|
Lines 141-147
subtest 'set_public() (unprivileged user tests)' => sub {
Link Here
|
| 141 |
|
141 |
|
| 142 |
my $tx = $t->ua->build_tx( |
142 |
my $tx = $t->ua->build_tx( |
| 143 |
POST => "/api/v1/public/patrons/" |
143 |
POST => "/api/v1/public/patrons/" |
| 144 |
. $other_patron->id |
144 |
. $patron->id |
| 145 |
. "/password" => json => { |
145 |
. "/password" => json => { |
| 146 |
password => $new_password, |
146 |
password => $new_password, |
| 147 |
password_repeated => $new_password, |
147 |
password_repeated => $new_password, |
|
Lines 175-182
subtest 'set_public() (unprivileged user tests)' => sub {
Link Here
|
| 175 |
$tx->req->env( { REMOTE_ADDR => '127.0.0.1' } ); |
175 |
$tx->req->env( { REMOTE_ADDR => '127.0.0.1' } ); |
| 176 |
$t->request_ok($tx) |
176 |
$t->request_ok($tx) |
| 177 |
->status_is(403) |
177 |
->status_is(403) |
| 178 |
->json_is({ |
178 |
->json_has({ |
| 179 |
error => "Changing other patron's password is forbidden" |
179 |
error => "Authorization failure. Missing required permission(s)." |
| 180 |
}); |
180 |
}); |
| 181 |
|
181 |
|
| 182 |
$tx = $t->ua->build_tx( |
182 |
$tx = $t->ua->build_tx( |
| 183 |
- |
|
|