diff options
| author | GitLab Release Tools Bot <robert+release-tools@gitlab.com> | 2019-07-26 13:40:54 +0000 |
|---|---|---|
| committer | GitLab Release Tools Bot <robert+release-tools@gitlab.com> | 2019-07-26 13:40:54 +0000 |
| commit | 461101c3b50ef2215a3be9a099bf2581473d7d2d (patch) | |
| tree | 6714e2d17e2c45926a1355ca029f987b58f1de19 /spec/controllers/groups | |
| parent | 4b2d49b7285f7968e894c635321f878d77773bb8 (diff) | |
| parent | dfe906209e2238b82c84c9fb435498cae2f3d43e (diff) | |
| download | gitlab-ce-461101c3b50ef2215a3be9a099bf2581473d7d2d.tar.gz | |
Merge branch 'security-60551-fix-upload-scope' into 'master'
Queries for Upload should be scoped by model
See merge request gitlab/gitlabhq!3229
Diffstat (limited to 'spec/controllers/groups')
| -rw-r--r-- | spec/controllers/groups/uploads_controller_spec.rb | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/spec/controllers/groups/uploads_controller_spec.rb b/spec/controllers/groups/uploads_controller_spec.rb index 0f99a957581..60342bf8e3d 100644 --- a/spec/controllers/groups/uploads_controller_spec.rb +++ b/spec/controllers/groups/uploads_controller_spec.rb @@ -10,6 +10,11 @@ describe Groups::UploadsController do { group_id: model } end + let(:other_model) { create(:group, :public) } + let(:other_params) do + { group_id: other_model } + end + it_behaves_like 'handle uploads' do let(:uploader_class) { NamespaceFileUploader } end |