Changeset 38378 for trunk/tests/phpunit/tests/user/mapMetaCap.php

Timestamp:

08/26/2016 06:22:28 PM (10 years ago)

Author:

johnbillion

Message:

Role/Capability: Only users who can manage options should be able to trash/delete the page for posts or the front page, as they are the only users who can restore it or subsequently alter the "Front page displays" setting.

Fixes #37580
Props JakePT

File:

• trunk/tests/phpunit/tests/user/mapMetaCap.php (modified) (1 diff)

trunk/tests/phpunit/tests/user/mapMetaCap.php

@@ -256 +256 @@
 
         }
+
+        /**
+         * Test deleting front page.
+         *
+         * @ticket 37580
+         */
+        function test_only_users_who_can_manage_options_can_delete_page_on_front() {
+                $post_id = self::factory()->post->create( array(
+                        'post_type'   => 'page',
+                        'post_status' => 'publish',
+                ) );
+
+                update_option( 'page_on_front', $post_id );
+                $caps = map_meta_cap( 'delete_page', $this->user_id, $post_id );
+                delete_option( 'page_on_front' );
+
+                $this->assertEquals( array( 'manage_options' ), $caps );
+        }
+
+        /**
+         * Test deleting posts page.
+         *
+         * @ticket 37580
+         */
+        function test_only_users_who_can_manage_options_can_delete_page_for_posts() {
+                $post_id = self::factory()->post->create( array(
+                        'post_type'   => 'page',
+                        'post_status' => 'publish',
+                ) );
+
+                update_option( 'page_for_posts', $post_id );
+                $caps = map_meta_cap( 'delete_page', $this->user_id, $post_id );
+                delete_option( 'page_for_posts' );
+
+                $this->assertEquals( array( 'manage_options' ), $caps );
+        }
 }