From 6eeab1df31330e16e7c9a8fd03ddab15807c6227 Mon Sep 17 00:00:00 2001 From: Max Date: Mon, 3 Aug 2026 14:36:09 +0200 Subject: [PATCH] chore(test): direct editing permissions Signed-off-by: Max --- cypress/e2e/directediting.spec.js | 28 ++++++++++++++++++++++++++++ 1 file changed, 28 insertions(+) diff --git a/cypress/e2e/directediting.spec.js b/cypress/e2e/directediting.spec.js index aa991d95eeb..f7a681de424 100644 --- a/cypress/e2e/directediting.spec.js +++ b/cypress/e2e/directediting.spec.js @@ -28,6 +28,12 @@ describe('direct editing', function() { initUserAndFiles(user, 'test.md', 'empty.md', 'empty.txt') }) + beforeEach(function() { + // ensure user is enabled if it was disabled before + cy.clearCookies() + cy.enableUser(user, true) + }) + it('Open an existing file, edit it', () => { cy.login(user) cy.createDirectEditingLink('empty.md').then((token) => { @@ -69,4 +75,26 @@ describe('direct editing', function() { '# This is a headline\nSome text\n', ) }) + + it('Cannot open as disabled user', () => { + cy.login(user) + cy.createDirectEditingLink('empty.md').as('token') + cy.clearCookies() + cy.enableUser(user, false) + cy.get('@token') + .then((token) => { cy.request({ url: token, failOnStatusCode: false }) }) + .its('status') + .should('equal', 404) + }) + + it('Cannot open as deleted user', () => { + cy.login(user) + cy.createDirectEditingLink('empty.md').as('token') + cy.clearCookies() + cy.deleteUser(user) + cy.get('@token') + .then((token) => { cy.request({ url: token, failOnStatusCode: false }) }) + .its('status') + .should('equal', 404) + }) })