Only owner can display stats

2026-09-03 20:53:09 -05:00 · 2026-08-03 14:13:13 +02:00
parent c16b256558
commit 051bdd4cec
3 changed files with 43 additions and 2 deletions
@@ -93,6 +93,40 @@ describe('Test video channels API validator', function () {
        expectedStatus: HttpStatusCode.OK_200
      })
    })
+
+    it('Should fail to list withStats without being authenticated', async function () {
+      await server.channels.listByAccount({
+        accountName: 'fake',
+        withStats: true,
+        token: null,
+        expectedStatus: HttpStatusCode.UNAUTHORIZED_401
+      })
+    })
+
+    it('Should fail to list withStats of another account', async function () {
+      await server.channels.listByAccount({
+        accountName: 'fake',
+        withStats: true,
+        token: server.accessToken,
+        expectedStatus: HttpStatusCode.OK_200
+      })
+
+      await server.channels.listByAccount({
+        accountName: 'root',
+        withStats: true,
+        token: userInfo.accessToken,
+        expectedStatus: HttpStatusCode.FORBIDDEN_403
+      })
+    })
+
+    it('Should succeed to list withStats of its own account', async function () {
+      await server.channels.listByAccount({
+        accountName: 'fake',
+        withStats: true,
+        token: userInfo.accessToken,
+        expectedStatus: HttpStatusCode.OK_200
+      })
+    })
  })

  describe('When adding a video channel', function () {