diff options
author | cpanato <ctadeu@gmail.com> | 2018-07-10 19:27:14 +0200 |
---|---|---|
committer | cpanato <ctadeu@gmail.com> | 2018-07-10 19:27:14 +0200 |
commit | c042ffa460296587579aff54b157a5109e022f7e (patch) | |
tree | 9e7f77fbc83b6d06204db099066be8999dbb22d9 /api4/channel_test.go | |
parent | 9470564d355c201155f6fcb123152b8ac954f812 (diff) | |
parent | dccd95bc67779a5b83a2660aec0cf4622cd56550 (diff) | |
download | chat-c042ffa460296587579aff54b157a5109e022f7e.tar.gz chat-c042ffa460296587579aff54b157a5109e022f7e.tar.bz2 chat-c042ffa460296587579aff54b157a5109e022f7e.zip |
Merge remote-tracking branch 'upstream/release-5.1' into release-5.1-daily-merge-20180710
Diffstat (limited to 'api4/channel_test.go')
-rw-r--r-- | api4/channel_test.go | 58 |
1 files changed, 57 insertions, 1 deletions
diff --git a/api4/channel_test.go b/api4/channel_test.go index ab751f151..43223d060 100644 --- a/api4/channel_test.go +++ b/api4/channel_test.go @@ -209,8 +209,34 @@ func TestUpdateChannel(t *testing.T) { channel.DisplayName = "Should not update" _, resp = Client.UpdateChannel(channel) - CheckNotFoundStatus(t, resp) + CheckForbiddenStatus(t, resp) + + // Test updating the header of someone else's GM channel. + user1 := th.CreateUser() + user2 := th.CreateUser() + user3 := th.CreateUser() + + groupChannel, resp := Client.CreateGroupChannel([]string{user1.Id, user2.Id}) + CheckNoError(t, resp) + + groupChannel.Header = "lolololol" + Client.Logout() + Client.Login(user3.Email, user3.Password) + _, resp = Client.UpdateChannel(groupChannel) + CheckForbiddenStatus(t, resp) + // Test updating the header of someone else's GM channel. + Client.Logout() + Client.Login(user.Email, user.Password) + + directChannel, resp := Client.CreateDirectChannel(user.Id, user1.Id) + CheckNoError(t, resp) + + directChannel.Header = "lolololol" + Client.Logout() + Client.Login(user3.Email, user3.Password) + _, resp = Client.UpdateChannel(directChannel) + CheckForbiddenStatus(t, resp) } func TestPatchChannel(t *testing.T) { @@ -267,6 +293,36 @@ func TestPatchChannel(t *testing.T) { _, resp = th.SystemAdminClient.PatchChannel(th.BasicPrivateChannel.Id, patch) CheckNoError(t, resp) + + // Test updating the header of someone else's GM channel. + user1 := th.CreateUser() + user2 := th.CreateUser() + user3 := th.CreateUser() + + groupChannel, resp := Client.CreateGroupChannel([]string{user1.Id, user2.Id}) + CheckNoError(t, resp) + + Client.Logout() + Client.Login(user3.Email, user3.Password) + + channelPatch := &model.ChannelPatch{} + channelPatch.Header = new(string) + *channelPatch.Header = "lolololol" + + _, resp = Client.PatchChannel(groupChannel.Id, channelPatch) + CheckForbiddenStatus(t, resp) + + // Test updating the header of someone else's GM channel. + Client.Logout() + Client.Login(user.Email, user.Password) + + directChannel, resp := Client.CreateDirectChannel(user.Id, user1.Id) + CheckNoError(t, resp) + + Client.Logout() + Client.Login(user3.Email, user3.Password) + _, resp = Client.PatchChannel(directChannel.Id, channelPatch) + CheckForbiddenStatus(t, resp) } func TestCreateDirectChannel(t *testing.T) { |