Lines 28-33
use C4::Context;
Link Here
|
28 |
use C4::Reserves; |
28 |
use C4::Reserves; |
29 |
|
29 |
|
30 |
use Koha::Database; |
30 |
use Koha::Database; |
|
|
31 |
use Koha::DateUtils; |
31 |
use Koha::Biblios; |
32 |
use Koha::Biblios; |
32 |
use Koha::Biblioitems; |
33 |
use Koha::Biblioitems; |
33 |
use Koha::Items; |
34 |
use Koha::Items; |
Lines 219-229
subtest "Test endpoints without permission, but accessing own object" => sub {
Link Here
|
219 |
my $reserve_id3 = Koha::Holds->find({ borrowernumber => $nopermission->{borrowernumber} })->reserve_id; |
220 |
my $reserve_id3 = Koha::Holds->find({ borrowernumber => $nopermission->{borrowernumber} })->reserve_id; |
220 |
$tx = $t->ua->build_tx(PUT => "/api/v1/holds/$reserve_id3" => json => $put_data); |
221 |
$tx = $t->ua->build_tx(PUT => "/api/v1/holds/$reserve_id3" => json => $put_data); |
221 |
$tx->req->cookies({name => 'CGISESSID', value => $session_nopermission->id}); |
222 |
$tx->req->cookies({name => 'CGISESSID', value => $session_nopermission->id}); |
222 |
$t->request_ok($tx) # create hold to myself |
223 |
$t->request_ok($tx) # create hold to myself |
223 |
->status_is(200) |
224 |
->status_is(200)->json_is( '/reserve_id', $reserve_id3 )->json_is( |
224 |
->json_is('/reserve_id', $reserve_id3) |
225 |
'/suspend_until', |
225 |
->json_is('/suspend_until', $suspend_until . ' 00:00:00') |
226 |
output_pref( |
226 |
->json_is('/priority', 2); |
227 |
{ |
|
|
228 |
dateformat => 'rfc3339', |
229 |
dt => dt_from_string( $suspend_until . ' 00:00:00', 'sql' ) |
230 |
} |
231 |
) |
232 |
) |
233 |
->json_is( '/priority', 2 ); |
227 |
}; |
234 |
}; |
228 |
|
235 |
|
229 |
subtest "Test endpoints with permission" => sub { |
236 |
subtest "Test endpoints with permission" => sub { |
Lines 247-257
subtest "Test endpoints with permission" => sub {
Link Here
|
247 |
|
254 |
|
248 |
$tx = $t->ua->build_tx(PUT => "/api/v1/holds/$reserve_id" => json => $put_data); |
255 |
$tx = $t->ua->build_tx(PUT => "/api/v1/holds/$reserve_id" => json => $put_data); |
249 |
$tx->req->cookies({name => 'CGISESSID', value => $session3->id}); |
256 |
$tx->req->cookies({name => 'CGISESSID', value => $session3->id}); |
250 |
$t->request_ok($tx) |
257 |
$t->request_ok($tx)->status_is(200)->json_is( '/reserve_id', $reserve_id ) |
251 |
->status_is(200) |
258 |
->json_is( |
252 |
->json_is('/reserve_id', $reserve_id) |
259 |
'/suspend_until', |
253 |
->json_is('/suspend_until', $suspend_until . ' 00:00:00') |
260 |
output_pref( |
254 |
->json_is('/priority', 2); |
261 |
{ |
|
|
262 |
dateformat => 'rfc3339', |
263 |
dt => dt_from_string( $suspend_until . ' 00:00:00', 'sql' ) |
264 |
} |
265 |
) |
266 |
) |
267 |
->json_is( '/priority', 2 ); |
255 |
|
268 |
|
256 |
$tx = $t->ua->build_tx(DELETE => "/api/v1/holds/$reserve_id"); |
269 |
$tx = $t->ua->build_tx(DELETE => "/api/v1/holds/$reserve_id"); |
257 |
$tx->req->cookies({name => 'CGISESSID', value => $session3->id}); |
270 |
$tx->req->cookies({name => 'CGISESSID', value => $session3->id}); |
258 |
- |
|
|