Might be a good idea before #2159051: Add support for controller per entity type is committed to add access to our tests.

Should suffice to add permissions to the test module for create / view / edit / delete test entities, and try each resource with two users, first one without the permission and then one with.

CommentFileSizeAuthor
#1 2174533.services_entity.entity-access-tests.patch9.63 KBjoachim

Comments

joachim’s picture

joachim commented
Status: Active » Needs review
StatusFileSize
new 2174533.services_entity.entity-access-tests.patch9.63 KB

Won't clash with that other issue, so if the testbot likes this I'm committing it :)

I've left a todo which can be tackled as a follow-on issue: it would be nice to test in the 'index' service that if a single entity denies access, it's excluded from the returned array.

joachim’s picture

joachim commented
Status: Needs review » Reviewed & tested by the community

Hurrah!

joachim’s picture

joachim commented
Status: Reviewed & tested by the community » Fixed

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.