From ec5ecb86d9494ab5138c7db4801f817b1d2ab2c3 Mon Sep 17 00:00:00 2001
From: DmitriyDemeshko <39055833+DmitriyDemeshko@users.noreply.github.com>
Date: Tue, 16 Jul 2019 10:44:40 +0300
Subject: [PATCH] BAP-18994: Backoffice User with Specific Role does not have
 access to the entity if his used Search (#24380)

- fix entities with routes to update pages in search results
- add "acl_permission" option to search.yml to have possibility search entities depends on permissions
---
 .../Resources/config/oro/search.yml           |  2 +-
 .../customer_user_role_search.feature         | 34 +++++++++++++++++++
 .../CustomerBundle/Tests/Behat/behat.yml      |  1 +
 3 files changed, 36 insertions(+), 1 deletion(-)
 create mode 100644 src/Oro/Bundle/CustomerBundle/Tests/Behat/Features/customer_user_role_search.feature

diff --git a/src/Oro/Bundle/CustomerBundle/Resources/config/oro/search.yml b/src/Oro/Bundle/CustomerBundle/Resources/config/oro/search.yml
index 523355a09..02059fd6a 100644
--- a/src/Oro/Bundle/CustomerBundle/Resources/config/oro/search.yml
+++ b/src/Oro/Bundle/CustomerBundle/Resources/config/oro/search.yml
@@ -75,7 +75,7 @@ search:
         label: oro.customer.customeruserrole.entity_plural_label
         title_fields: [label]
         route:
-            name: oro_customer_customer_user_role_update
+            name: oro_customer_customer_user_role_view
             parameters:
                 id: id
         search_template: OroCustomerBundle:CustomerUserRole:searchResult.html.twig
diff --git a/src/Oro/Bundle/CustomerBundle/Tests/Behat/Features/customer_user_role_search.feature b/src/Oro/Bundle/CustomerBundle/Tests/Behat/Features/customer_user_role_search.feature
new file mode 100644
index 000000000..3ae10915f
--- /dev/null
+++ b/src/Oro/Bundle/CustomerBundle/Tests/Behat/Features/customer_user_role_search.feature
@@ -0,0 +1,34 @@
+@fixture-OroUserBundle:user.yml
+
+Feature: Customer User Role search
+  In order to search Customer User Role
+  As an user
+  I should see view page of Customer User Role entity in search results with role permissions 'View:Global'
+  for Customer User Role entity
+
+  Scenario: Edit view permissions for Customer User Role entity with Sales Rep Role
+    Given I login as administrator
+    Then go to System / User Management / Roles
+    When I filter Label as is equal to "Sales Rep"
+    And I click edit "Sales Rep" in grid
+    And select following permissions:
+      | Customer User Role | View:Global |
+    And save and close form
+    Then I should see "Role saved" flash message
+
+  Scenario: Search Customer User Role
+    Given I login as "charlie" user
+    And I click "Search"
+    And type "admin" in "search"
+    When I click "Search Submit"
+    Then I should be on Search Result page
+    And I should see following search entity types:
+      | Type               | N | isSelected |
+      | Customer User Roles | 1 |            |
+    And I should see following search results:
+      | Title         | Type               |
+      | Administrator | Customer User Role |
+
+  Scenario: View entity from search results
+    Given I follow "Administrator"
+    Then I should be on Customer User Role View page
diff --git a/src/Oro/Bundle/CustomerBundle/Tests/Behat/behat.yml b/src/Oro/Bundle/CustomerBundle/Tests/Behat/behat.yml
index dfe3b1de8..6e6cf95e2 100644
--- a/src/Oro/Bundle/CustomerBundle/Tests/Behat/behat.yml
+++ b/src/Oro/Bundle/CustomerBundle/Tests/Behat/behat.yml
@@ -22,6 +22,7 @@ oro_behat_extension:
         - OroAddressBundle::AddressContext
         - OroCustomerBundle::CustomerVisitorContext
         - OroEmailBundle::EmailContext
+        - OroSearchBundle::SearchContext
       paths:
         - '@OroCustomerBundle/Tests/Behat/Features'