Ticket #52094: statusPerm.php

<?php


class Tests_Query_Status_Perm extends WP_UnitTestCase {

        static $subscriber;
        static $editor;

        static public function setUpBeforeClass() {
                $role = get_role( 'subscriber' );
                $role->add_cap( 'read_private_pages' );

                self::$subscriber = wp_insert_user(array(
                        'user_login' => 'subscriber',
                        'user_role'  => 'subscriber',
                        'user_pass'  => '123',
                ));

                self::$editor = wp_insert_user(array(
                        'user_login' => 'editor',
                        'user_role'  => 'editor',
                        'user_pass'  => '123',
                ));

                wp_insert_post(
                        array(
                                'post_title'  => 'public post',
                                'post_status' => 'publish',
                                'post_type'   => 'post',
                                'post_author' => self::$editor,
                        )
                );

                wp_insert_post(
                        array(
                                'post_title'  => 'public page',
                                'post_status' => 'publish',
                                'post_type'   => 'page',
                                'post_author' => self::$editor,
                        )
                );

                wp_insert_post(
                        array(
                                'post_title'  => 'private post',
                                'post_status' => 'private',
                                'post_type'   => 'post',
                                'post_author' => self::$editor,
                        )
                );

                wp_insert_post(
                        array(
                                'post_title'  => 'private page',
                                'post_status' => 'private',
                                'post_type'   => 'page',
                                'post_author' => self::$editor,
                        )
                );
        }

        public function test_perm_readable() {
                wp_set_current_user( 1 ); // admin.
                $query = new WP_Query(
                        array(
                                'post_type'   => array(
                                        'post',
                                        'page',
                                ),
                                'post_status' => 'private',
                                'perm'        => 'readable',
                        )
                );
                $this->assertSame( 2, $query->found_posts, 'admin can read private posts and pages and should see both editor\'s posts');
        }

        public function test_perm_readable_multiple_statuses() {
                wp_set_current_user( 1 ); // admin.
                $query = new WP_Query(
                        array(
                                'post_type'   => array(
                                        'post',
                                        'page',
                                ),
                                'post_status' => array( 'private', 'publish' ),
                                'perm'        => 'readable',
                        )
                );
                $this->assertSame( 4, $query->found_posts, 'admin can read private posts and pages and should see both editor\'s posts');
        }

        public function test_perm_editable() {
                wp_set_current_user( 1 ); // admin.
                $query = new WP_Query(
                        array(
                                'post_type'   => array(
                                        'post',
                                        'page',
                                ),
                                'post_status' => 'private',
                                'perm'        => 'editable',
                        )
                );
                $this->assertSame( 2, $query->found_posts, 'admin can edit private posts and pages and should see both editor\'s posts');
        }

        public function test_perm_readable_not_admin() {
                wp_set_current_user( self::$subscriber ); // admin.
                $query = new WP_Query(
                        array(
                                'post_type'   => array(
                                        'post',
                                        'page',
                                ),
                                'post_status' => 'private',
                                'perm'        => 'readable',
                        )
                );
                $this->assertSame( 1, $query->found_posts, 'subscriber can read private pages and pages and should see editor\'s page');
        }

        public function test_perm_readable_custom_status() {
                wp_set_current_user( self::$subscriber ); // admin.

                register_post_status(
                        'private_test',
                        array(
                                'private' => true,
                        )
                );

                wp_insert_post(
                        array(
                                'post_title'  => 'private custom post status',
                                'post_status' => 'private_test',
                                'post_type'   => 'post',
                                'post_author' => self::$editor,
                        )
                );

                $query = new WP_Query(
                        array(
                                'post_type'   => array(
                                        'post',
                                        'page',
                                ),
                                'post_status' => 'private_test',
                                'perm'        => 'readable',
                        )
                );
                $this->assertSame( 0, $query->found_posts, 'subscriber cant read private posts of this custom status and should not get any result');
        }

}