Lines 186-192
subtest "Test endpoints without permission" => sub {
Link Here
|
186 |
->status_is(403); |
186 |
->status_is(403); |
187 |
}; |
187 |
}; |
188 |
subtest "Test endpoints without permission, but accessing own object" => sub { |
188 |
subtest "Test endpoints without permission, but accessing own object" => sub { |
189 |
plan tests => 15; |
189 |
plan tests => 25; |
190 |
|
190 |
|
191 |
my $borrno_tmp = $post_data->{'borrowernumber'}; |
191 |
my $borrno_tmp = $post_data->{'borrowernumber'}; |
192 |
$post_data->{'borrowernumber'} = int $nopermission->{'borrowernumber'}; |
192 |
$post_data->{'borrowernumber'} = int $nopermission->{'borrowernumber'}; |
Lines 215-220
subtest "Test endpoints without permission, but accessing own object" => sub {
Link Here
|
215 |
->json_is('/reserve_id', $reserve_id3) |
215 |
->json_is('/reserve_id', $reserve_id3) |
216 |
->json_is('/suspend_until', $suspend_until . ' 00:00:00') |
216 |
->json_is('/suspend_until', $suspend_until . ' 00:00:00') |
217 |
->json_is('/priority', 2); |
217 |
->json_is('/priority', 2); |
|
|
218 |
|
219 |
$tx = $t->ua->build_tx(PUT => "/api/v1/holds/$reserve_id3" => json => { |
220 |
suspend => Mojo::JSON->false |
221 |
}); |
222 |
$tx->req->cookies({name => 'CGISESSID', value => $session_nopermission->id}); |
223 |
$t->request_ok($tx) # create hold to myself |
224 |
->status_is(200) |
225 |
->json_is('/reserve_id', $reserve_id3) |
226 |
->json_is('/suspend', Mojo::JSON->false) |
227 |
->json_is('/suspend_until', undef); |
228 |
|
229 |
$tx = $t->ua->build_tx(PUT => "/api/v1/holds/$reserve_id3" => json => { |
230 |
suspend_until => $suspend_until |
231 |
}); |
232 |
$tx->req->cookies({name => 'CGISESSID', value => $session_nopermission->id}); |
233 |
$t->request_ok($tx) # create hold to myself |
234 |
->status_is(200) |
235 |
->json_is('/reserve_id', $reserve_id3) |
236 |
->json_is('/suspend', Mojo::JSON->true) |
237 |
->json_like('/suspend_until', qr/^$suspend_until/); |
218 |
}; |
238 |
}; |
219 |
|
239 |
|
220 |
subtest "Test endpoints with permission" => sub { |
240 |
subtest "Test endpoints with permission" => sub { |
221 |
- |
|
|