5 ); // User for testing - we share with this user & log in as them for checking protected $account_id; // File that should not be available due to permissions protected $no_access; // Use a completely new user, so we know it's there and "clean" protected $account = array( 'account_lid' => 'user_test', 'account_firstname' => 'Access', 'account_lastname' => 'Test', 'account_passwd' => 'passw0rd', 'account_passwd_2' => 'passw0rd', // Don't let them in Default, any set ACLs will interfere with tests 'account_primary_group' => 'Testers', 'account_groups' => ['Testers'] ); protected function setUp() : void { // Check we have basic access if(!is_readable($GLOBALS['egw_info']['server']['files_dir'])) { $this->markTestSkipped('No read access to files dir "' .$GLOBALS['egw_info']['server']['files_dir'].'"' ); } if(!is_writable($GLOBALS['egw_info']['server']['files_dir'])) { $this->markTestSkipped('No write access to files dir "' .$GLOBALS['egw_info']['server']['files_dir'].'"' ); } $this->mount(); } protected function tearDown() : void { // Make sure we're on the original user. Failures could cause us to be logged in as someone else $this->switchUser($GLOBALS['EGW_USER'], $GLOBALS['EGW_PASSWORD']); $this->mount(); // Need to ask about mounts, or other tests fail Vfs::mount(); $backup = Vfs::$is_root; Vfs::$is_root = true; if(static::LOG_LEVEL > 1) { if($this->account_id) error_log($this->getName() . ' user to be removed: ' . $this->account_id); error_log($this->getName() . ' files for removal:'); error_log(implode("\n",$this->files)); error_log($this->getName() . ' mounts for removal:'); error_log(implode("\n",$this->mounts)); } // Remove our other test user if($this->account_id) { $GLOBALS['egw']->accounts->delete($this->account_id); } // Remove any added files (as root to limit versioning issues) if(in_array('/',$this->files)) { $this->fail('Tried to remove root'); } foreach($this->files as $file) { Vfs::unlink($file); } // Remove any mounts foreach($this->mounts as $mount) { Vfs::umount($mount); } Vfs::$is_root = $backup; } ///// /// These tests will be run by every extending class, with /// the extending class's setUp(). They can be overridden, but /// we get free tests this way with no copy/paste ///// /** * Simple test that we can write something and it's there * By putting it in the base class, this test gets run for every backend */ public function testSimpleReadWrite() : string { if(!$this->test_file) { $this->markTestSkipped("No test file set - set it in setUp() or overriding test"); } // Check that the file is not there $pre_start = Vfs::stat($this->test_file); $this->assertEquals(null,$pre_start, "File '$this->test_file' was there before we started, check clean up" ); // Write $contents = $this->getName() . "\nJust a test ;)\n"; $this->assertNotFalse( file_put_contents(Vfs::PREFIX . $this->test_file, $contents), "Could not write file $this->test_file" ); // Check contents are unchanged $this->assertEquals( $contents, file_get_contents(Vfs::PREFIX . $this->test_file), "Read file contents do not match what was written" ); return $this->test_file; } /** * Simple delete of a file * By putting it in the base class, this test gets run for every backend * * @depends testSimpleReadWrite */ public function testDelete($file) : void { if(!$this->test_file && !$file) { $this->markTestSkipped("No test file set - set it in setUp() or overriding test"); } // Write if(!$file) { $contents = $this->getName() . "\nJust a test ;)\n"; $this->assertNotFalse( file_put_contents(Vfs::PREFIX . $this->test_file, $contents), "Could not write file $this->test_file" ); $start = Vfs::stat($this->test_file); $this->assertNotNull( $start, "File '$this->test_file' was not what we expected to find after writing" ); } else { $this->test_file = $file; } Vfs::unlink($this->test_file); $post = Vfs::stat($this->test_file); $this->assertEquals(null,$post, "File '$this->test_file' was there after deleting" ); } /** * Check that a user with no permission to a file cannot access the file * * @depends testSimpleReadWrite * @throws Api\Exception\AssertionFailed */ public function testNoReadAccess() : void { if(!$this->test_file) { $this->markTestSkipped("No test file set - set it in setUp() or overriding test"); } // Check that the file is not there $pre_start = Vfs::stat($this->test_file); $this->assertEquals(null,$pre_start, "File '$this->test_file' was there before we started, check clean up" ); // Write $file = $this->test_file; $contents = $this->getName() . "\nJust a test ;)\n"; $this->assertNotFalse( file_put_contents(Vfs::PREFIX . $file, $contents), "Could not write file $file" ); // Create another user who has no access to our file $user_b = $this->makeUser(); // Log in as them $this->switchUser($this->account['account_lid'], $this->account['account_passwd']); $this->mount(); // Check the file $this->assertFalse( Vfs::is_readable($file), "File '$file' was accessible by another user who had no permission" ); $this->assertFalse( file_get_contents(Vfs::PREFIX . $file), "Read someone else's file with no permission. " . Vfs::PREFIX . $file ); } /** * Check that a user with permission to a file can access the file * * @depends testSimpleReadWrite * @throws Api\Exception\AssertionFailed */ public function testWithAccess() : void { if(!$this->test_file) { $this->markTestSkipped("No test file set - set it in setUp() or overriding test"); } // Check that the file is not there $pre_start = Vfs::stat($this->test_file); $this->assertEquals(null,$pre_start, "File '$this->test_file' was there before we started, check clean up" ); // Write $file = $this->test_file; $contents = $this->getName() . "\nJust a test ;)\n"; $this->assertNotFalse( file_put_contents(Vfs::PREFIX . $file, $contents), "Could not write file $file" ); $pre = Vfs::stat($this->test_file); // Create another user who has no access to our file $user_b = $this->makeUser(); // Allow access $this->allowAccess( $this->getName(false), $file, $user_b, 'r' ); // Log in as them $this->switchUser($this->account['account_lid'], $this->account['account_passwd']); $this->mount(); // Check the file $post = Vfs::stat($file); $this->assertNotNull($post, "File '$file' was not accessible by another user who had permission" ); $this->assertEquals( $contents, file_get_contents(Vfs::PREFIX . $file), "Problem reading contents of someone else's file (".Vfs::PREFIX . "$file) with permission" ); $this->assertTrue( Vfs::is_readable($file), "Vfs says $file is not readable. It should be." ); } ////// Handy functions /////// /** * Create a test user, returns the account ID * * @return int */ protected function makeUser(Array $account = []) : int { if(count($account) == 0) { $account = $this->account; } if(($account_id = $GLOBALS['egw']->accounts->name2id($account['account_lid']))) { // Delete if there in case something went wrong $GLOBALS['egw']->accounts->delete($account_id); } // It needs its own group too, Default will mess with any ACL tests if(!$GLOBALS['egw']->accounts->exists($account['account_primary_group'])) { $group = $this->makeTestGroup(); } // Execute $command = new \admin_cmd_edit_user(false, $account); $command->comment = 'Needed for unit test ' . $this->getName(); $command->run(); $this->account_id = $command->account; if($group) { // Had to create the group, but we don't want current user in it $remove_group = new \admin_cmd_edit_group('Testers',['account_lid' => 'Testers', 'account_members' => [$this->account_id]]); $remove_group->run(); } return $this->account_id; } /** * Make a test group we can put our users in to avoid any ACLs on Default group */ protected function makeTestGroup() { // Execute $command = new \admin_cmd_edit_group(false, ['account_lid' => 'Testers', 'account_members' => $GLOBALS['egw_info']['user']['account_id']]); $command->comment = 'Needed for unit test ' . $this->getName(); $command->run(); return $command->account; } /** * Make a filename that reflects the current test */ protected function getFilename($path = null) { if(is_null($path)) $path = Vfs::get_home_dir().'/'; if(substr($path,-1,1) !== '/') $path = $path . '/'; $reflect = new \ReflectionClass($this); return $path . $reflect->getShortName() . '_' . $this->getName() . '.txt'; } /** * Mount the needed filesystem * * This may be called multiple times for each test as we change users, logout, etc. */ abstract protected function mount() : void; /** * Allow access to the given file for the given user ID * * Using whatever way works best for the mount/streamwrapper being tested, allow the user access * * @param string $test_name * @param string $test_file * @param int $test_user * @param string $needed r, w, rw * @return mixed */ abstract protected function allowAccess(string $test_name, string &$test_file, int $test_user, string $needed) : void; /** * Mount the app entries into the filesystem * * @param string $path */ protected function mountLinks($path) { Vfs::$is_root = true; $url = Links\StreamWrapper::PREFIX . '/apps'; $this->assertTrue( Vfs::mount($url, $path, false, false), "Unabe to mount $url => $path" ); Vfs::$is_root = false; $this->mounts[] = $path; Vfs::clearstatcache(); Vfs::init_static(); } /** * Start versioning for the given path * * @param string $path */ protected function mountVersioned($path) { if (!class_exists('EGroupware\Stylite\Vfs\Versioning\StreamWrapper')) { $this->markTestSkipped("No versioning available"); } if(substr($path, -1) == '/') $path = substr($path, 0, -1); $backup = Vfs::$is_root; Vfs::$is_root = true; $url = Versioning\StreamWrapper::PREFIX.$path; $this->assertTrue(Vfs::mount($url,$path), "Unable to mount $path as versioned"); Vfs::$is_root = $backup; $this->mounts[] = $path; Vfs::clearstatcache(); Vfs::init_static(); Vfs\StreamWrapper::init_static(); } /** * Mount a test filesystem path (api/tests/fixtures/Vfs/filesystem_mount) * at the given VFS path * * @param string $path */ protected function mountFilesystem($path) { // Vfs breaks if path has trailing / if(substr($path, -1) == '/') $path = substr($path, 0, -1); $backup = Vfs::$is_root; Vfs::$is_root = true; $fs_path = realpath(__DIR__ . '/../fixtures/Vfs/filesystem_mount'); if(!file_exists($fs_path)) { $this->fail("Missing filesystem test directory 'api/tests/fixtures/Vfs/filesystem_mount'"); } $url = Filesystem\StreamWrapper::SCHEME.'://default'. $fs_path. '?user='.$GLOBALS['egw_info']['user']['account_id'].'&group=Default&mode=775'; $this->assertTrue(Vfs::mount($url,$path), "Unable to mount $url to $path"); Vfs::$is_root = $backup; $this->mounts[] = $path; Vfs::clearstatcache(); Vfs::init_static(); Vfs\StreamWrapper::init_static(); } /** * Merge a test filesystem path (api/tests/fixtures/Vfs/filesystem_mount) * with the given VFS path * * @param string $path */ protected function mountMerge($path) { // Vfs breaks if path has trailing / if(substr($path, -1) == '/') $path = substr($path, 0, -1); $backup = Vfs::$is_root; Vfs::$is_root = true; // I guess merge needs the dir in SQLFS first if(!Vfs::is_dir($path)) Vfs::mkdir($path); Vfs::chmod($path, 0750); Vfs::chown($path, $GLOBALS['egw_info']['user']['account_id']); $url = \EGroupware\Stylite\Vfs\Merge\StreamWrapper::SCHEME.'://default'.$path.'?merge=' . realpath(__DIR__ . '/../fixtures/Vfs/filesystem_mount'); $this->assertTrue(Vfs::mount($url,$path), "Unable to mount $url to $path"); Vfs::$is_root = $backup; $this->mounts[] = $path; Vfs::clearstatcache(); Vfs::init_static(); Vfs\StreamWrapper::init_static(); } /** * Add some files to the given path so there's something to find. * * @param string $path * * @return array of paths */ protected function addFiles($path, $content = false) { if(substr($path, -1) != '/') { $path .= '/'; } if(!$content) { $content = 'Test for ' . $this->getName() ."\n". Api\DateTime::to(); } $files = array(); // Plain file $files[] = $file = $path.'test_file.txt'; $this->assertTrue( file_put_contents(Vfs::PREFIX.$file, $content) !== FALSE, 'Unable to write test file "' . Vfs::PREFIX . $file .'" - check file permissions for CLI user' ); // Subdirectory $files[] = $dir = $path.'sub_dir/'; if(Vfs::is_dir($dir)) { Vfs::remove($dir); } $this->assertTrue( Vfs::mkdir($dir), 'Unable to create subdirectory ' . $dir ); // File in a subdirectory $files[] = $file = $dir.'subdir_test_file.txt'; $this->assertTrue( file_put_contents(Vfs::PREFIX.$file, $content) !== FALSE, 'Unable to write test file "' . Vfs::PREFIX . $file .'" - check file permissions for CLI user' ); // Symlinked file /* We don't test these because they don't work - the target will always * be outside the share root // Always says its empty $files[] = $symlink = $path.'symlink.txt'; if(Vfs::file_exists($symlink)) Vfs::remove($symlink); $this->assertTrue( Vfs::symlink($file, $symlink), "Unable to create symlink $symlink => $file" ); // Symlinked dir $files[] = $symlinked_dir = $path.'sym_dir/'; $this->assertTrue( Vfs::symlink($dir, $symlinked_dir), 'Unable to create symlinked directory ' . $symlinked_dir ); */ return $files; } }