Revision eef2ba50
Added by Dominic Cleal almost 10 years ago
| test/functional/api/v2/users_controller_test.rb | ||
|---|---|---|
|
end
|
||
|
end
|
||
|
|
||
|
test "#index should not show hidden users" do
|
||
|
get :index, { :search => "login == #{users(:anonymous).login}" }
|
||
|
results = ActiveSupport::JSON.decode(@response.body)
|
||
|
assert results['results'].empty?, results.inspect
|
||
|
end
|
||
|
|
||
|
test "#find_resource should not return hidden users" do
|
||
|
get :show, { :id => users(:anonymous).id }
|
||
|
assert_response :not_found
|
||
|
end
|
||
|
|
||
|
end
|
||
Also available in: Unified diff
fixes #6964 - replace default scope that hides users with explicit scope
(cherry picked from commit cad9cce912a371018a489a874d896af241f91bd0)