Changeset 43438 for branches/4.9/tests/phpunit/tests/rest-api/rest-attachments-controller.php

Timestamp:

07/11/2018 09:20:10 AM (7 years ago)

Author:

pento

Message:

REST API: Declare user capabilities using JSON Hyper Schema's "targetSchema".

There are a variety of operations a WordPress user can only perform if they have the correct capabilities. A REST API client should only display UI for one of these operations if the WordPress user can perform the operation.

Rather than requiring REST API clients to calculate whether to display UI based on potentially complicated combinations of user capabilities, targetSchema allows us to expose a single flag to show whether the corresponding UI should be displayed.

This change also includes flags on post objects for the following actions:

• action-publish: The current user can publish this post.
• action-sticky: The current user can make this post sticky, and the post type supports sticking.
• `action-assign-author': The current user can change the author on this post.
• action-assign-{$taxonomy}: The current user can assign terms from the "$taxonomy" taxonomy to this post.
• action-create-{$taxonomy}: The current user can create terms int the "$taxonomy" taxonomy.

Merges [43437] to the 4.9 branch.

Props TimothyBlynJacobs, danielbachhuber.
Fixes #44287.

Location:

branches/4.9

Files:

• . (modified) (1 prop)
• tests/phpunit/tests/rest-api/rest-attachments-controller.php (modified) (1 diff)

branches/4.9/tests/phpunit/tests/rest-api/rest-attachments-controller.php

@@ -1212 +1212 @@
     }
 
+    public function test_links_exist() {
+
+        wp_set_current_user( self::$editor_id );
+
+        $post = self::factory()->attachment->create( array( 'post_author' => self::$editor_id ) );
+        $this->assertGreaterThan( 0, $post );
+
+        $request = new WP_REST_Request( 'GET', "/wp/v2/media/{$post}" );
+        $request->set_query_params( array( 'context' => 'edit' ) );
+
+        $response = rest_get_server()->dispatch( $request );
+        $links    = $response->get_links();
+
+        $this->assertArrayHasKey( 'self', $links );
+    }
+
+    public function test_publish_action_ldo_not_registered() {
+
+        $response = rest_get_server()->dispatch( new WP_REST_Request( 'OPTIONS', '/wp/v2/media' ) );
+        $data     = $response->get_data();
+        $schema   = $data['schema'];
+
+        $this->assertArrayHasKey( 'links', $schema );
+        $publish = wp_list_filter( $schema['links'], array( 'rel' => 'https://api.w.org/action-publish' ) );
+
+        $this->assertCount( 0, $publish, 'LDO not found on schema.' );
+    }
+
+    public function test_publish_action_link_does_not_exists() {
+
+        wp_set_current_user( self::$editor_id );
+
+        $post = self::factory()->attachment->create( array( 'post_author' => self::$editor_id ) );
+        $this->assertGreaterThan( 0, $post );
+
+        $request = new WP_REST_Request( 'GET', "/wp/v2/media/{$post}" );
+        $request->set_query_params( array( 'context' => 'edit' ) );
+
+        $response = rest_get_server()->dispatch( $request );
+        $links    = $response->get_links();
+
+        $this->assertArrayNotHasKey( 'https://api.w.org/action-publish', $links );
+    }
+
     public function tearDown() {
         parent::tearDown();