public GetEffectivePermission ( System.Guid permissionId, HiveId userId, HiveId entityId = default(HiveId) ) : |
||
permissionId | System.Guid | The permission id. |
userId | HiveId | The user id. |
entityId | HiveId | The entity id. |
Résultat |
public void PermissionsServiceTests_UserGroup_HasPermission_Success() { //Arrange var permissionsService = new PermissionsService(_hive, _permissions, _membershipService); var userGroupIds = _userGroups.Select(x => x.Id).ToArray(); //Assert // Both permissions set to allow, no node inheritance Assert.IsTrue(permissionsService.GetEffectivePermission(new Guid(FixedPermissionIds.Copy), userGroupIds).IsAllowed()); // One permission set to allow, one deny, no node inheritance Assert.IsFalse(permissionsService.GetEffectivePermission(new Guid(FixedPermissionIds.Save), userGroupIds).IsAllowed()); Assert.IsFalse(permissionsService.GetEffectivePermission(new Guid(FixedPermissionIds.Publish), userGroupIds).IsAllowed()); // One permission set to inherit, one set to allow, no node inheritance Assert.IsTrue(permissionsService.GetEffectivePermission(new Guid(FixedPermissionIds.Hostnames), userGroupIds).IsAllowed()); // Both permissions set to inherit, no node inheritance Assert.IsFalse(permissionsService.GetEffectivePermission(new Guid(FixedPermissionIds.Move), userGroupIds).IsAllowed()); // Both permissions set to allow, no node inheritance Assert.IsTrue(permissionsService.GetEffectivePermission(new Guid(FixedPermissionIds.Copy), userGroupIds, _childContentNode.Id).IsAllowed()); // One permission set to allow, one deny, node inheritance Assert.IsFalse(permissionsService.GetEffectivePermission(new Guid(FixedPermissionIds.Save), userGroupIds, _childContentNode.Id).IsAllowed()); Assert.IsTrue(permissionsService.GetEffectivePermission(new Guid(FixedPermissionIds.Publish), userGroupIds, _childContentNode.Id).IsAllowed()); // In this instance, becuase the deny permission is inherited, the allow permission takes precedence // One permission set to inherit, one set to allow, node inheritance Assert.IsTrue(permissionsService.GetEffectivePermission(new Guid(FixedPermissionIds.Hostnames), userGroupIds, _childContentNode.Id).IsAllowed()); // Both permissions set to inherit, node inheritance Assert.IsFalse(permissionsService.GetEffectivePermission(new Guid(FixedPermissionIds.Move), userGroupIds, _childContentNode.Id).IsAllowed()); }
public void PermissionsServiceTests_Non_Entity_Actions_Dont_Check_Id() { //Arrange var permissionsService = new PermissionsService(_hive, _permissions, _membershipService); //Assert // Child content node has a BackOffice permission defined and set to Deny where system root has one set to Allow // because BackOfficeAccess permission is not an entity action, it should go straight to checking the system root // so should come back as allow. Assert.IsTrue(permissionsService.GetEffectivePermission(new Guid(FixedPermissionIds.BackOfficeAccess), _userId, _childContentNode.Id).IsAllowed()); }