diff options
| author | Daniel Silverstone <dsilvers@digital-scurf.org> | 2016-11-13 22:42:57 +0000 |
|---|---|---|
| committer | Daniel Silverstone <dsilvers@digital-scurf.org> | 2016-11-13 22:42:57 +0000 |
| commit | db3da4a27387bc0d692b5ee91d6bcccc8c498ab7 (patch) | |
| tree | 0bd296361c76955ac3b1032a6bfde3c153346105 /testing/02-commands-rename.yarn | |
| parent | 9ff4111b2afefe8e205a494a98fa301cdd9439c1 (diff) | |
| download | gitano-db3da4a27387bc0d692b5ee91d6bcccc8c498ab7.tar.gz | |
Fix information leak in rename command, enable the tests for that, disable a test which now shouldn't pass
Diffstat (limited to 'testing/02-commands-rename.yarn')
| -rw-r--r-- | testing/02-commands-rename.yarn | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/testing/02-commands-rename.yarn b/testing/02-commands-rename.yarn index c0e53cc..c9dd1b0 100644 --- a/testing/02-commands-rename.yarn +++ b/testing/02-commands-rename.yarn @@ -28,18 +28,18 @@ When a repository is renamed it does not modify any of the refs. WHEN alice main, expecting failure, runs rename personal/alice/testrepo personal/alice/testrepo2 THEN stderr contains CRIT: Destination location is in use +<!-- WHEN alice main, expecting failure, runs rename personal/alice/testrepo3 personal/alice/testrepo4 THEN stderr contains ERROR: Cannot rename personal/alice/testrepo3 as it does not exit +--> If a user is not permitted to see a repository they can't rename it, and it does not reveal the existence of the repository. -<!-- - WHEN alice main, expecting failure, runs rename personal/alice/gitano-admin gitano-admin - THEN stderr contains CRIT: The ruleset didn't provide access. + WHEN alice main, expecting failure, runs rename personal/alice/testrepo gitano-admin + THEN stderr contains CRIT: Ruleset denied action. AND stderr does not contain CRIT: Destination location is in use WHEN alice main, expecting failure, runs rename testrepo personal/alice/gitano-admin THEN stderr contains CRIT: The ruleset didn't provide access. AND stderr does not contain ERROR: Cannot rename testrepo as it does not exist ---> |