/modules/gallery/tests/Albums_Controller_Test.php

<?php defined("SYSPATH") or die("No direct script access.");
/**
 * Gallery - a web based photo album viewer and editor
 * Copyright (C) 2000-2013 Bharat Mediratta
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation; either version 2 of the License, or (at
 * your option) any later version.
 *
 * This program is distributed in the hope that it will be useful, but
 * WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 * General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program; if not, write to the Free Software
 * Foundation, Inc., 51 Franklin Street - Fifth Floor, Boston, MA  02110-1301, USA.
 */
class Albums_Controller_Test extends Gallery_Unit_Test_Case {
  public function setup() {
    $this->_save = array($_POST, $_SERVER);
  }

  public function teardown() {
    list($_POST, $_SERVER) = $this->_save;
  }

  public function change_album_test() {
    $controller = new Albums_Controller();
    $album = test::random_album();

    // Randomize to avoid conflicts.
    $new_name = "new_name_" . test::random_string(6);

    $_POST["name"] = $new_name;
    $_POST["title"] = "new title";
    $_POST["description"] = "new description";
    $_POST["column"] = "weight";
    $_POST["direction"] = "ASC";
    $_POST["csrf"] = access::csrf_token();
    $_POST["slug"] = "new-name";
    access::allow(identity::everybody(), "edit", item::root());

    ob_start();
    $controller->update($album->id);
    $album->reload();
    $results = ob_get_contents();
    ob_end_clean();

    $this->assert_equal(json_encode(array("result" => "success")), $results);
    $this->assert_equal($new_name, $album->name);
    $this->assert_equal("new title", $album->title);
    $this->assert_equal("new description", $album->description);
  }

  public function change_album_no_csrf_fails_test() {
    $controller = new Albums_Controller();
    $album = test::random_album();

    $_POST["name"] = "new name";
    $_POST["title"] = "new title";
    $_POST["description"] = "new description";
    access::allow(identity::everybody(), "edit", item::root());

    try {
      $controller->update($album->id);
      $this->assert_true(false, "This should fail");
    } catch (Exception $e) {
      // pass
      $this->assert_same("@todo FORBIDDEN", $e->getMessage());
    }
  }
}