Lines 102-108
subtest 'set() (authorized user tests)' => sub {
Link Here
|
102 |
|
102 |
|
103 |
subtest 'set_public() (unprivileged user tests)' => sub { |
103 |
subtest 'set_public() (unprivileged user tests)' => sub { |
104 |
|
104 |
|
105 |
plan tests => 18; |
105 |
plan tests => 21; |
106 |
|
106 |
|
107 |
$schema->storage->txn_begin; |
107 |
$schema->storage->txn_begin; |
108 |
|
108 |
|
Lines 141-159
subtest 'set_public() (unprivileged user tests)' => sub {
Link Here
|
141 |
} |
141 |
} |
142 |
)->status_is(403)->json_is( { error => 'Changing password is forbidden' } ); |
142 |
)->status_is(403)->json_is( { error => 'Changing password is forbidden' } ); |
143 |
|
143 |
|
144 |
t::lib::Mocks::mock_preference( 'OpacPasswordChange', 1 ); |
|
|
145 |
|
146 |
$t->post_ok( |
144 |
$t->post_ok( |
147 |
"//$userid:$password@/api/v1/public/patrons/" . $other_patron->id . "/password" => json => { |
145 |
"/api/v1/public/patrons/" . $patron->id . "/password" => json => { |
148 |
password => $new_password, |
146 |
password => $new_password, |
149 |
password_repeated => $new_password, |
147 |
password_repeated => $new_password, |
150 |
old_password => $password |
148 |
old_password => $password |
151 |
} |
149 |
} |
152 |
)->status_is(403)->json_is( |
150 |
)->status_is(401)->json_is( |
153 |
'/error', |
151 |
'/error', |
154 |
"Authorization failure. Missing required permission(s)." |
152 |
"Authentication failure." |
155 |
); |
153 |
); |
156 |
|
154 |
|
|
|
155 |
|
156 |
t::lib::Mocks::mock_preference( 'OpacPasswordChange', 1 ); |
157 |
|
158 |
$t->post_ok( |
159 |
"//$userid:$password@/api/v1/public/patrons/" . $other_patron->id . "/password" => json => { |
160 |
password => $new_password, |
161 |
password_repeated => $new_password, |
162 |
old_password => $password |
163 |
} |
164 |
)->status_is(403) |
165 |
->json_is( '/error', |
166 |
"Changing other patron's password is forbidden" ); |
167 |
|
157 |
$t->post_ok( |
168 |
$t->post_ok( |
158 |
"//$userid:$password@/api/v1/public/patrons/" . $patron->id . "/password" => json => { |
169 |
"//$userid:$password@/api/v1/public/patrons/" . $patron->id . "/password" => json => { |
159 |
password => $new_password, |
170 |
password => $new_password, |
160 |
- |
|
|