From 8d954606eaf3cf80f2e1374a475b18dcaf79eec0 Mon Sep 17 00:00:00 2001 From: Miquel Sabaté Solà Date: Mon, 22 Jul 2024 16:59:37 +0200 Subject: Do not allow to show non-shared searches MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Miquel Sabaté Solà --- test/controllers/shared_searches_controller_test.rb | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) create mode 100644 test/controllers/shared_searches_controller_test.rb (limited to 'test/controllers') diff --git a/test/controllers/shared_searches_controller_test.rb b/test/controllers/shared_searches_controller_test.rb new file mode 100644 index 0000000..e432316 --- /dev/null +++ b/test/controllers/shared_searches_controller_test.rb @@ -0,0 +1,16 @@ +# frozen_string_literal: true + +class SharedSearchesControllerTest < ActionDispatch::IntegrationTest + # We need the session to be initialized as a signed in user. + setup { post sessions_url, params: { username: users(:user).username, password: '12341234' } } + + test 'does not allow to show searches which have not been shared' do + get search_shared_url(searches(:search1).id) + assert_equal @response.code.to_i, 404 + + searches(:search1).update!(shared: true) + + get search_shared_url(searches(:search1).id) + assert_equal @response.code.to_i, 200 + end +end -- cgit v1.2.3