42 lines
997 B
Ruby
42 lines
997 B
Ruby
require "test_helper"
|
|
|
|
class Users::ProfilesControllerTest < ActionDispatch::IntegrationTest
|
|
test "show" do
|
|
sign_in :david
|
|
|
|
get user_profile_url(users(:david))
|
|
assert_response :success
|
|
|
|
get user_profile_url(users(:kevin))
|
|
assert_response :success
|
|
end
|
|
|
|
test "edit is accessable to the current user" do
|
|
sign_in :david
|
|
|
|
get edit_user_profile_url(users(:david))
|
|
assert_response :success
|
|
|
|
get edit_user_profile_url(users(:kevin))
|
|
assert_response :forbidden
|
|
end
|
|
|
|
test "update modifies profile for current user" do
|
|
sign_in :kevin
|
|
|
|
put user_profile_url(users(:kevin)), params: { user: { name: "Bob" } }
|
|
|
|
assert_redirected_to users_url
|
|
assert_equal "Bob", users(:kevin).reload.name
|
|
end
|
|
|
|
test "update prohibits modifying profile of other users" do
|
|
sign_in :david
|
|
|
|
put user_profile_url(users(:kevin)), params: { user: { name: "Bob" } }
|
|
|
|
assert_response :forbidden
|
|
assert_equal "Kevin", users(:kevin).reload.name
|
|
end
|
|
end
|