4 use RT::Test tests => 14;
6 my ($baseurl, $m) = RT::Test->started_ok;
7 ok $m->login, "logged in";
9 $m->follow_link_ok({ id => 'admin-global-group-rights'});
14 my $principal_id = shift;
16 $agent->form_name('ModifyGroupRights');
17 my @inputs = $agent->current_form->find_input("SetRights-$principal_id-$object");
18 my @rights = sort grep $_, map $_->possible_values, grep $_ && $_->value, @inputs;
22 diag "load Everyone group";
23 my ($everyone, $everyone_gid);
25 $everyone = RT::Group->new( RT->SystemUser );
26 $everyone->LoadSystemInternalGroup('Everyone');
27 ok($everyone_gid = $everyone->id, "loaded 'everyone' group");
30 diag "revoke all global rights from Everyone group";
31 my @has = get_rights( $m, $everyone_gid, 'RT::System-1' );
33 $m->form_name('ModifyGroupRights');
34 $m->untick("SetRights-$everyone_gid-RT::System-1", $_) foreach @has;
37 is_deeply([get_rights( $m, $everyone_gid, 'RT::System-1' )], [], 'deleted all rights' );
39 ok(1, 'the group has no global rights');
42 diag "grant SuperUser right to everyone";
44 $m->form_name('ModifyGroupRights');
45 $m->tick("SetRights-$everyone_gid-RT::System-1", 'SuperUser');
48 $m->content_contains('Right Granted', 'got message');
49 RT::Principal::InvalidateACLCache();
50 ok($everyone->PrincipalObj->HasRight( Right => 'SuperUser', Object => $RT::System ), 'group has right');
51 is_deeply( [get_rights( $m, $everyone_gid, 'RT::System-1' )], ['SuperUser'], 'granted SuperUser right' );
54 diag "revoke the right";
56 $m->form_name('ModifyGroupRights');
57 $m->untick("SetRights-$everyone_gid-RT::System-1", 'SuperUser');
60 $m->content_contains('Right revoked', 'got message');
61 RT::Principal::InvalidateACLCache();
62 ok(!$everyone->PrincipalObj->HasRight( Right => 'SuperUser', Object => $RT::System ), 'group has no right');
63 is_deeply( [get_rights( $m, $everyone_gid, 'RT::System-1' )], [], 'revoked SuperUser right' );
67 diag "return rights the group had in the beginning";
69 $m->form_name('ModifyGroupRights');
70 $m->tick("SetRights-$everyone_gid-RT::System-1", $_) for @has;
73 $m->content_contains('Right Granted', 'got message');
75 [ get_rights( $m, $everyone_gid, 'RT::System-1' ) ],
77 'returned back all rights'
80 ok(1, 'the group had no global rights, so nothing to return');