Lines 185-191
subtest "Test endpoints without permission" => sub {
Link Here
|
185 |
$t->get_ok( "//$nopermission_userid:$password@/api/v1/holds?patron_id=" . $patron_1->borrowernumber ) # no permission |
185 |
$t->get_ok( "//$nopermission_userid:$password@/api/v1/holds?patron_id=" . $patron_1->borrowernumber ) # no permission |
186 |
->status_is(403); |
186 |
->status_is(403); |
187 |
|
187 |
|
188 |
$t->get_ok( "//$userid_3:$password@/api/v1/holds?patron_id=" . $patron_1->borrowernumber ) # no permission |
188 |
$t->get_ok( "//$userid_2:$password@/api/v1/holds?patron_id=" . $patron_1->borrowernumber ) # no permission |
189 |
->status_is(403); |
189 |
->status_is(403); |
190 |
|
190 |
|
191 |
$t->post_ok( "//$nopermission_userid:$password@/api/v1/holds" => json => $post_data ) |
191 |
$t->post_ok( "//$nopermission_userid:$password@/api/v1/holds" => json => $post_data ) |
Lines 225-231
subtest "Test endpoints with permission" => sub {
Link Here
|
225 |
->status_is(404) |
225 |
->status_is(404) |
226 |
->json_has('/error'); |
226 |
->json_has('/error'); |
227 |
|
227 |
|
228 |
$t->get_ok( "//$userid_2:$password@/api/v1/holds?patron_id=" . $patron_1->borrowernumber ) |
228 |
$t->get_ok( "//$userid_3:$password@/api/v1/holds?patron_id=" . $patron_1->borrowernumber ) |
229 |
->status_is(200) |
229 |
->status_is(200) |
230 |
->json_is([]); |
230 |
->json_is([]); |
231 |
|
231 |
|
232 |
- |
|
|