IntenseWebs/discourse
3
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2025-02-25 18:55:32 -06:00
Code Issues Packages Projects Releases Wiki Activity

FIX: Do not require trust level to invite to group (#13230)

Browse Source 
It used to require SiteSetting.min_trust_level_to_allow_invite to
invite a user to a group, even if the user existed and the inviter was
a group owner.
This commit is contained in:
Dan Ungureanu
2021-06-02 16:28:21 +03:00
committed by GitHub
parent 9d6780f03d
commit d2135b23c4
2 changed files with 11 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
spec/requests/groups_controller_spec.rb
View File

@@ -1212,12 +1212,18 @@ describe GroupsController do
end
it 'does not add users without sufficient permission' do
group.add_owner(user)
sign_in(user)
SiteSetting.min_trust_level_to_allow_invite = user.trust_level + 1
user2 = Fabricate(:user)
put "/groups/#{group.id}/members.json", params: { usernames: user2.username }
put "/groups/#{group.id}/members.json", params: { usernames: Fabricate(:user).username }
expect(response.status).to eq(200)
end
it 'does not send invites if user cannot invite' do
group.add_owner(user)
sign_in(user)
put "/groups/#{group.id}/members.json", params: { emails: "test@example.com" }
expect(response.status).to eq(403)
end