|
Lines 225-231
subtest "Test endpoints without permission" => sub {
Link Here
|
| 225 |
->status_is(403); |
225 |
->status_is(403); |
| 226 |
}; |
226 |
}; |
| 227 |
subtest "Test endpoints without permission, but accessing own object" => sub { |
227 |
subtest "Test endpoints without permission, but accessing own object" => sub { |
| 228 |
plan tests => 26; |
228 |
plan tests => 36; |
| 229 |
|
229 |
|
| 230 |
my $reserve_id3 = C4::Reserves::AddReserve($branchcode, $nopermission->{'borrowernumber'}, |
230 |
my $reserve_id3 = C4::Reserves::AddReserve($branchcode, $nopermission->{'borrowernumber'}, |
| 231 |
$biblionumber, undef, 2, undef, undef, undef, '', $itemnumber, 'W'); |
231 |
$biblionumber, undef, 2, undef, undef, undef, '', $itemnumber, 'W'); |
|
Lines 319-324
subtest "Test endpoints without permission, but accessing own object" => sub {
Link Here
|
| 319 |
->status_is(200) |
319 |
->status_is(200) |
| 320 |
->json_is('/reserve_id', $reserve_id3) |
320 |
->json_is('/reserve_id', $reserve_id3) |
| 321 |
->json_is('/branchcode', $branchcode2); |
321 |
->json_is('/branchcode', $branchcode2); |
|
|
322 |
|
| 323 |
$tx = $t->ua->build_tx(PUT => "/api/v1/holds/$reserve_id3" => json => { |
| 324 |
suspend_until => $suspend_until |
| 325 |
}); |
| 326 |
$tx->req->cookies({name => 'CGISESSID', value => $session_nopermission->id}); |
| 327 |
$t->request_ok($tx) # create hold to myself |
| 328 |
->status_is(200) |
| 329 |
->json_is('/reserve_id', $reserve_id3) |
| 330 |
->json_is('/suspend', Mojo::JSON->true) |
| 331 |
->json_like('/suspend_until', qr/^$suspend_until/); |
| 332 |
|
| 333 |
$tx = $t->ua->build_tx(PUT => "/api/v1/holds/$reserve_id3" => json => { |
| 334 |
suspend_until => undef |
| 335 |
}); |
| 336 |
$tx->req->cookies({name => 'CGISESSID', value => $session_nopermission->id}); |
| 337 |
$t->request_ok($tx) # create hold to myself |
| 338 |
->status_is(200) |
| 339 |
->json_is('/reserve_id', $reserve_id3) |
| 340 |
->json_is('/suspend', Mojo::JSON->false) |
| 341 |
->json_is('/suspend_until', undef); |
| 322 |
}; |
342 |
}; |
| 323 |
|
343 |
|
| 324 |
subtest "Test endpoints with permission" => sub { |
344 |
subtest "Test endpoints with permission" => sub { |
| 325 |
- |
|
|