diff options
author | Pawel Chojnacki <pawel@chojnacki.ws> | 2017-04-24 19:55:47 +0200 |
---|---|---|
committer | Pawel Chojnacki <pawel@chojnacki.ws> | 2017-04-24 19:55:47 +0200 |
commit | 6dab3033c9c2f6a9a4cabf9daffeff2b914cf66c (patch) | |
tree | a2ac4e770c2d44c753e56815450c9b80f0817b2a | |
parent | 5bf0441fd9cda2dcc3c3ef1ce3084df5ed87602d (diff) | |
download | gitlab-ce-6dab3033c9c2f6a9a4cabf9daffeff2b914cf66c.tar.gz |
Add deployments security check
-rw-r--r-- | spec/features/security/project/private_access_spec.rb | 15 |
1 files changed, 15 insertions, 0 deletions
diff --git a/spec/features/security/project/private_access_spec.rb b/spec/features/security/project/private_access_spec.rb index a8fc0624588..c9059ef8fa6 100644 --- a/spec/features/security/project/private_access_spec.rb +++ b/spec/features/security/project/private_access_spec.rb @@ -417,6 +417,21 @@ describe "Private Project Access", feature: true do it { is_expected.to be_denied_for(:visitor) } end + describe "GET /:project_path/environments/:id/deployments" do + let(:environment) { create(:environment, project: project) } + subject { namespace_project_environment_path(project.namespace, project, environment) } + + it { is_expected.to be_allowed_for(:admin) } + it { is_expected.to be_allowed_for(:owner).of(project) } + it { is_expected.to be_allowed_for(:master).of(project) } + it { is_expected.to be_allowed_for(:developer).of(project) } + it { is_expected.to be_allowed_for(:reporter).of(project) } + it { is_expected.to be_denied_for(:guest).of(project) } + it { is_expected.to be_denied_for(:user) } + it { is_expected.to be_denied_for(:external) } + it { is_expected.to be_denied_for(:visitor) } + end + describe "GET /:project_path/environments/new" do subject { new_namespace_project_environment_path(project.namespace, project) } |