pundit: convert post approvals to pundit.

2020-03-19 20:04:59 -05:00
parent cbee23f9ad
commit 84c654464d
3 changed files with 16 additions and 4 deletions
--- a/test/functional/post_approvals_controller_test.rb
+++ b/test/functional/post_approvals_controller_test.rb
@@ -26,6 +26,14 @@ class PostApprovalsControllerTest < ActionDispatch::IntegrationTest
          assert(!@post.reload.is_deleted?)
        end
      end
+
+      should "not allow non-approvers to approve posts" do
+        @post = create(:post, is_pending: true)
+        post_auth post_approvals_path(post_id: @post.id, format: :js), create(:user)
+
+        assert_response 403
+        assert_equal(true, @post.reload.is_pending?)
+      end
    end

    context "index action" do