Kevin McConnell
49fa8b21a6
This is necessary to a) ensure people can't edit/delete comments they don't own, and b) make the comment partial cacheable.
31 lines
1004 B
Ruby
31 lines
1004 B
Ruby
require "test_helper"
|
|
|
|
class CommentsControllerTest < ActionDispatch::IntegrationTest
|
|
setup do
|
|
sign_in_as :kevin
|
|
end
|
|
|
|
test "create" do
|
|
assert_difference "bubbles(:logo).messages.comments.count", +1 do
|
|
post bucket_bubble_comments_url(buckets(:writebook), bubbles(:logo), params: { comment: { body: "Agreed." } })
|
|
end
|
|
|
|
assert_response :success
|
|
end
|
|
|
|
test "update" do
|
|
put bucket_bubble_comment_url(buckets(:writebook), bubbles(:logo), comments(:logo_agreement_kevin)), params: { comment: { body: "I've changed my mind" } }
|
|
|
|
assert_response :success
|
|
assert_equal "I've changed my mind", comments(:logo_agreement_kevin).reload.body.content
|
|
end
|
|
|
|
test "update another user's comment" do
|
|
assert_no_changes "comments(:logo_agreement_jz).body.content" do
|
|
put bucket_bubble_comment_url(buckets(:writebook), bubbles(:logo), comments(:logo_agreement_jz)), params: { comment: { body: "I've changed my mind" } }
|
|
end
|
|
|
|
assert_response :forbidden
|
|
end
|
|
end
|