From 4cbac38547d8047e5e23cb4945b25aaa31e3eb06 Mon Sep 17 00:00:00 2001 From: Tom Clegg Date: Fri, 4 May 2018 15:19:14 -0400 Subject: [PATCH] 12626: Add tests for missing new_owner_uuid. Arvados-DCO-1.1-Signed-off-by: Tom Clegg --- .../arvados/v1/users_controller_test.rb | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) diff --git a/services/api/test/functional/arvados/v1/users_controller_test.rb b/services/api/test/functional/arvados/v1/users_controller_test.rb index 3bcf3ed788..b01597c05b 100644 --- a/services/api/test/functional/arvados/v1/users_controller_test.rb +++ b/services/api/test/functional/arvados/v1/users_controller_test.rb @@ -887,6 +887,25 @@ class Arvados::V1::UsersControllerTest < ActionController::TestCase assert_response(403) end + test "refuse to merge if new_owner_uuid is empty" do + authorize_with(:project_viewer_trustedclient) + post(:merge, { + new_user_token: api_client_authorizations(:active_trustedclient).api_token, + new_owner_uuid: "", + redirect_to_new_user: true, + }) + assert_response(422) + end + + test "refuse to merge if new_owner_uuid is not provided" do + authorize_with(:project_viewer_trustedclient) + post(:merge, { + new_user_token: api_client_authorizations(:active_trustedclient).api_token, + redirect_to_new_user: true, + }) + assert_response(422) + end + test "refuse to update redirect_to_user_uuid directly" do authorize_with(:active_trustedclient) patch(:update, { -- 2.39.5