X-Git-Url: https://git.arvados.org/arvados.git/blobdiff_plain/d6446b03e2f5d5079a870bdd7b963456dc12b485..7f8fa5edc5175ffda9fdfaa28081f799ae485ec0:/services/api/test/integration/api_client_authorizations_scopes_test.rb diff --git a/services/api/test/integration/api_client_authorizations_scopes_test.rb b/services/api/test/integration/api_client_authorizations_scopes_test.rb index 3b28a3163f..83a6337644 100644 --- a/services/api/test/integration/api_client_authorizations_scopes_test.rb +++ b/services/api/test/integration/api_client_authorizations_scopes_test.rb @@ -44,15 +44,15 @@ class ApiTokensScopeTest < ActionDispatch::IntegrationTest assert_response 403 end - test "specimens token can see exactly owned specimens" do - get_args = {params: {}, headers: auth(:active_specimens)} - get(v1_url('specimens'), **get_args) + test "collections token can see exactly owned collections" do + get_args = {params: {}, headers: auth(:active_all_collections)} + get(v1_url('collections'), **get_args) assert_response 403 - get(v1_url('specimens', specimens(:owned_by_active_user).uuid), **get_args) + get(v1_url('collections', collections(:collection_owned_by_active).uuid), **get_args) assert_response :success - head(v1_url('specimens', specimens(:owned_by_active_user).uuid), **get_args) + head(v1_url('collections', collections(:collection_owned_by_active).uuid), **get_args) assert_response :success - get(v1_url('specimens', specimens(:owned_by_spectator).uuid), **get_args) + get(v1_url('collections', collections(:collection_owned_by_foo).uuid), **get_args) assert_includes(403..404, @response.status) end