|
Lines 102-108
subtest 'set() (authorized user tests)' => sub {
Link Here
|
| 102 |
|
102 |
|
| 103 |
subtest 'set_public() (unprivileged user tests)' => sub { |
103 |
subtest 'set_public() (unprivileged user tests)' => sub { |
| 104 |
|
104 |
|
| 105 |
plan tests => 18; |
105 |
plan tests => 21; |
| 106 |
|
106 |
|
| 107 |
$schema->storage->txn_begin; |
107 |
$schema->storage->txn_begin; |
| 108 |
|
108 |
|
|
Lines 141-159
subtest 'set_public() (unprivileged user tests)' => sub {
Link Here
|
| 141 |
} |
141 |
} |
| 142 |
)->status_is(403)->json_is( { error => 'Changing password is forbidden' } ); |
142 |
)->status_is(403)->json_is( { error => 'Changing password is forbidden' } ); |
| 143 |
|
143 |
|
| 144 |
t::lib::Mocks::mock_preference( 'OpacPasswordChange', 1 ); |
|
|
| 145 |
|
| 146 |
$t->post_ok( |
144 |
$t->post_ok( |
| 147 |
"//$userid:$password@/api/v1/public/patrons/" . $other_patron->id . "/password" => json => { |
145 |
"/api/v1/public/patrons/" . $patron->id . "/password" => json => { |
| 148 |
password => $new_password, |
146 |
password => $new_password, |
| 149 |
password_repeated => $new_password, |
147 |
password_repeated => $new_password, |
| 150 |
old_password => $password |
148 |
old_password => $password |
| 151 |
} |
149 |
} |
| 152 |
)->status_is(403)->json_is( |
150 |
)->status_is(401)->json_is( |
| 153 |
'/error', |
151 |
'/error', |
| 154 |
"Authorization failure. Missing required permission(s)." |
152 |
"Authentication failure." |
| 155 |
); |
153 |
); |
| 156 |
|
154 |
|
|
|
155 |
|
| 156 |
t::lib::Mocks::mock_preference( 'OpacPasswordChange', 1 ); |
| 157 |
|
| 158 |
$t->post_ok( |
| 159 |
"//$userid:$password@/api/v1/public/patrons/" . $other_patron->id . "/password" => json => { |
| 160 |
password => $new_password, |
| 161 |
password_repeated => $new_password, |
| 162 |
old_password => $password |
| 163 |
} |
| 164 |
)->status_is(403) |
| 165 |
->json_is( '/error', |
| 166 |
"Changing other patron's password is forbidden" ); |
| 167 |
|
| 157 |
$t->post_ok( |
168 |
$t->post_ok( |
| 158 |
"//$userid:$password@/api/v1/public/patrons/" . $patron->id . "/password" => json => { |
169 |
"//$userid:$password@/api/v1/public/patrons/" . $patron->id . "/password" => json => { |
| 159 |
password => $new_password, |
170 |
password => $new_password, |
| 160 |
- |
|
|