|
Lines 94-136
subtest 'list() tests' => sub {
Link Here
|
| 94 |
}; |
94 |
}; |
| 95 |
|
95 |
|
| 96 |
subtest 'get() tests' => sub { |
96 |
subtest 'get() tests' => sub { |
| 97 |
plan tests => 3; |
97 |
plan tests => 2; |
| 98 |
|
98 |
|
| 99 |
$schema->storage->txn_begin; |
99 |
$schema->storage->txn_begin; |
| 100 |
unauthorized_access_tests('GET', -1, undef); |
100 |
unauthorized_access_tests('GET', -1, undef); |
| 101 |
$schema->storage->txn_rollback; |
101 |
$schema->storage->txn_rollback; |
| 102 |
|
102 |
|
| 103 |
subtest 'access own object tests' => sub { |
|
|
| 104 |
plan tests => 4; |
| 105 |
|
| 106 |
$schema->storage->txn_begin; |
| 107 |
|
| 108 |
my ( $patron_id, $session_id ) = create_user_and_session({ authorized => 0 }); |
| 109 |
|
| 110 |
# Access patron's own data even though they have no borrowers flag |
| 111 |
my $tx = $t->ua->build_tx(GET => "/api/v1/patrons/" . $patron_id); |
| 112 |
$tx->req->cookies({ name => 'CGISESSID', value => $session_id }); |
| 113 |
$tx->req->env({ REMOTE_ADDR => '127.0.0.1' }); |
| 114 |
$t->request_ok($tx) |
| 115 |
->status_is(200); |
| 116 |
|
| 117 |
my $guarantee = $builder->build_object({ |
| 118 |
class => 'Koha::Patrons', |
| 119 |
value => { |
| 120 |
guarantorid => $patron_id, |
| 121 |
} |
| 122 |
}); |
| 123 |
|
| 124 |
# Access guarantee's data even though guarantor has no borrowers flag |
| 125 |
$tx = $t->ua->build_tx(GET => "/api/v1/patrons/" . $guarantee->id ); |
| 126 |
$tx->req->cookies({ name => 'CGISESSID', value => $session_id }); |
| 127 |
$tx->req->env({ REMOTE_ADDR => '127.0.0.1' }); |
| 128 |
$t->request_ok($tx) |
| 129 |
->status_is(200); |
| 130 |
|
| 131 |
$schema->storage->txn_rollback; |
| 132 |
}; |
| 133 |
|
| 134 |
subtest 'librarian access tests' => sub { |
103 |
subtest 'librarian access tests' => sub { |
| 135 |
plan tests => 6; |
104 |
plan tests => 6; |
| 136 |
|
105 |
|
| 137 |
- |
|
|