inteligr8/SearchServices
1
0
Fork 0
mirror of https://github.com/Alfresco/SearchServices.git synced 2026-09-16 18:12:56 +00:00
Code Issues Packages Projects Releases Wiki Activity

TAS-967 REST API - valid request returns status code 403 with Contributor role

Browse Source
This commit is contained in:
Valentin Popa
2016-09-29 11:30:05 +03:00
parent 76955b5361
commit 3910d6df81
1 changed files with 17 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
e2e-test/java/org/alfresco/rest/people/DeleteSiteMemberSanityTests.java
+17 -1
View File
@@ -75,7 +75,7 @@ public class DeleteSiteMemberSanityTests extends RestTest
executionType = ExecutionType.SANITY,
description = "Verify site collaborator does not have permission to delete another member of the site")
// TODO BUG ACE-5444
public void siteCollaboratorCanDeleteSiteMember() throws JsonToModelConversionException, DataPreparationException, Exception
public void siteCollaboratorIsNotAbleToDeleteSiteMember() throws JsonToModelConversionException, DataPreparationException, Exception
{
newUser = dataUser.createRandomTestUser();
siteMember = new SiteMember(Role.SiteContributor.toString(), newUser.getUsername());
@@ -86,5 +86,21 @@ public class DeleteSiteMemberSanityTests extends RestTest
peopleApi.deleteSiteMember(newUser.getUsername(), siteModel.getId());
sitesApi.usingRestWrapper().assertStatusCodeIs(HttpStatus.FORBIDDEN.toString());
}
@TestRail(section = { "rest-api", "people" },
executionType = ExecutionType.SANITY,
description = "Verify site contributor does not have permission to delete another member of the site")
// TODO BUG ACE-5444
public void siteContributorUIsNotAbleToDeleteSiteMember() throws JsonToModelConversionException, DataPreparationException, Exception
{
newUser = dataUser.createRandomTestUser();
siteMember = new SiteMember(Role.SiteCollaborator.toString(), newUser.getUsername());
restClient.authenticateUser(adminUser);
sitesApi.addPerson(siteModel.getId(), siteMember);
restClient.authenticateUser(usersWithRoles.get(UserRole.SiteContributor));
peopleApi.deleteSiteMember(newUser.getUsername(), siteModel.getId());
sitesApi.usingRestWrapper().assertStatusCodeIs(HttpStatus.FORBIDDEN.toString());
}
}