diff options
Diffstat (limited to 'spec/controllers/graphql_controller_spec.rb')
| -rw-r--r-- | spec/controllers/graphql_controller_spec.rb | 9 |
1 files changed, 6 insertions, 3 deletions
diff --git a/spec/controllers/graphql_controller_spec.rb b/spec/controllers/graphql_controller_spec.rb index b071d01de5d..c19a752b07b 100644 --- a/spec/controllers/graphql_controller_spec.rb +++ b/spec/controllers/graphql_controller_spec.rb @@ -1,3 +1,5 @@ +# frozen_string_literal: true + require 'spec_helper' describe GraphqlController do @@ -19,15 +21,16 @@ describe GraphqlController do expect(response).to have_gitlab_http_status(200) end - it 'returns 404 when user cannot access API' do + it 'returns access denied template when user cannot access API' do # User cannot access API in a couple of cases # * When user is internal(like ghost users) # * When user is blocked - allow(Ability).to receive(:allowed?).with(user, :access_api, :global).and_return(false) + expect(Ability).to receive(:allowed?).with(user, :access_api, :global).and_return(false) post :execute - expect(response).to have_gitlab_http_status(404) + expect(response.status).to eq(403) + expect(response).to render_template('errors/access_denied') end end |