From 2dcb38acf734c1f1dc1d3bd7479b44be0d6b925c Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?J=C3=B6rn=20Friedrich=20Dreyer?= Date: Wed, 4 Nov 2020 10:56:33 +0100 Subject: [PATCH] normal users cannot list all groups at the ocs endpoint MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Jörn Friedrich Dreyer --- .../apiOcisSpecific/apiAuthOcs-ocsGETAuth.feature | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/ocis/tests/acceptance/features/apiOcisSpecific/apiAuthOcs-ocsGETAuth.feature b/ocis/tests/acceptance/features/apiOcisSpecific/apiAuthOcs-ocsGETAuth.feature index 2f5e30d9c..8ababd265 100644 --- a/ocis/tests/acceptance/features/apiOcisSpecific/apiAuthOcs-ocsGETAuth.feature +++ b/ocis/tests/acceptance/features/apiOcisSpecific/apiAuthOcs-ocsGETAuth.feature @@ -55,7 +55,6 @@ Feature: auth | /ocs/v1.php/apps/files_sharing/api/v1/remote_shares | | /ocs/v1.php/apps/files_sharing/api/v1/remote_shares/pending | | /ocs/v1.php/privatedata/getattribute | - | /ocs/v1.php/cloud/groups | | /ocs/v1.php/cloud/apps | Then the HTTP status code of responses on all endpoints should be "200" And the OCS status code of responses on all endpoints should be "998" @@ -73,14 +72,15 @@ Feature: auth # | /ocs/v2.php/apps/files_sharing/api/v1/shares | 100 | 200 | | /ocs/v2.php/cloud/apps | - | /ocs/v2.php/cloud/groups | | /ocs/v2.php/privatedata/getattribute | Then the HTTP status code of responses on all endpoints should be "404" And the OCS status code of responses on all endpoints should be "998" When the user "Alice" requests these endpoints with "GET" with basic auth - | endpoint | - | /ocs/v1.php/cloud/users | - | /ocs/v2.php/cloud/users | + | endpoint | + | /ocs/v1.php/cloud/users | + | /ocs/v2.php/cloud/users | + | /ocs/v1.php/cloud/groups | + | /ocs/v2.php/cloud/groups | Then the HTTP status code of responses on all endpoints should be "401" And the OCS status code of responses on all endpoints should be "997" When the user "Alice" requests these endpoints with "GET" with basic auth