BackendUserAuthenticationTest.php

Go to the documentation of this file.

<?php
namespace TYPO3\CMS\Core\Tests\Unit\Authentication;

class BackendUserAuthenticationTest extends \TYPO3\CMS\Core\Tests\UnitTestCase {
    protected $defaultFilePermissions = array(
        // File permissions
        'addFile' => FALSE,
        'readFile' => FALSE,
        'writeFile' => FALSE,
        'copyFile' => FALSE,
        'moveFile' => FALSE,
        'renameFile' => FALSE,
        'unzipFile' => FALSE,
        'deleteFile' => FALSE,
        // Folder permissions
        'addFolder' => FALSE,
        'readFolder' => FALSE,
        'writeFolder' => FALSE,
        'copyFolder' => FALSE,
        'moveFolder' => FALSE,
        'renameFolder' => FALSE,
        'deleteFolder' => FALSE,
        'recursivedeleteFolder' => FALSE
    );

    public function setUp() {
        // reset hooks
        $GLOBALS['TYPO3_CONF_VARS']['SC_OPTIONS'] = array();
    }

    public function tearDown() {
        \TYPO3\CMS\Core\FormProtection\FormProtectionFactory::purgeInstances();
        parent::tearDown();
    }

    // Tests concerning the form protection

    public function logoffCleansFormProtectionIfBackendUserIsLoggedIn() {
        $formProtection = $this->getMock(
            'TYPO3\\CMS\\Core\\FormProtection\\BackendFormProtection',
            array('clean'),
            array(),
            '',
            FALSE
        );
        $formProtection->expects($this->once())->method('clean');

        \TYPO3\CMS\Core\FormProtection\FormProtectionFactory::set(
            'TYPO3\\CMS\\Core\\FormProtection\\BackendFormProtection',
            $formProtection
        );

        // logoff() call the static factory that has a dependency to a valid BE_USER object. Mock this away
        $GLOBALS['BE_USER'] = $this->getMock('TYPO3\\CMS\\Core\\Authentication\\BackendUserAuthentication', array(), array(), '', FALSE);
        $GLOBALS['BE_USER']->user = array('uid' => $this->getUniqueId());
        $GLOBALS['TYPO3_DB'] = $this->getMock('TYPO3\\CMS\\Core\\Database\\DatabaseConnection', array(), array(), '', FALSE);

        $subject = $this->getAccessibleMock('TYPO3\\CMS\\Core\\Authentication\\BackendUserAuthentication', array('dummy'), array(), '', FALSE);
        $subject->_set('db', $GLOBALS['TYPO3_DB']);
        $subject->logoff();
    }

    public function getTSConfigDataProvider() {
        $completeConfiguration = array(
            'value' => 'oneValue',
            'value.' => array('oneProperty' => 'oneValue'),
            'permissions.' => array(
                'file.' => array(
                    'default.' => array('readAction' => '1'),
                    '1.' => array('writeAction' => '1'),
                    '0.' => array('readAction' => '0'),
                ),
            )
        );

        return array(
            'single level string' => array(
                $completeConfiguration,
                'permissions',
                array(
                    'value' => NULL,
                    'properties' =>
                    array(
                        'file.' => array(
                            'default.' => array('readAction' => '1'),
                            '1.' => array('writeAction' => '1'),
                            '0.' => array('readAction' => '0'),
                        ),
                    ),
                ),
            ),
            'two levels string' => array(
                $completeConfiguration,
                'permissions.file',
                array(
                    'value' => NULL,
                    'properties' =>
                    array(
                        'default.' => array('readAction' => '1'),
                        '1.' => array('writeAction' => '1'),
                        '0.' => array('readAction' => '0'),
                    ),
                ),
            ),
            'three levels string' => array(
                $completeConfiguration,
                'permissions.file.default',
                array(
                    'value' => NULL,
                    'properties' =>
                    array('readAction' => '1'),
                ),
            ),
            'three levels string with integer property' => array(
                $completeConfiguration,
                'permissions.file.1',
                array(
                    'value' => NULL,
                    'properties' => array('writeAction' => '1'),
                ),
            ),
            'three levels string with integer zero property' => array(
                $completeConfiguration,
                'permissions.file.0',
                array(
                    'value' => NULL,
                    'properties' => array('readAction' => '0'),
                ),
            ),
            'four levels string with integer zero property, value, no properties' => array(
                $completeConfiguration,
                'permissions.file.0.readAction',
                array(
                    'value' => '0',
                    'properties' => NULL,
                ),
            ),
            'four levels string with integer property, value, no properties' => array(
                $completeConfiguration,
                'permissions.file.1.writeAction',
                array(
                    'value' => '1',
                    'properties' => NULL,
                ),
            ),
            'one level, not existant string' => array(
                $completeConfiguration,
                'foo',
                array(
                    'value' => NULL,
                    'properties' => NULL,
                ),
            ),
            'two level, not existant string' => array(
                $completeConfiguration,
                'foo.bar',
                array(
                    'value' => NULL,
                    'properties' => NULL,
                ),
            ),
            'two level, where second level does not exist' => array(
                $completeConfiguration,
                'permissions.bar',
                array(
                    'value' => NULL,
                    'properties' => NULL,
                ),
            ),
            'three level, where third level does not exist' => array(
                $completeConfiguration,
                'permissions.file.foo',
                array(
                    'value' => NULL,
                    'properties' => NULL,
                ),
            ),
            'three level, where second and third level does not exist' => array(
                $completeConfiguration,
                'permissions.foo.bar',
                array(
                    'value' => NULL,
                    'properties' => NULL,
                ),
            ),
            'value and properties' => array(
                $completeConfiguration,
                'value',
                array(
                    'value' => 'oneValue',
                    'properties' => array('oneProperty' => 'oneValue'),
                ),
            ),
        );
    }

    public function getTSConfigReturnsCorrectArrayForGivenObjectString(array $completeConfiguration, $objectString, array $expectedConfiguration) {
        $subject = $this->getMock('TYPO3\\CMS\\Core\\Authentication\\BackendUserAuthentication', array('dummy'), array(), '', FALSE);
        $subject->userTS = $completeConfiguration;

        $actualConfiguration = $subject->getTSConfig($objectString);
        $this->assertSame($expectedConfiguration, $actualConfiguration);
    }

    public function getFilePermissionsTakesUserDefaultAndStoragePermissionsIntoAccountIfUserIsNotAdminDataProvider() {
        return array(
            'Only read permissions' => array(
                array(
                    'addFile' => 0,
                    'readFile' => 1,
                    'writeFile' => 0,
                    'copyFile' => 0,
                    'moveFile' => 0,
                    'renameFile' => 0,
                    'unzipFile' => 0,
                    'deleteFile' => 0,
                    'addFolder' => 0,
                    'readFolder' => 1,
                    'copyFolder' => 0,
                    'moveFolder' => 0,
                    'renameFolder' => 0,
                    'writeFolder' => 0,
                    'deleteFolder' => 0,
                    'recursivedeleteFolder' => 0,
                )
            ),
            'Uploading allowed' => array(
                array(
                    'addFile' => 1,
                    'readFile' => 1,
                    'writeFile' => 1,
                    'copyFile' => 1,
                    'moveFile' => 1,
                    'renameFile' => 1,
                    'unzipFile' => 0,
                    'deleteFile' => 1,
                    'addFolder' => 0,
                    'readFolder' => 1,
                    'copyFolder' => 0,
                    'moveFolder' => 0,
                    'renameFolder' => 0,
                    'writeFolder' => 0,
                    'deleteFolder' => 0,
                    'recursivedeleteFolder' => 0
                )
            ),
            'One value is enough' => array(
                array(
                    'addFile' => 1,
                )
            ),
        );
    }

    public function getFilePermissionsTakesUserDefaultPermissionsFromTsConfigIntoAccountIfUserIsNotAdmin(array $userTsConfiguration) {
        $subject = $this->getMock('TYPO3\\CMS\\Core\\Authentication\\BackendUserAuthentication', array('isAdmin'));

        $subject
            ->expects($this->any())
            ->method('isAdmin')
            ->will($this->returnValue(FALSE));

        $subject->userTS = array(
            'permissions.' => array(
                'file.' => array(
                    'default.' => $userTsConfiguration
                ),
            )
        );

        $expectedPermissions = array_merge($this->defaultFilePermissions, $userTsConfiguration);
        array_walk(
            $expectedPermissions,
            function(&$value) {
                $value = (bool) $value;
            }
        );

        $this->assertEquals($expectedPermissions, $subject->getFilePermissions());
    }

    public function getFilePermissionsFromStorageDataProvider() {
        $defaultPermissions = array(
            'addFile' => TRUE,
            'readFile' => TRUE,
            'writeFile' => TRUE,
            'copyFile' => TRUE,
            'moveFile' => TRUE,
            'renameFile' => TRUE,
            'unzipFile' => TRUE,
            'deleteFile' => TRUE,
            'addFolder' => TRUE,
            'readFolder' => TRUE,
            'copyFolder' => TRUE,
            'moveFolder' => TRUE,
            'renameFolder' => TRUE,
            'writeFolder' => TRUE,
            'deleteFolder' => TRUE,
            'recursivedeleteFolder' => TRUE
        );

        return array(
            'Overwrites given storage permissions with default permissions' => array(
                $defaultPermissions,
                1,
                array(
                    'addFile' => 0,
                    'recursivedeleteFolder' =>0
                ),
                array(
                    'addFile' => 0,
                    'readFile' => 1,
                    'writeFile' => 1,
                    'copyFile' => 1,
                    'moveFile' => 1,
                    'renameFile' => 1,
                    'unzipFile' => 1,
                    'deleteFile' => 1,
                    'addFolder' => 1,
                    'readFolder' => 1,
                    'copyFolder' => 1,
                    'moveFolder' => 1,
                    'renameFolder' => 1,
                    'writeFolder' => 1,
                    'deleteFolder' => 1,
                    'recursivedeleteFolder' => 0
                )
            ),
            'Overwrites given storage 0 permissions with default permissions' => array(
                $defaultPermissions,
                0,
                array(
                    'addFile' => 0,
                    'recursivedeleteFolder' =>0
                ),
                array(
                    'addFile' => FALSE,
                    'readFile' => TRUE,
                    'writeFile' => TRUE,
                    'copyFile' => TRUE,
                    'moveFile' => TRUE,
                    'renameFile' => TRUE,
                    'unzipFile' => TRUE,
                    'deleteFile' => TRUE,
                    'addFolder' => TRUE,
                    'readFolder' => TRUE,
                    'copyFolder' => TRUE,
                    'moveFolder' => TRUE,
                    'renameFolder' => TRUE,
                    'writeFolder' => TRUE,
                    'deleteFolder' => TRUE,
                    'recursivedeleteFolder' => FALSE
                )
            ),
            'Returns default permissions if no storage permissions are found' => array(
                $defaultPermissions,
                1,
                array(),
                array(
                    'addFile' => TRUE,
                    'readFile' => TRUE,
                    'writeFile' => TRUE,
                    'copyFile' => TRUE,
                    'moveFile' => TRUE,
                    'renameFile' => TRUE,
                    'unzipFile' => TRUE,
                    'deleteFile' => TRUE,
                    'addFolder' => TRUE,
                    'readFolder' => TRUE,
                    'copyFolder' => TRUE,
                    'moveFolder' => TRUE,
                    'renameFolder' => TRUE,
                    'writeFolder' => TRUE,
                    'deleteFolder' => TRUE,
                    'recursivedeleteFolder' => TRUE
                )
            ),
        );
    }

    public function getFilePermissionsFromStorageOverwritesDefaultPermissions(array $defaultPermissions, $storageUid, array $storagePermissions, array $expectedPermissions) {
        $subject = $this->getMock('TYPO3\\CMS\\Core\\Authentication\\BackendUserAuthentication', array('isAdmin', 'getFilePermissions'));
        $storageMock = $this->getMock('TYPO3\\CMS\\Core\\Resource\\ResourceStorage', array(), array(), '', FALSE);
        $storageMock->expects($this->any())->method('getUid')->will($this->returnValue($storageUid));

        $subject
            ->expects($this->any())
            ->method('isAdmin')
            ->will($this->returnValue(FALSE));

        $subject
            ->expects($this->any())
            ->method('getFilePermissions')
            ->will($this->returnValue($defaultPermissions));

        $subject->userTS = array(
            'permissions.' => array(
                'file.' => array(
                    'storage.' => array(
                        $storageUid . '.' => $storagePermissions
                    ),
                ),
            )
        );

        $this->assertEquals($expectedPermissions, $subject->getFilePermissionsForStorage($storageMock));
    }

    public function getFilePermissionsFromStorageAlwaysReturnsDefaultPermissionsForAdmins(array $defaultPermissions, $storageUid, array $storagePermissions) {
        $subject = $this->getMock('TYPO3\\CMS\\Core\\Authentication\\BackendUserAuthentication', array('isAdmin', 'getFilePermissions'));
        $storageMock = $this->getMock('TYPO3\\CMS\\Core\\Resource\\ResourceStorage', array(), array(), '', FALSE);
        $storageMock->expects($this->any())->method('getUid')->will($this->returnValue($storageUid));

        $subject
            ->expects($this->any())
            ->method('isAdmin')
            ->will($this->returnValue(TRUE));

        $subject
            ->expects($this->any())
            ->method('getFilePermissions')
            ->will($this->returnValue($defaultPermissions));

        $subject->userTS = array(
            'permissions.' => array(
                'file.' => array(
                    'storage.' => array(
                        $storageUid . '.' => $storagePermissions
                    ),
                ),
            )
        );

        $this->assertEquals($defaultPermissions, $subject->getFilePermissionsForStorage($storageMock));
    }

    public function getFilePermissionsTakesUserDefaultPermissionsFromRecordIntoAccountIfUserIsNotAdminDataProvider() {
        return array(
            'No permission' => array(
                '',
                array(
                    'addFile' => FALSE,
                    'readFile' => FALSE,
                    'writeFile' => FALSE,
                    'copyFile' => FALSE,
                    'moveFile' => FALSE,
                    'renameFile' => FALSE,
                    'unzipFile' => FALSE,
                    'deleteFile' => FALSE,
                    'addFolder' => FALSE,
                    'readFolder' => FALSE,
                    'copyFolder' => FALSE,
                    'moveFolder' => FALSE,
                    'renameFolder' => FALSE,
                    'writeFolder' => FALSE,
                    'deleteFolder' => FALSE,
                    'recursivedeleteFolder' => FALSE
                )
            ),
            'Standard file permissions' => array(
                'addFile,readFile,writeFile,copyFile,moveFile,renameFile,deleteFile',
                array(
                    'addFile' => TRUE,
                    'readFile' => TRUE,
                    'writeFile' => TRUE,
                    'copyFile' => TRUE,
                    'moveFile' => TRUE,
                    'renameFile' => TRUE,
                    'unzipFile' => FALSE,
                    'deleteFile' => TRUE,
                    'addFolder' => FALSE,
                    'readFolder' => FALSE,
                    'copyFolder' => FALSE,
                    'moveFolder' => FALSE,
                    'renameFolder' => FALSE,
                    'writeFolder' => FALSE,
                    'deleteFolder' => FALSE,
                    'recursivedeleteFolder' => FALSE
                )
            ),
            'Unzip allowed' => array(
                'readFile,unzipFile',
                array(
                    'addFile' => FALSE,
                    'readFile' => TRUE,
                    'writeFile' => FALSE,
                    'copyFile' => FALSE,
                    'moveFile' => FALSE,
                    'renameFile' => FALSE,
                    'unzipFile' => TRUE,
                    'deleteFile' => FALSE,
                    'addFolder' => FALSE,
                    'readFolder' => FALSE,
                    'writeFolder' => FALSE,
                    'copyFolder' => FALSE,
                    'moveFolder' => FALSE,
                    'renameFolder' => FALSE,
                    'deleteFolder' => FALSE,
                    'recursivedeleteFolder' => FALSE
                )
            ),
            'Standard folder permissions' => array(
                'addFolder,readFolder,moveFolder,renameFolder,writeFolder,deleteFolder',
                array(
                    'addFile' => FALSE,
                    'readFile' => FALSE,
                    'writeFile' => FALSE,
                    'copyFile' => FALSE,
                    'moveFile' => FALSE,
                    'renameFile' => FALSE,
                    'unzipFile' => FALSE,
                    'deleteFile' => FALSE,
                    'addFolder' => TRUE,
                    'readFolder' => TRUE,
                    'writeFolder' => TRUE,
                    'copyFolder' => FALSE,
                    'moveFolder' => TRUE,
                    'renameFolder' => TRUE,
                    'deleteFolder' => TRUE,
                    'recursivedeleteFolder' => FALSE
                )
            ),
            'Copy folder allowed' => array(
                'readFolder,copyFolder',
                array(
                    'addFile' => FALSE,
                    'readFile' => FALSE,
                    'writeFile' => FALSE,
                    'copyFile' => FALSE,
                    'moveFile' => FALSE,
                    'renameFile' => FALSE,
                    'unzipFile' => FALSE,
                    'deleteFile' => FALSE,
                    'addFolder' => FALSE,
                    'readFolder' => TRUE,
                    'writeFolder' => FALSE,
                    'copyFolder' => TRUE,
                    'moveFolder' => FALSE,
                    'renameFolder' => FALSE,
                    'deleteFolder' => FALSE,
                    'recursivedeleteFolder' => FALSE
                )
            ),
            'Copy folder and remove subfolders allowed' => array(
                'readFolder,copyFolder,recursivedeleteFolder',
                array(
                    'addFile' => FALSE,
                    'readFile' => FALSE,
                    'writeFile' => FALSE,
                    'copyFile' => FALSE,
                    'moveFile' => FALSE,
                    'renameFile' => FALSE,
                    'unzipFile' => FALSE,
                    'deleteFile' => FALSE,
                    'addFolder' => FALSE,
                    'readFolder' => TRUE,
                    'writeFolder' => FALSE,
                    'copyFolder' => TRUE,
                    'moveFolder' => FALSE,
                    'renameFolder' => FALSE,
                    'deleteFolder' => FALSE,
                    'recursivedeleteFolder' => TRUE
                )
            ),
        );
    }

    public function getFilePermissionsTakesUserDefaultPermissionsFromRecordIntoAccountIfUserIsNotAdmin($permissionValue, $expectedPermissions) {
        $subject = $this->getMock('TYPO3\\CMS\\Core\\Authentication\\BackendUserAuthentication', array('isAdmin'));

        $subject
            ->expects($this->any())
            ->method('isAdmin')
            ->will($this->returnValue(FALSE));

        $subject->userTS = array();
        $subject->groupData['file_permissions'] = $permissionValue;
        $this->assertEquals($expectedPermissions, $subject->getFilePermissions());
    }

    public function getFilePermissionsGrantsAllPermissionsToAdminUsers() {
        $subject = $this->getMock('TYPO3\\CMS\\Core\\Authentication\\BackendUserAuthentication', array('isAdmin'));

        $subject
            ->expects($this->any())
            ->method('isAdmin')
            ->will($this->returnValue(TRUE));

        $expectedPermissions = array(
            'addFile' => TRUE,
            'readFile' => TRUE,
            'writeFile' => TRUE,
            'copyFile' => TRUE,
            'moveFile' => TRUE,
            'renameFile' => TRUE,
            'unzipFile' => TRUE,
            'deleteFile' => TRUE,
            'addFolder' => TRUE,
            'readFolder' => TRUE,
            'writeFolder' => TRUE,
            'copyFolder' => TRUE,
            'moveFolder' => TRUE,
            'renameFolder' => TRUE,
            'deleteFolder' => TRUE,
            'recursivedeleteFolder' => TRUE
        );

        $this->assertEquals($expectedPermissions, $subject->getFilePermissions());
    }

}