103 lines
3.5 KiB
PHP
103 lines
3.5 KiB
PHP
<?php
|
|
|
|
namespace Tests\E2E\Services\Databases;
|
|
|
|
use Tests\E2E\Client;
|
|
use Tests\E2E\Scopes\Scope;
|
|
use Tests\E2E\Scopes\ProjectCustom;
|
|
use Tests\E2E\Scopes\SideClient;
|
|
|
|
class DatabasesPermissionsGuestTest extends Scope
|
|
{
|
|
use ProjectCustom;
|
|
use SideClient;
|
|
use DatabasesPermissionsScope;
|
|
|
|
public function createCollection(): array
|
|
{
|
|
$database = $this->client->call(Client::METHOD_POST, '/databases', array_merge([
|
|
'content-type' => 'application/json',
|
|
'x-appwrite-project' => $this->getProject()['$id'],
|
|
'x-appwrite-key' => $this->getProject()['apiKey']
|
|
]), [
|
|
'databaseId' => 'unique()',
|
|
'name' => 'InvalidDocumentDatabase',
|
|
]);
|
|
$this->assertEquals(201, $database['headers']['status-code']);
|
|
$this->assertEquals('InvalidDocumentDatabase', $database['body']['name']);
|
|
|
|
$databaseId = $database['body']['$id'];
|
|
$movies = $this->client->call(Client::METHOD_POST, '/databases/' . $databaseId . '/collections', $this->getServerHeader(), [
|
|
'collectionId' => 'unique()',
|
|
'name' => 'Movies',
|
|
'permissions' => [
|
|
'read(any)',
|
|
'create(any)',
|
|
'update(any)',
|
|
'delete(any)',
|
|
],
|
|
'documentSecurity' => true,
|
|
]);
|
|
|
|
$collection = ['id' => $movies['body']['$id']];
|
|
|
|
$this->client->call(Client::METHOD_POST, '/databases/' . $databaseId . '/collections/' . $collection['id'] . '/attributes/string', $this->getServerHeader(), [
|
|
'key' => 'title',
|
|
'size' => 256,
|
|
'required' => true,
|
|
]);
|
|
|
|
sleep(2);
|
|
|
|
return ['collectionId' => $collection['id'], 'databaseId' => $databaseId];
|
|
}
|
|
|
|
/**
|
|
* [string[] $permissions]
|
|
*/
|
|
public function readDocumentsProvider()
|
|
{
|
|
return [
|
|
[['read(any)']],
|
|
[['read(users)']],
|
|
[['create(any)', 'update(any)', 'delete(any)']],
|
|
[['read(any)', 'create(any)', 'update(any)', 'delete(any)']],
|
|
[['read(users)', 'create(users)', 'update(users)', 'delete(users)']],
|
|
[['read(any)', 'create(users)', 'update(users)', 'delete(users)']],
|
|
];
|
|
}
|
|
|
|
/**
|
|
* @dataProvider readDocumentsProvider
|
|
*/
|
|
public function testReadDocuments($permissions)
|
|
{
|
|
$data = $this->createCollection();
|
|
$collectionId = $data['collectionId'];
|
|
$databaseId = $data['databaseId'];
|
|
$response = $this->client->call(Client::METHOD_POST, '/databases/' . $databaseId . '/collections/' . $collectionId . '/documents', $this->getServerHeader(), [
|
|
'documentId' => 'unique()',
|
|
'data' => [
|
|
'title' => 'Lorem',
|
|
],
|
|
'permissions' => $permissions,
|
|
]);
|
|
|
|
$this->assertEquals(201, $response['headers']['status-code']);
|
|
|
|
$documents = $this->client->call(Client::METHOD_GET, '/databases/' . $databaseId . '/collections/' . $collectionId . '/documents', [
|
|
'content-type' => 'application/json',
|
|
'x-appwrite-project' => $this->getProject()['$id'],
|
|
]);
|
|
|
|
foreach ($documents['body']['documents'] as $document) {
|
|
foreach ($document['$permissions'] as $permission) {
|
|
if (!\str_starts_with($permission, 'read')) {
|
|
continue;
|
|
}
|
|
$this->assertTrue(\str_contains($permission, 'any'));
|
|
}
|
|
}
|
|
}
|
|
}
|