Club Drupal

<?php

/**

 */

drupal_load('module', 'ldap_test');

module_load_include('php', 'ldap_test', 'LdapTestCase.class');

require_once drupal_get_path('module', 'ldap_authorization_og') . '/LdapAuthorizationConsumerOG.class.php';

/**

 *

 */

class LdapAuthorizationOg2Tests extends LdapTestCase {

  public $groupBundle = 'group';

  public $groupType = 'node';

  public $group_content_type = NULL;

  public $user1;

  public $consumerType = 'og_group';

  public $module_name = 'ldap_authorization_og';

  protected $ldap_test_data;

  /**

   *

   */

  public static function getInfo() {

      'group' => 'LDAP Authorization',

      'name' => 'OG 7.x-2.x Tests.',

      'description' => 'Test ldap authorization og 2.',

  }

  /**

  /**

   *

   */

    variable_set('ldap_simpletest', 2);

    $this->user1 = $this->drupalCreateUser();

    // Create group and group content node types.

      'type' => 'group',

      'name' => 'OG Group',

    og_create_field(OG_GROUP_FIELD, $this->groupEntityType, $this->groupBundle);

    og_create_field(OG_AUDIENCE_FIELD, $this->groupEntityType, $this->groupBundle);

    $this->testFunctions->getCsvLdapData(LDAP_TEST_LDAP_NAME);

    foreach ($this->testFunctions->csvTables['groups'] as $guid => $group) {

      $label = $group['cn'];

      $settings['type'] = $this->groupBundle;

      $settings[OG_GROUP_FIELD][LANGUAGE_NONE][0]['value'] = 1;

      $settings['uid'] = $this->user1->uid;

   * Get test data in convenient format, so tests are easier to read and write.

   */

  public function getTestData($debug = FALSE) {

      list($group_nodes[$group_name], $group_entity_ids[$group_name]) = ldap_authorization_og2_get_group_from_name($this->groupEntityType, $group_name);

      $nid = $group_nodes[$group_name]->nid;

      $group_nids[$group_name] = $nid;

    if ($debug) {

      debug("group_nids"); debug($group_nids); debug("group_entity_ids"); debug($group_entity_ids); debug("roles"); debug($roles); debug("roles_by_name"); debug($roles_by_name);

    }

  }

  /**

     *   og_is_member($group_type, $gid, $entity_type = 'user', $entity = NULL, $states = array(OG_STATE_ACTIVE))

     */

      'entity_type' => 'user',

      'entity' => $web_user->uid,

      'field_name' => FALSE,

      'state' => OG_STATE_ACTIVE,

    $og_gryffindor_membership = og_group($this->groupType, $group_nids['gryffindor'], $values);

    $og_faculty_membership = og_group($this->groupType, $group_nids['faculty'], $values);

    // Need to reload because of issue with og_group and og_role_grant.

    $web_user = user_load($web_user->uid, TRUE);

    $user_entity = entity_load('user', $ids);

    $this->assertTrue(og_is_member($this->groupType, $group_nids['gryffindor'], 'user', $web_user),

    $this->assertTrue($og_auth->hasAuthorization($web_user, ldap_authorization_og_authorization_id($group_nids['faculty'], $roles_by_name['faculty'][OG_ADMINISTRATOR_ROLE], 'node')),

      'hasAuthorization() method works for non LDAP provisioned og authorization, faculty admin role', $this->ldapTestId);

      $consumer_ids['gryffindor'][OG_AUTHENTICATED_ROLE] => 'gryffindor member',

      $consumer_ids['faculty'][OG_AUTHENTICATED_ROLE] => 'faculty member',

      $consumer_ids['faculty'][OG_ADMINISTRATOR_ROLE] => 'faculty admin',

      $consumer_ids['faculty']['dungeon-master'] => 'faculty dungeon master',

    foreach ($should_haves as $consumer_id => $descriptor) {

      $this->assertTrue(ldap_authorization_og2_has_consumer_id($consumer_id, $web_user->uid),

    }

    $ldap_entry = NULL;

    $web_user = user_load($web_user->uid, TRUE);

    $this->assertTrue(ldap_authorization_og2_has_consumer_id($consumer_ids['faculty']['dungeon-master'], $web_user->uid),

      "LdapAuthorizationConsumerOG has faculty member role BEFORE authorizationRevoke() test revoke on member role " . $consumer_ids['faculty']['dungeon-master'], $this->ldapTestId);

    $web_user = user_load($web_user->uid, TRUE);

    $og_auth->authorizationRevoke($web_user, $user_data, $consumers, $ldap_entry, TRUE);

    $result = ldap_authorization_og2_has_consumer_id($consumer_ids['faculty']['dungeon-master'], $web_user->uid);

    $this->assertFalse($result,

      "LdapAuthorizationConsumerOG authorizationRevoke() test revoke on member role " . $consumer_ids['faculty']['dungeon-master'], $this->ldapTestId);

    $web_user = user_load($web_user->uid, TRUE);

    $og_auth->authorizationRevoke($web_user, $user_data, $consumers, $ldap_entry, TRUE);

    $this->assertFalse(ldap_authorization_og2_has_consumer_id($consumer_ids['faculty']['dungeon-master'], $web_user->uid),

      "LdapAuthorizationConsumerOG authorizationRevoke() test revoke on custom member role role " . $consumer_ids['faculty']['dungeon-master'], $this->ldapTestId);

    $initial_user_authorizations = $og_auth->usersAuthorizations($web_user, TRUE, TRUE);

    debug("initial_user_authorizations authorizations:"); debug($initial_user_authorizations);

    debug("initial_user data:"); debug($web_user->data);

    $success = ldap_authorization_og2_has_consumer_id($consumer_ids['students'][OG_AUTHENTICATED_ROLE], $web_user->uid);

    $this->assertTrue($success, "LdapAuthorizationConsumerOG authorizationGrant() test grant on member role " . $consumer_ids['students'][OG_AUTHENTICATED_ROLE], $this->ldapTestId);

    if (!$success) {

      debug("user authorizations:"); debug($og_auth->usersAuthorizations($web_user, TRUE));

    }

    $web_user = user_load($web_user->uid, TRUE);

    $this->assertFalse($result,

      'LdapAuthorizationConsumerOG authorizationRevoke() test revoke of bogus authorization', $this->ldapTestId);

    $web_user = user_load($web_user->uid, TRUE);

    $this->assertFalse($result,

      'LdapAuthorizationConsumerOG authorizationGrant() test grant of bogus authorization', $this->ldapTestId);

    $web_user = user_load($web_user->uid, TRUE);

    $this->assertFalse($result,

      'LdapAuthorizationConsumerOG authorizationRevoke()  test revoke malformed params', $this->ldapTestId);

    $web_user = user_load($web_user->uid, TRUE);

    $this->assertFalse($result,

      'LdapAuthorizationConsumerOG authorizationGrant() test grant malformed params', $this->ldapTestId);

    $sid = 'activedirectory1';

    $this->prepTestData(

    LDAP_TEST_LDAP_NAME,

    'provisionToDrupal',

    'default',

    'og_group2'

    $this->consumerAdminConf['og_group']->status = 0;

    $this->consumerAdminConf['og_group']->save();

    // Just see if the correct ones are derived.

    list($new_authorizations, $notifications) = ldap_authorizations_user_authorizations($hpotter, 'query');

    $this->consumerAdminConf['og_group']->status = 1;

    $this->consumerAdminConf['og_group']->save();

    // Remove old authmap in case it exists so test will work.

    db_delete('authmap')

    $this->consumerAdminConf['og_group']->synchOnLogon = 0;

    $this->consumerAdminConf['og_group']->save();

      'name' => 'hgrainger',

      'pass' => 'goodpwd',

    $this->drupalPost('user', $edit, t('Log in'));

    $this->assertText(

      t('Member for'),

    $this->consumerAdminConf['og_group']->synchOnLogon = 1;

    $this->consumerAdminConf['og_group']->save();

      'name' => 'hgrainger',

      'pass' => 'goodpwd',

    $this->drupalPost('user', $edit, t('Log in'));

    $this->assertText(t('Member for'), 'New Ldap user with good password authenticated.',

      'LDAP_authorz.Flags.synchOnLogon=1');

    // Set correct roles manually.

    $hpotter = user_load_by_name('hpotter');

    user_delete($hpotter->uid);

      'name' => 'hpotter',

      'pass' => 'goodpwd',

    $this->drupalPost('user', $edit, t('Log in'));

    $this->assertText(

      t('Member for'),

    $roles[$troublemaker->rid] = $troublemaker->name;

    $roles[$superadmin->rid] = $superadmin->name;

      'roles' => $roles,

        'ldap_authorizations' =>

        'og_group' =>

          $superadmin->name =>

    $hpotter = user_save($hpotter, $data);

    // Apply correct authorizations.  should remove the administrator role but not the manually created 'troublemaker' role.

    $hpotter = user_load($hpotter->uid, TRUE);

    $roles = $hpotter->roles;

    unset($roles[$superadmin->rid]);

    $hpotter = user_load($hpotter->uid, TRUE);

    list($new_authorizations, $notifications) = ldap_authorizations_user_authorizations($hpotter, 'set', 'og_group', 'logon');

    $hpotter = user_load($hpotter->uid, TRUE);

      // @todo.  this needs to be finished when creation of og groups is added to ldap authorization og functionality

      // Add new mapping to and enable create consumers.

      $this->drupalGet('user/logout');

      $new_role = 'oompa-loompas';

      $this->consumerAdminConf['og_group']->createConsumers = 1;

        'from' => 'cn=students,ou=groups,dc=hogwarts,dc=edu',

        'user_entered' => $new_role,

        'normalized' => 'node:' . $new_role . ':' . OG_AUTHENTICATED_ROLE,

        'simplified' => $new_role,

        'valid' => TRUE,

        'error_message' => '',

      $this->consumerAdminConf['og_group']->save();

        'name' => 'hpotter',

        'pass' => 'goodpwd',

      $this->drupalPost('user', $edit, t('Log in'));

      $new_role_created = in_array($new_role, array_values(user_roles()));