without "access content" permission do not see
Chris@0:     // this menu link.
Chris@0:     $this->drupalLogout();
Chris@0:     $this->drupalGet('');
Chris@0:     $this->assertNoLink($menu_link_title);
Chris@0: 
Chris@0:     // Ensure anonymous users with "access content" permission see this menu
Chris@0:     // link.
Chris@0:     $this->config('user.role.' . RoleInterface::ANONYMOUS_ID)->set('permissions', ['access content'])->save();
Chris@0:     $this->drupalGet('');
Chris@0:     $this->assertLink($menu_link_title);
Chris@0:   }
Chris@0: 
Chris@0: }