raggedstaff/openfoodnetwork
1
0
Fork 0
mirror of https://github.com/openfoodfoundation/openfoodnetwork synced 2026-03-19 04:49:15 +00:00
Code Issues Packages Projects Releases Wiki Activity

Spec bug allowing any enterprise to view invoices

Browse Source
This commit is contained in:
Maikel Linke
2023-06-29 16:02:33 +10:00
committed by Mohamed ABDELLANI
parent 145696aa7f
commit 85002d3804
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
spec/controllers/spree/admin/orders/invoices_spec.rb
View File

@@ -107,7 +107,7 @@ describe Spree::Admin::OrdersController, type: :controller do
describe "#index" do
let(:user) { create(:user) }
let(:enterprise_user) { create(:user) }
let(:enterprise_user) { create(:user, enterprises: [create(:enterprise)]) }
let(:order) {
create(:order_with_distributor, bill_address: create(:address),
ship_address: create(:address))
@@ -128,8 +128,9 @@ describe Spree::Admin::OrdersController, type: :controller do
context "which is not a manager of the distributor for an order" do
before { allow(controller).to receive(:spree_current_user) { enterprise_user } }
it "should prevent me from listing invoices for the order" do
it "shows only invoices of manged enterprises" do
spree_get :index, params
pending "reporting success"
expect(response).to redirect_to unauthorized_path
end
end