diff options
author | NavaL <ayoyo@thoughtworks.com> | 2016-07-14 15:06:20 +0200 |
---|---|---|
committer | NavaL <ayoyo@thoughtworks.com> | 2016-07-14 15:45:09 +0200 |
commit | ab1917c5fe0f03e7719863a5598ad575d9fef302 (patch) | |
tree | 1aba29d7cfa25489d7f53528e022ff14ecb24961 /test/integration | |
parent | e3c2cb91dfef5c39c608b967e702e9de977d1bd2 (diff) |
[feature] restrict is_admin in the user api, to only allow querying
for him/herself
So that it we do not expose the is_admin property to anyone else
including other admins.
Diffstat (limited to 'test/integration')
-rw-r--r-- | test/integration/api/signup_test.rb | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/test/integration/api/signup_test.rb b/test/integration/api/signup_test.rb index 2e515c1..dc24420 100644 --- a/test/integration/api/signup_test.rb +++ b/test/integration/api/signup_test.rb @@ -8,7 +8,7 @@ class SignupTest < SrpTest end test "signup response" do - assert_json_response :login => @login, :ok => true, :is_admin => false, :id => @user.id, :enabled => true + assert_json_response :login => @login, :ok => true, :id => @user.id, :enabled => true assert last_response.successful? end |