19206: Adds test exposing the bug.
authorLucas Di Pentima <lucas.dipentima@curii.com>
Wed, 13 Jul 2022 20:21:28 +0000 (17:21 -0300)
committerLucas Di Pentima <lucas.dipentima@curii.com>
Wed, 13 Jul 2022 20:21:28 +0000 (17:21 -0300)
Arvados-DCO-1.1-Signed-off-by: Lucas Di Pentima <lucas.dipentima@curii.com>

services/api/test/integration/users_test.rb

index f3e787e3dffc6ed01570b249865068f1ecfacb7e..3660d35bad57a8353fa412784f094b2ccd00fe6e 100644 (file)
@@ -480,4 +480,17 @@ class UsersTest < ActionDispatch::IntegrationTest
     assert_response 403
   end
 
+  test "disabling system root user not permitted" do
+    put("/arvados/v1/users/#{users(:system_user).uuid}",
+      params: {
+        user: {is_admin: false}
+      },
+      headers: auth(:admin))
+    assert_response 422
+
+    post("/arvados/v1/users/#{users(:system_user).uuid}/unsetup",
+      params: {},
+      headers: auth(:admin))
+    assert_response 422
+  end
 end