<?php

/**
 * @file
 * Test the UUID User Services integration.
 */

 /**
  * Test the UUID User Services integration.
  */
class UuidUserServicesTest extends ServicesWebTestCase {

  /**
   * The endpoint configuration.
   *
   * @var object
   */
  protected $endpoint = NULL;

  /**
   * {@inheritdoc}
   */
  public static function getInfo() {
    return array(
      'name' => 'UUID User Services tests',
      'description' => 'Test the user services resource UUID methods and actions.',
      'group' => 'UUID',
    );
  }

  /**
   * {@inheritdoc}
   */
  public function setUp() {
    parent::setUp(
      'ctools',
      'services',
      'rest_server',
      'uuid_services'
    );
    $this->endpoint = $this->saveNewEndpoint();
  }

  /**
   * {@inheritdoc}
   */
  public function saveNewEndpoint() {
    $edit = $this->populateEndpointFAPI();
    $endpoint = new stdClass();
    $endpoint->disabled = FALSE;
    $endpoint->api_version = 3;
    $endpoint->name = $edit['name'];
    $endpoint->server = $edit['server'];
    $endpoint->path = $edit['path'];
    $endpoint->authentication = array(
      'services' => 'services',
    );
    $endpoint->server_settings = array(
      'formatters' => array(
        'json' => TRUE,
        'bencode' => TRUE,
        'rss' => TRUE,
        'plist' => TRUE,
        'xmlplist' => TRUE,
        'php' => TRUE,
        'yaml' => TRUE,
        'jsonp' => FALSE,
        'xml' => FALSE,
      ),
      'parsers' => array(
        'application/x-yaml' => TRUE,
        'application/json' => TRUE,
        'application/vnd.php.serialized' => TRUE,
        'application/plist' => TRUE,
        'application/plist+xml' => TRUE,
        'application/x-www-form-urlencoded' => TRUE,
        'multipart/form-data' => TRUE,
      ),
    );
    $endpoint->resources = array(
      'user' => array(
        'operations' => array(
          'create' => array(
            'enabled' => 1,
          ),
          'retrieve' => array(
            'enabled' => 1,
          ),
          'update' => array(
            'enabled' => 1,
          ),
          'delete' => array(
            'enabled' => 1,
          ),
          'index' => array(
            'enabled' => 1,
          ),
        ),
      ),
    );
    $endpoint->debug = 1;
    $endpoint->export_type = FALSE;
    services_endpoint_save($endpoint);
    $endpoint = services_endpoint_load($endpoint->name);
    $this->assertTrue($endpoint->name == $edit['name'], 'Endpoint successfully created');
    return $endpoint;
  }

  /**
   * Tests user Retrieve.
   */
  public function testUserRetrieve() {
    $admin_user = $this->drupalCreateUser(array(
      'administer services',
      'administer users',
    ));
    $this->drupalLogin($admin_user);
    $other_user = $this->drupalCreateUser();

    // Verify user is found.
    $response = $this->servicesGet($this->endpoint->path . '/user/' . $other_user->uuid);
    $this->assertTrue($other_user->uuid == $response['body']->uuid,
      'Successfully received User info');
  }

  /**
   * Tests user Update his own account.
   */
  public function testUserUpdate() {
    $admin_user = $this->drupalCreateUser(array(
      'administer services',
      'administer users',
      'administer permissions',
    ));
    $this->drupalLogin($admin_user);

    $other_user = $this->drupalCreateUser();
    $update = array(
      'uuid' => $other_user->uuid,
      'roles' => array(
        '2' => 'authenticated user',
        '3' => 'administrator',
      ),
    );
    $this->servicesPut($this->endpoint->path . '/user/' . $other_user->uuid, $update);
    $user_after_update = user_load($other_user->uid, TRUE);
    $this->assertTrue(in_array('administrator', $user_after_update->roles), 'Administrator role successfully added');
  }

  /**
   * Tests user Update another account fail with no permissions.
   */
  public function testUserUpdatePermFail() {
    $user = $this->drupalCreateUser();
    $this->drupalLogin($user);

    $other_user = $this->drupalCreateUser();

    $update = array(
      'uuid' => $other_user->uuid,
      'name' => 'test_edit',
      'roles' => array(
        '2' => 'authenticated user',
        '3' => 'administrator',
      ),
    );
    $response = $this->servicesPut($this->endpoint->path . '/user/' . $other_user->uuid, $update);
    $user_after_update = user_load($other_user->uid, TRUE);
    $this->assertNotEqual($update['name'], $user_after_update->name, 'User name was not updated without the needed permissions');
    $this->assertFalse(in_array('administrator', $user_after_update->roles), 'Administrator role was not added without the needed permissions');
    $this->assertTrue($response['code'] == 403,
      'Updating the user failed without the needed permissions');
  }

  /**
   * Tests user Update his own account fail with no permissions.
   */
  public function testUserOwnUpdatePermFail() {
    $user = $this->drupalCreateUser([
      'access user profiles',
    ]);
    $this->drupalLogin($user);
    $user = user_load($user->uid, TRUE);

    $update = array(
      'uuid' => $user->uuid,
      'roles' => array(
        '2' => 'authenticated user',
        '3' => 'administrator',
      ),
    );
    $this->servicesPut($this->endpoint->path . '/user/' . $user->uuid, $update);
    $user_after_update = user_load($user->uid, TRUE);
    $this->assertFalse(in_array('administrator', $user_after_update->roles), 'Administrator role was not added without the needed permissions');
    $this->assertEqual($user->roles, $user_after_update->roles, 'Existing roles persist after update.');
  }

  /**
   * Tests user Delete.
   */
  public function testUserDelete() {
    $admin_user = $this->drupalCreateUser(array(
      'administer services',
      'administer users',
    ));
    $this->drupalLogin($admin_user);

    $other_user = $this->drupalCreateUser();

    $this->servicesDelete($this->endpoint->path . '/user/' . $other_user->uuid);
    $user_after_update = user_load($other_user->uid, TRUE);
    $this->assertTrue(empty($user_after_update), 'User was deleted');
  }

  /**
   * Tests user Delete fail with no permissions.
   */
  public function testUserDeletePermFail() {
    $user = $this->drupalCreateUser();
    $this->drupalLogin($user);

    $other_user = $this->drupalCreateUser();

    $response = $this->servicesDelete($this->endpoint->path . '/user/' . $other_user->uuid);
    $user_after_update = user_load($other_user->uid, TRUE);
    $this->assertTrue(!empty($user_after_update), 'User was not deleted without the needed permissions');
    $this->assertTrue($response['code'] == 403,
      'Deleting the user failed without the needed permissions');
  }

}