| Server IP : 167.235.224.122 / Your IP : 216.73.216.110 Web Server : Apache/2.4.58 (Ubuntu) System : Linux newplayground 6.8.0-136-generic #136-Ubuntu SMP PREEMPT_DYNAMIC Wed Jul 1 21:33:11 UTC 2026 aarch64 User : deploy ( 1000) PHP Version : 8.4.23 Disable Function : NONE MySQL : OFF | cURL : ON | WGET : ON | Perl : ON | Python : OFF | Sudo : ON | Pkexec : OFF Directory : /var/www/html/wiki/tests/phpunit/includes/specials/ |
Upload File : |
<?php
use MediaWiki\MainConfigNames;
use MediaWiki\Request\FauxRequest;
use MediaWiki\Specials\SpecialUserRights;
use MediaWiki\Tests\User\TempUser\TempUserTestTrait;
use MediaWiki\User\UserIdentityValue;
use MediaWiki\WikiMap\WikiMap;
/**
* @group Database
* @covers \MediaWiki\Specials\SpecialUserRights
*/
class SpecialUserRightsTest extends SpecialPageTestBase {
use TempUserTestTrait;
/**
* @inheritDoc
*/
protected function newSpecialPage() {
$services = $this->getServiceContainer();
return new SpecialUserRights(
$services->getUserGroupManagerFactory(),
$services->getUserNameUtils(),
$services->getUserNamePrefixSearch(),
$services->getUserFactory(),
$services->getActorStoreFactory(),
$services->getWatchlistManager(),
$services->getTempUserConfig()
);
}
/** @dataProvider provideUserCanChangeRights */
public function testUserCanChangeRights( $targetUser, $checkIfSelf, $expectedReturnValue ) {
$objectUnderTest = $this->newSpecialPage();
$this->assertSame( $expectedReturnValue, $objectUnderTest->userCanChangeRights( $targetUser, $checkIfSelf ) );
}
public static function provideUserCanChangeRights() {
return [
'Target user not registered' => [ UserIdentityValue::newAnonymous( 'Test' ), true, false ],
];
}
public function testUserCanChangeRightsForTemporaryAccount() {
$temporaryAccount = $this->getServiceContainer()->getTempUserCreator()
->create( null, new FauxRequest() )->getUser();
$this->testUserCanChangeRights( $temporaryAccount, false, false );
}
public function testSaveUserGroups() {
$target = $this->getTestUser()->getUser();
$performer = $this->getTestSysop()->getUser();
$request = new FauxRequest(
[
'saveusergroups' => true,
'conflictcheck-originalgroups' => '',
'wpGroup-bot' => true,
'wpExpiry-bot' => 'existing',
'wpEditToken' => $performer->getEditToken( $target->getName() ),
],
true
);
$this->executeSpecialPage(
$target->getName(),
$request,
'qqx',
$performer
);
$this->assertSame( 1, $request->getSession()->get( 'specialUserrightsSaveSuccess' ) );
$this->assertSame(
[ 'bot' ],
$this->getServiceContainer()->getUserGroupManager()->getUserGroups( $target )
);
}
public function testSaveUserGroupsForTemporaryAccount() {
$target = $this->getServiceContainer()->getTempUserCreator()->create( null, new FauxRequest() )->getUser();
$performer = $this->getTestSysop()->getUser();
$request = new FauxRequest(
[
'saveusergroups' => true,
'conflictcheck-originalgroups' => '',
'wpGroup-bot' => true,
'wpExpiry-bot' => 'existing',
'wpEditToken' => $performer->getEditToken( $target->getName() ),
],
true
);
[ $html ] = $this->executeSpecialPage( $target->getName(), $request, 'qqx', $performer );
$this->assertNull( $request->getSession()->get( 'specialUserrightsSaveSuccess' ) );
$this->assertCount( 0, $this->getServiceContainer()->getUserGroupManager()->getUserGroups( $target ) );
$this->assertStringContainsString( 'userrights-no-group', $html );
}
public function testSaveUserGroups_change() {
$target = $this->getTestUser( [ 'sysop' ] )->getUser();
$performer = $this->getTestSysop()->getUser();
$request = new FauxRequest(
[
'saveusergroups' => true,
'conflictcheck-originalgroups' => 'sysop',
'wpGroup-sysop' => true,
'wpExpiry-sysop' => 'existing',
'wpGroup-bot' => true,
'wpExpiry-bot' => 'existing',
'wpEditToken' => $performer->getEditToken( $target->getName() ),
],
true
);
$this->executeSpecialPage(
$target->getName(),
$request,
'qqx',
$performer
);
$this->assertSame( 1, $request->getSession()->get( 'specialUserrightsSaveSuccess' ) );
$result = $this->getServiceContainer()->getUserGroupManager()->getUserGroups( $target );
sort( $result );
$this->assertSame(
[ 'bot', 'sysop' ],
$result
);
}
public function testSaveUserGroups_change_expiry() {
$expiry = wfTimestamp( TS_MW, (int)wfTimestamp( TS_UNIX ) + 100 );
$target = $this->getTestUser( [ 'bot' ] )->getUser();
$performer = $this->getTestSysop()->getUser();
$request = new FauxRequest(
[
'saveusergroups' => true,
'conflictcheck-originalgroups' => 'bot',
'wpGroup-bot' => true,
'wpExpiry-bot' => $expiry,
'wpEditToken' => $performer->getEditToken( $target->getName() ),
],
true
);
$this->executeSpecialPage(
$target->getName(),
$request,
'qqx',
$performer
);
$this->assertSame( 1, $request->getSession()->get( 'specialUserrightsSaveSuccess' ) );
$userGroups = $this->getServiceContainer()->getUserGroupManager()->getUserGroupMemberships( $target );
$this->assertCount( 1, $userGroups );
foreach ( $userGroups as $ugm ) {
$this->assertSame( 'bot', $ugm->getGroup() );
$this->assertSame( $expiry, $ugm->getExpiry() );
}
}
private function getExternalDBname(): ?string {
$availableDatabases = array_diff(
$this->getConfVar( MainConfigNames::LocalDatabases ),
[ WikiMap::getCurrentWikiDbDomain()->getDatabase() ]
);
if ( $availableDatabases === [] ) {
return null;
}
// sort to ensure results are deterministic
sort( $availableDatabases );
return $availableDatabases[0];
}
public function testInterwikiRightsChange() {
$externalDBname = $this->getExternalDBname();
if ( $externalDBname === null ) {
$this->markTestSkipped( 'No external database is available' );
}
// FIXME: This should not depend on WikiAdmin user existence
// NOTE: This is here, as in WMF's CI setup, WikiAdmin is the only user
// guaranteed to exist on the other wiki.
$localUser = $this->getServiceContainer()->getUserFactory()->newFromName( 'WikiAdmin' );
$externalUsername = $localUser->getName() . '@' . $externalDBname;
// ensure using SpecialUserRights with external usernames doesn't throw (T342747, T342322)
$performer = $this->getTestUser( [ 'bureaucrat' ] );
$request = new FauxRequest( [
'saveusergroups' => true,
'conflictcheck-originalgroups' => '',
'wpGroup-sysop' => true,
'wpExpiry-sysop' => 'existing',
'wpEditToken' => $performer->getUser()->getEditToken( $externalUsername ),
], true );
[ $html, ] = $this->executeSpecialPage(
$externalUsername,
$request,
null,
$performer->getAuthority()
);
$this->assertSame( 1, $request->getSession()->get( 'specialUserrightsSaveSuccess' ) );
// ensure logging is done with the right username (T344391)
$this->assertSame(
1,
(int)$this->getDb()->newSelectQueryBuilder()
->select( [ 'cnt' => 'COUNT(*)' ] )
->from( 'logging' )
->where( [
'log_type' => 'rights',
'log_action' => 'rights',
'log_namespace' => NS_USER,
'log_title' => $externalUsername,
] )
->caller( __METHOD__ )
->fetchField()
);
}
}