Constrain user queries to the current or relevant account
This commit is contained in:
@@ -86,7 +86,7 @@ class BoardsControllerTest < ActionDispatch::IntegrationTest
|
||||
|
||||
assert_redirected_to edit_board_path(board)
|
||||
assert board.reload.all_access?
|
||||
assert_equal User.active.sort, board.users.sort
|
||||
assert_equal accounts("37s").users.active.sort, board.users.sort
|
||||
end
|
||||
|
||||
test "destroy" do
|
||||
|
||||
@@ -9,5 +9,6 @@ class Prompts::Boards::UsersControllerTest < ActionDispatch::IntegrationTest
|
||||
test "index" do
|
||||
get prompts_board_users_path(@board)
|
||||
assert_response :success
|
||||
assert_select "lexxy-prompt-item", count: 3
|
||||
end
|
||||
end
|
||||
|
||||
Reference in New Issue
Block a user