#115: DataTransferAccessTest.kt

Integration test for DataTransfer access control — verifies that admins, group members, and individual users have correct file access rights. Extends AbstractTestBase which provides Spring context injection (@Autowired), user switching (logon()), and JCR test repository initialization.

Test setup

• Spring beans injected: DataTransferTestService (creates test areas and users), DataTransferPageRest (REST controller under test)
• Two test users (testUser1, testUser2) created via DataTransferTestService
• JCR test repository: initJCRTestRepo(MODUL_NAME, "accessTestRepo") — provides a sandboxed Jackrabbit content repository for file attachment testing
• Lazy initialization: initialize() is called on first use (not @PostConstruct — database isn't ready at that point), creates the test area

Test coverage

Tests use DataTransferPageRest directly — the internal REST controller (not the public one at #100) — to verify access control logic at the API level:

• Admin access: testUser1 set as admin — should have full CRUD on the area
• Group access: testUser2 added to accessGroupIds — should have file access
• User-level access: specific users in accessUserIds can access files
• No-access: users not in any access list should be denied
• Public access: verifies external_download_enabled / external_upload_enabled flags work

Dependencies

• DataTransferPageRest — the internal REST controller under test
• DataTransferTestService — test helper that pre-populates DB and JCR
• AbstractTestBase — ProjectForge's Spring Boot test base (DB transaction rollback, user simulation)
• FileObject (JCR) — mock file objects for attachment tests