projects
/
arvados.git
/ blobdiff
summary
|
shortlog
|
log
|
commit
|
commitdiff
|
tree
raw
|
inline
| side by side
Merge branch '11369-cwl-crunch2-capacity' refs #11369
[arvados.git]
/
services
/
api
/
test
/
integration
/
api_client_authorizations_scopes_test.rb
diff --git
a/services/api/test/integration/api_client_authorizations_scopes_test.rb
b/services/api/test/integration/api_client_authorizations_scopes_test.rb
index 20f83dc0ffce532856ab75df3af5b08193496edc..a1a20d428eb51454a49510ee52dc03fdef88ca20 100644
(file)
--- a/
services/api/test/integration/api_client_authorizations_scopes_test.rb
+++ b/
services/api/test/integration/api_client_authorizations_scopes_test.rb
@@
-4,11
+4,11
@@
require 'test_helper'
require 'test_helper'
-class A
rvados::V1::ApiTokensScopeTest < ActionController
::IntegrationTest
+class A
piTokensScopeTest < ActionDispatch
::IntegrationTest
fixtures :all
def v1_url(*parts)
fixtures :all
def v1_url(*parts)
- (['arvados', 'v1'] + parts).join('/')
+ (['
', '
arvados', 'v1'] + parts).join('/')
end
test "user list token can only list users" do
end
test "user list token can only list users" do
@@
-29,6
+29,8
@@
class Arvados::V1::ApiTokensScopeTest < ActionController::IntegrationTest
assert_response 403
get(v1_url('specimens', specimens(:owned_by_active_user).uuid), *get_args)
assert_response :success
assert_response 403
get(v1_url('specimens', specimens(:owned_by_active_user).uuid), *get_args)
assert_response :success
+ head(v1_url('specimens', specimens(:owned_by_active_user).uuid), *get_args)
+ assert_response :success
get(v1_url('specimens', specimens(:owned_by_spectator).uuid), *get_args)
assert_includes(403..404, @response.status)
end
get(v1_url('specimens', specimens(:owned_by_spectator).uuid), *get_args)
assert_includes(403..404, @response.status)
end
@@
-63,7
+65,7
@@
class Arvados::V1::ApiTokensScopeTest < ActionController::IntegrationTest
req_args = [{}, auth(:admin_noscope)]
get(v1_url('logs'), *req_args)
assert_response 403
req_args = [{}, auth(:admin_noscope)]
get(v1_url('logs'), *req_args)
assert_response 403
- get(v1_url('logs', logs(:
log1
).uuid), *req_args)
+ get(v1_url('logs', logs(:
noop
).uuid), *req_args)
assert_response 403
post(v1_url('logs'), *req_args)
assert_response 403
assert_response 403
post(v1_url('logs'), *req_args)
assert_response 403