## Part 1 - test that no permission redirect happens when user has no permissions, and not happens when user has permissions for action
# change code of the `core/admin_templates/languages/email_template_list.tpl` - remove `<inp2:m_if check="m_IsDebugMode"> check around `Add` button
# go to {nav User Management > Administrators}
# add standard administrator user by entering only required fields - Password and E-mail
# log into adm.console with non-root administrative user
# switch off debug mode
# go to {nav Website & Content > E-mail Templates}
# press `Add` button
# confirm that happened redirect to the `No Permission` page
# go to {nav Website & Content > E-mail Templates}
# choose some template in the `E-mail Templates ` grid and press `Edit` button
# confirm that opened `Editing E-mail Template` page without any permission errors
## Part 2 - tests that no permissions redirect happens correctly after changes in kCatDBEventHandler::CheckPermission
# execute SQL like `DELETE FROM inp_Permissions WHERE Permission = 'in-portal:main_import.view'`
# login as non-root administrator user
# go to {nav Website & Content > Structure & Data > Products}
# go to `Products` tab
# press `Tools -> Export` button
# confirm that `No Permission` page is shown
## Part 3 - tests that no permissions redirect happens correctly after changes in CategoriesEventHandler::CheckPermission
# execute SQL like `DELETE FROM inp_Permissions WHERE Permission = 'in-portal:service.edit'`
# login as non-root administrator user
# go to {nav Tools > System Tools}
# press `Reset` button in the section `Front-end`, in subsection `Reset SMS Menu Cache`
# confirm that `No Permission` page is shown
## Part 4 - tests that no permissions redirect happens correctly after changes in AdminEventsHandler::CheckPermission
# execute SQL like `DELETE FROM inp_Permissions WHERE Permission = 'in-portal:sql_query.view'`
# login as non-root administrator user
# go to {nav Tools > Query Database}
# press `Run SQL` button in the toolbar
# confirm that `No Permission` page is shown
## Part 5 - tests that no permissions redirect happens correctly after changes in ContentEventHandler::CheckPermission
# login as non-root administrator user
# go to {nav Browse Website}
# click on `Content Mode` tab
# confirm, that page with `Edit Content` button is shown
# execute SQL like `UPDATE inp_Permissions SET PermissionValue = 0 WHERE Permission = 'CATEGORY.MODIFY'`;
# click on `Edit Content` button
# confirm that `No Permission` page is shown
## Part 6 - tests that no permissions redirect happens correctly after changes in PageRevisionEventHandler::CheckPermission
# logout
# try go to url like "../admin/index.php?events[page-revision]=OnSave"
# confirm that "next_template=no_permission" persists in resulting URL
## Part 7 - tests that no permissions redirect happens when somebody trying to edit link owned by different user
# create some link in the adm.console, with root as owner
# ensure log-out status on front-end
# go to link like `http://localhost/5.2.x/index.php?events[l]=OnMassMoveUp&l[1][LinkId]=on` where 1 is id of created link
# confirm that `No Permission` page is shown
## Part 8 - tests that no permissions redirect happens when somebody trying to edit category item (link) under category, where links creation is disabled
# log in as non root administrator user
# create some link, confirm, that link creation is successful, without "no permission" redirect
# open to edit category, in which link was created
# on permissions tab of category edit form disable "LINK.ADD" and "LINK.ADD.PENDING" permissions (uncheck "Inherited" and "Access" checkboxes for "Add Link" and "Pending Link" permissions), press `Save` button
# try create some link under same category as previous link was created
# confirm, that after pressing `Save` while adding new link happens "no permission" redirect
## Part 9 - tests that no permissions redirect happens when somebody trying to edit category owned by different user
# log in as non root administrator user
# create some category in the administrative console, with current logged in user as owner
# confirm that "Up" / "Down" buttons works properly in the administrative console categories grid with just created category, checked for these actions
# ensure log-out status on front-end
# go to link like `http://localhost/5.2.x/index.php?events[c]=OnMassMoveUp&c[139][CategoryId]=on` where 139 is id of created category
# confirm that `No Permission` page is shown
## Part 10 - tests that no permissions redirect happens when somebody trying to edit category item (link) under category, where links creation is disabled
# log in as non root administrator user
# create some category under "Directory" category, confirm, that category creation is successful, without "no permission" redirect
# open to edit "Directory" category (in which link was created)
# on permissions tab of category edit form disable "CATEGORY.ADD" and "CATEGORY.ADD.PENDING" permissions (uncheck "Inherited" and "Access" checkboxes for "Add Category" and "Add Pending Category" permissions), press `Save` button
# try create some category under "Directory" category
# confirm, that after pressing `Save` while adding new category happens "no permission" redirect
## Part 11 - tests that no permissions redirect happens when somebody is is trying to edit a category item and .OWNER. permission is turned off for primary category of that category item
# log in to adm.console
# go to {nav User Management > Users}
# add standard member user
# go to {nav Website & Content > Structure & Data > Directory}
# create some link in the adm.console, under `Directory` category, with recent front-end user as owner
# go to {nav User Management > Users}
# press `Login As` button to open front-end with new user logged in
# go to My Links page (url like `http://localhost/5.2.x/in-link/my_account/my_links.html`)
# confirm that recently created link is visible on page with `Details`, `Modify`, `Delete` links under it
# press modify link
# confirm that link edit form is opened
# press `Update` button in the link edit form
# confirm, that link is successfully updated
# go to My Links page (url like `http://localhost/5.2.x/in-link/my_account/my_links.html`)
# confirm that recently created link is visible on page with `Details`, `Modify`, `Delete` links under it
# press modify link
# confirm that link edit form is opened
# in the another tab/window open adm.console
# open parent category of tested link (Directory) for editing
# go to tab `Permissions`, disable for group `member` LINK.OWNER.MODIFY and LINK.OWNER.MODIFY.PENDING permissions, save
# return to front-end tab/window
# press `Update` button in the link edit form
# confirm that `No Permission` page is shown
## Part 12 - tests that no permissions redirect happens when somebody is is trying delete swf-uploaded file while editing category item and .DELETE permission is turned off for primary category of that category item
# change `themes/advanced/in-link/links/modify_link.tpl` - use `inp_edit_swf_upload` block in place of `inp_edit_file_upload` to upload files
# change `modules/in-link/units/links/links_event_handler.php` - add `'OnDeleteFile' => array('self' => 'delete'),` line to the array in the mapPermissions method
# log in to adm.console
# go to {nav User Management > Users}
# add standard member user
# go to {nav Website & Content > Structure & Data > Directory}
# create some link in the adm.console, under `Directory` category, with recent front-end user as owner
# go to {nav User Management > Users}
# press `Login As` button to open front-end with new user logged in
# go to My Links page (url like `http://localhost/5.2.x/in-link/my_account/my_links.html`)
# confirm that recently created link is visible on page with `Details`, `Modify`, `Delete` links under it
# press modify link
# confirm that link edit form is opened
# in the another tab/window open adm.console
# open parent category of tested link (Directory) for editing
# go to tab `Permissions`, disable for group `member` LINK.DELETE permission, save
# return to front-end tab/window
# upload some file by using swf-upload control
# make visible ajax requests in the browser window
# uncheck checkbox besides uploaded file name
# confirm file deletion by pressing `OK` in the javascript confirmation window
# confirm, that ajax request happened
# confirm, that response of ajax request contain "no permission" redirect code like `/no_permission.html?next_template=external`
## Part 13 - test that no permissions redirect happens when somebody is trying to save changes to a category item, that is being edited in live table
# log into adm.console with non-root administrative user
# go to {nav Website & Content > Links}
# add two links with same "Link URL" value
# go to {nav Directory > Duplicate Checker}
# confirm that duplicate link is shown in the grid
# double click on the link in the grid
# confirm, that is opened window with grid of two links with equal "Link URL" value
# double click on one of the two links in the grid, shown in the previous step
# confirm, that "Editing Link ..." window is opened
# change value in link's "Name" field
# press "Save" button
# confirm, that link is successfully updated
# modify modules/in-link/admin_templates/duplicate_checker/duplicate_link_view.tpl file - replace "std_edit_item" with "std_edit_temp_item"
# go to {nav Directory > Duplicate Checker}
# confirm that duplicate link is shown in the grid
# double click on the link in the grid
# confirm, that is opened window with grid of two links with equal "Link URL" value
# double click on one of the two links in the grid, shown in the previous step
# confirm, that "Editing Link ..." window is opened
# change value in link's "Name" field
# press "Save" button
# confirm, that link is successfully updated
# confirm that `No Permission` page is shown
## Part 14 - test that no permissions redirect happens when somebody is trying to add draft revision with lack of necessary permission
# log into adm.console with non-root administrative user
# go to {nav Configuration > Website > Advanced}
# make "Enable Revision Control for Section Content" checkbox checked, press "Save" button
# go to {nav Website & Content > Browse Website}
# press "Content Mode" tab
# edit content block on "Home" page, save
# confirm, that become enabled "Save" button in the revision management toolbar
# press that "Save" button in the revision management toolbar
# confirm that green title "Viewing Revision ... (published)" appeared in the revision management toolbar
# press "Section Properties" button to edit "Home" category
# on permissions tab of category edit form disable "CATEGORY.REVISION.ADD" and "CATEGORY.REVISION.ADD.PENDING" permissions (uncheck "Inherited" and "Access" checkboxes for "Allow Adding Content Revisions" and "Allow Adding Pending Content Revisions" permissions), press `Save` button
# edit content block on "Home" page, save
# confirm, that become enabled "Save" button in the revision management toolbar
# press that "Save" button in the revision management toolbar
# confirm that `No Permission` page is shown