FIX: Deprecated method should still behave the same. (#14067)

spec/requests/posts_controller_spec.rb

@@ -1705,6 +1705,44 @@ describe PostsController do
     end
   end
 
+  describe '#flagged_posts' do
+    include_examples "action requires login", :get, "/posts/system/flagged.json"
+
+    describe "when logged in" do
+      it "raises an error if the user doesn't have permission to see the flagged posts" do
+        sign_in(user)
+        get "/posts/system/flagged.json"
+        expect(response).to be_forbidden
+      end
+
+      it "can see the flagged posts when authorized" do
+        sign_in(moderator)
+        get "/posts/system/flagged.json"
+        expect(response.status).to eq(200)
+      end
+
+      it "only shows agreed and deferred flags" do
+        post_agreed = create_post(user: user)
+        post_deferred = create_post(user: user)
+        post_disagreed = create_post(user: user)
+
+        r0 = PostActionCreator.spam(moderator, post_agreed).reviewable
+        r1 = PostActionCreator.off_topic(moderator, post_deferred).reviewable
+        r2 = PostActionCreator.inappropriate(moderator, post_disagreed).reviewable
+
+        r0.perform(admin, :agree_and_keep)
+        r1.perform(admin, :ignore)
+        r2.perform(admin, :disagree)
+
+        sign_in(Fabricate(:moderator))
+        get "/posts/#{user.username}/flagged.json"
+        expect(response.status).to eq(200)
+
+        expect(response.parsed_body.length).to eq(2)
+      end
+    end
+  end
+
   describe '#deleted_posts' do
     include_examples "action requires login", :get, "/posts/system/deleted.json"