wiki.techinc.nl/tests/phpunit/includes/api/ApiRevisionDeleteTest.php
libraryupgrader 5357695270 build: Updating dependencies
composer:
* mediawiki/mediawiki-codesniffer: 36.0.0 → 37.0.0
  The following sniffs now pass and were enabled:
  * Generic.ControlStructures.InlineControlStructure
  * MediaWiki.PHPUnit.AssertCount.NotUsed

npm:
* svgo: 2.3.0 → 2.3.1
  * https://npmjs.com/advisories/1754 (CVE-2021-33587)

Change-Id: I2a9bbee2fecbf7259876d335f565ece4b3622426
2021-07-22 03:36:05 +00:00

146 lines
4.8 KiB
PHP

<?php
use MediaWiki\Block\DatabaseBlock;
use MediaWiki\Block\Restriction\PageRestriction;
use MediaWiki\MediaWikiServices;
use MediaWiki\Revision\RevisionRecord;
use MediaWiki\Revision\SlotRecord;
use MediaWiki\Tests\Unit\Permissions\MockAuthorityTrait;
/**
* Tests for action=revisiondelete
* @covers APIRevisionDelete
* @group API
* @group medium
* @group Database
*/
class ApiRevisionDeleteTest extends ApiTestCase {
use MockAuthorityTrait;
public static $page = 'Help:ApiRevDel_test';
public $revs = [];
protected function setUp(): void {
parent::setUp();
// Make a few edits for us to play with
for ( $i = 1; $i <= 5; $i++ ) {
$this->editPage( self::$page, MWCryptRand::generateHex( 10 ), 'summary' );
$this->revs[] = Title::newFromText( self::$page )->getLatestRevID( Title::READ_LATEST );
}
}
public function testHidingRevisions() {
$performer = $this->mockAnonAuthorityWithPermissions( [ 'writeapi', 'deleterevision' ] );
$revid = array_shift( $this->revs );
$out = $this->doApiRequestWithToken( [
'action' => 'revisiondelete',
'type' => 'revision',
'target' => self::$page,
'ids' => $revid,
'hide' => 'content|user|comment',
], null, $performer );
// Check the output
$out = $out[0]['revisiondelete'];
$this->assertEquals( 'Success', $out['status'] );
$this->assertArrayHasKey( 'items', $out );
$item = $out['items'][0];
$this->assertTrue( $item['userhidden'], 'userhidden' );
$this->assertTrue( $item['commenthidden'], 'commenthidden' );
$this->assertTrue( $item['texthidden'], 'texthidden' );
$this->assertEquals( $revid, $item['id'] );
// Now check that that revision was actually hidden
$revRecord = $this->getServiceContainer()
->getRevisionLookup()
->getRevisionById( $revid );
$this->assertNull( $revRecord->getContent( SlotRecord::MAIN, RevisionRecord::FOR_PUBLIC ) );
$this->assertNull( $revRecord->getComment( RevisionRecord::FOR_PUBLIC ) );
$this->assertNull( $revRecord->getUser( RevisionRecord::FOR_PUBLIC ) );
// Now test unhiding!
$out2 = $this->doApiRequestWithToken( [
'action' => 'revisiondelete',
'type' => 'revision',
'target' => self::$page,
'ids' => $revid,
'show' => 'content|user|comment',
], null, $performer );
// Check the output
$out2 = $out2[0]['revisiondelete'];
$this->assertEquals( 'Success', $out2['status'] );
$this->assertArrayHasKey( 'items', $out2 );
$item = $out2['items'][0];
$this->assertFalse( $item['userhidden'], 'userhidden' );
$this->assertFalse( $item['commenthidden'], 'commenthidden' );
$this->assertFalse( $item['texthidden'], 'texthidden' );
$this->assertEquals( $revid, $item['id'] );
// Now check that that revision was actually unhidden
$revRecord = $this->getServiceContainer()
->getRevisionLookup()
->getRevisionById( $revid );
$this->assertNotNull( $revRecord->getContent( SlotRecord::MAIN, RevisionRecord::FOR_PUBLIC ) );
$this->assertNotNull( $revRecord->getComment( RevisionRecord::FOR_PUBLIC ) );
$this->assertNotNull( $revRecord->getUser( RevisionRecord::FOR_PUBLIC ) );
}
public function testUnhidingOutput() {
$performer = $this->mockAnonAuthorityWithPermissions( [ 'writeapi', 'deleterevision' ] );
$revid = array_shift( $this->revs );
// Hide revisions
$this->doApiRequestWithToken( [
'action' => 'revisiondelete',
'type' => 'revision',
'target' => self::$page,
'ids' => $revid,
'hide' => 'content|user|comment',
], null, $performer );
$out = $this->doApiRequestWithToken( [
'action' => 'revisiondelete',
'type' => 'revision',
'target' => self::$page,
'ids' => $revid,
'show' => 'comment',
], null, $performer );
$out = $out[0]['revisiondelete'];
$this->assertEquals( 'Success', $out['status'] );
$this->assertArrayHasKey( 'items', $out );
$item = $out['items'][0];
// Check it has userhidden & texthidden
// but not commenthidden
$this->assertTrue( $item['userhidden'], 'userhidden' );
$this->assertFalse( $item['commenthidden'], 'commenthidden' );
$this->assertTrue( $item['texthidden'], 'texthidden' );
$this->assertEquals( $revid, $item['id'] );
}
public function testPartiallyBlockedPage() {
$this->setExpectedApiException( 'apierror-blocked-partial' );
$performer = $this->mockAnonAuthorityWithPermissions( [ 'writeapi', 'deleterevision' ] );
$block = new DatabaseBlock( [
'address' => $performer->getUser(),
'by' => static::getTestSysop()->getUser(),
'sitewide' => false,
] );
$block->setRestrictions( [
new PageRestriction( 0, Title::newFromText( self::$page )->getArticleID() )
] );
MediaWikiServices::getInstance()->getDatabaseBlockStore()->insertBlock( $block );
$revid = array_shift( $this->revs );
$this->doApiRequestWithToken( [
'action' => 'revisiondelete',
'type' => 'revision',
'target' => self::$page,
'ids' => $revid,
'hide' => 'content|user|comment',
], null, $performer );
}
}