X-Git-Url: https://git.arvados.org/arvados.git/blobdiff_plain/5f65177301647eca4b488b9d33fd62295a9bb081..94b5a59631f22e4e57561a6244c24b93db77f589:/services/api/test/unit/permission_test.rb diff --git a/services/api/test/unit/permission_test.rb b/services/api/test/unit/permission_test.rb index 7a6e4825ff..1ea1419147 100644 --- a/services/api/test/unit/permission_test.rb +++ b/services/api/test/unit/permission_test.rb @@ -132,26 +132,34 @@ class PermissionTest < ActiveSupport::TestCase end end - test "user cannot use owner_uuid without write permission on new owner" do + test "cannot create with owner = unwritable user" do set_user_from_auth :rominiadmin - assert_raises ArvadosModel::PermissionDeniedError, "created with owner = unwritable user" do Specimen.create!(owner_uuid: users(:active).uuid) end + end + test "cannot change owner to unwritable user" do + set_user_from_auth :rominiadmin ob = Specimen.create! assert_raises ArvadosModel::PermissionDeniedError, "changed owner to unwritable user" do ob.update_attributes!(owner_uuid: users(:active).uuid) end + end + test "cannot create with owner = unwritable group" do + set_user_from_auth :rominiadmin assert_raises ArvadosModel::PermissionDeniedError, "created with owner = unwritable group" do Specimen.create!(owner_uuid: groups(:aproject).uuid) end + end + test "cannot change owner to unwritable group" do + set_user_from_auth :rominiadmin ob = Specimen.create! assert_raises ArvadosModel::PermissionDeniedError, "changed owner to unwritable group" do ob.update_attributes!(owner_uuid: groups(:aproject).uuid) end - end + end