X-Git-Url: https://git.arvados.org/arvados.git/blobdiff_plain/66d12ae6dc72d45cc3cb3fcc007cb41371371616..8ac1775086e88da003b530210be1acb4c0f2c648:/services/api/test/integration/api_client_authorizations_scopes_test.rb diff --git a/services/api/test/integration/api_client_authorizations_scopes_test.rb b/services/api/test/integration/api_client_authorizations_scopes_test.rb index 20f83dc0ff..a1a20d428e 100644 --- a/services/api/test/integration/api_client_authorizations_scopes_test.rb +++ b/services/api/test/integration/api_client_authorizations_scopes_test.rb @@ -4,11 +4,11 @@ require 'test_helper' -class Arvados::V1::ApiTokensScopeTest < ActionController::IntegrationTest +class ApiTokensScopeTest < ActionDispatch::IntegrationTest fixtures :all def v1_url(*parts) - (['arvados', 'v1'] + parts).join('/') + (['', 'arvados', 'v1'] + parts).join('/') end test "user list token can only list users" do @@ -29,6 +29,8 @@ class Arvados::V1::ApiTokensScopeTest < ActionController::IntegrationTest assert_response 403 get(v1_url('specimens', specimens(:owned_by_active_user).uuid), *get_args) assert_response :success + head(v1_url('specimens', specimens(:owned_by_active_user).uuid), *get_args) + assert_response :success get(v1_url('specimens', specimens(:owned_by_spectator).uuid), *get_args) assert_includes(403..404, @response.status) end @@ -63,7 +65,7 @@ class Arvados::V1::ApiTokensScopeTest < ActionController::IntegrationTest req_args = [{}, auth(:admin_noscope)] get(v1_url('logs'), *req_args) assert_response 403 - get(v1_url('logs', logs(:log1).uuid), *req_args) + get(v1_url('logs', logs(:noop).uuid), *req_args) assert_response 403 post(v1_url('logs'), *req_args) assert_response 403