<?php

use PHPUnit\Framework\TestCase;
use XcVm\Core\Auth\PageAuthorization;

/**
 * post.php saves every admin form (63 actions). It used to check the page
 * "post", which no rule names, so a restricted administrator — an admin group
 * with a list of advanced permissions — could save anything, their own group
 * included. checkPostAction() applies the rule of the page each action saves.
 */
final class PageAuthorizationPostActionTest extends TestCase {

	protected function setUp(): void {
		// A restricted administrator: may manage and edit lines, nothing else.
		$GLOBALS['rUserInfo'] = ['id' => 9, 'member_group_id' => 5];
		$GLOBALS['rPermissions'] = ['is_admin' => 1, 'advanced' => ['users', 'edit_user']];
		$GLOBALS['db'] = new stdClass();
	}

	protected function tearDown(): void {
		unset($GLOBALS['rUserInfo'], $GLOBALS['rPermissions'], $GLOBALS['db']);
	}

	public function testRestrictedAdminIsHeldToThePageRules(): void {
		$this->assertTrue(PageAuthorization::checkPostAction('line', true), 'edit a line (edit_user)');
		$this->assertFalse(PageAuthorization::checkPostAction('line', false), 'add a line (add_user)');
		$this->assertFalse(PageAuthorization::checkPostAction('user', true), 'edit a panel user, e.g. their own group');
		$this->assertFalse(PageAuthorization::checkPostAction('settings', false));
		$this->assertFalse(PageAuthorization::checkPostAction('quick_tools', false));
		$this->assertFalse(PageAuthorization::checkPostAction('mass_delete_lines', false), 'mass delete');
		$this->assertFalse(PageAuthorization::checkPostAction('enigma', false), 'add an Enigma2 device');
		$this->assertFalse(PageAuthorization::checkPostAction('import_tmdb_categories', false));
		$this->assertTrue(PageAuthorization::checkPostAction('edit_profile', false), 'own profile');
	}

	public function testFullAdministratorKeepsEverything(): void {
		$GLOBALS['rUserInfo']['member_group_id'] = 1;
		foreach (['line', 'user', 'settings', 'quick_tools', 'mass_delete_lines', 'enigma', 'stream', 'server'] as $rAction) {
			$this->assertTrue(PageAuthorization::checkPostAction($rAction, false), $rAction);
			$this->assertTrue(PageAuthorization::checkPostAction($rAction, true), $rAction . ' (edit)');
		}
	}

	public function testEnigmaPageFollowsTheMagRules(): void {
		$GLOBALS['rPermissions']['advanced'] = ['edit_e2'];
		$this->assertTrue(PageAuthorization::checkPermissions('enigma', true));
		$this->assertFalse(PageAuthorization::checkPermissions('enigma', false));
	}
}