Use topics:read privilege for topic filtering use cases (#7462)

* fix: use topics:read privilege for topic filtering use cases

* fix: tests

* fix: more broken tests
This commit is contained in:
Julian Lam
2019-03-16 14:51:46 -04:00
committed by GitHub
parent c20cd52854
commit 745a9589e9
16 changed files with 20 additions and 20 deletions

View File

@@ -1584,12 +1584,12 @@ describe('Controllers', function () {
});
it('should 403 if user does not have read privilege', function (done) {
privileges.categories.rescind(['read'], category.cid, 'registered-users', function (err) {
privileges.categories.rescind(['topics:read'], category.cid, 'registered-users', function (err) {
assert.ifError(err);
request(nconf.get('url') + '/api/post/' + pid, { jar: jar }, function (err, res) {
assert.ifError(err);
assert.equal(res.statusCode, 403);
privileges.categories.give(['read'], category.cid, 'registered-users', done);
privileges.categories.give(['topics:read'], category.cid, 'registered-users', done);
});
});
});