|
19 | 19 | context "when the user is not an admin" do |
20 | 20 | it "not returns attributes with customer_id" do |
21 | 21 | dashboard = OrderDashboard.new |
| 22 | + dashboard.context = ctx_with_non_admin_user |
22 | 23 | expect( |
23 | | - dashboard.permitted_attributes("new", ctx_with_non_admin_user) |
| 24 | + dashboard.permitted_attributes("new") |
24 | 25 | ).not_to include("customer_id") |
25 | 26 | expect( |
26 | | - dashboard.permitted_attributes("create", ctx_with_non_admin_user) |
| 27 | + dashboard.permitted_attributes("create") |
27 | 28 | ).not_to include("customer_id") |
28 | 29 | end |
29 | 30 | end |
30 | 31 |
|
31 | 32 | context "when the user is an admin" do |
32 | 33 | it "returns attributes with customer_id" do |
33 | 34 | dashboard = OrderDashboard.new |
| 35 | + dashboard.context = ctx_with_admin_user |
34 | 36 | expect( |
35 | | - dashboard.permitted_attributes("new", ctx_with_admin_user) |
| 37 | + dashboard.permitted_attributes("new") |
36 | 38 | ).to include("customer_id") |
37 | 39 | expect( |
38 | | - dashboard.permitted_attributes("create", ctx_with_admin_user) |
| 40 | + dashboard.permitted_attributes("create") |
39 | 41 | ).to include("customer_id") |
40 | 42 | end |
41 | 43 | end |
|
52 | 54 | context "when the user is not an admin" do |
53 | 55 | it "not returns attributes with customer_id" do |
54 | 56 | dashboard = OrderDashboard.new |
| 57 | + dashboard.context = ctx_with_non_admin_user |
55 | 58 | expect( |
56 | | - dashboard.permitted_attributes("edit", ctx_with_non_admin_user) |
| 59 | + dashboard.permitted_attributes("edit") |
57 | 60 | ).not_to include("customer_id") |
58 | 61 | expect( |
59 | | - dashboard.permitted_attributes("update", ctx_with_non_admin_user) |
| 62 | + dashboard.permitted_attributes("update") |
60 | 63 | ).not_to include("customer_id") |
61 | 64 | end |
62 | 65 | end |
63 | 66 |
|
64 | 67 | context "when the user is an admin" do |
65 | 68 | it "also no returns attributes with customer_id" do |
66 | 69 | dashboard = OrderDashboard.new |
| 70 | + dashboard.context = ctx_with_admin_user |
67 | 71 | expect( |
68 | | - dashboard.permitted_attributes("edit", ctx_with_admin_user) |
| 72 | + dashboard.permitted_attributes("edit") |
69 | 73 | ).not_to include("customer_id") |
70 | 74 | expect( |
71 | | - dashboard.permitted_attributes("update", ctx_with_admin_user) |
| 75 | + dashboard.permitted_attributes("update") |
72 | 76 | ).not_to include("customer_id") |
73 | 77 | end |
74 | 78 | end |
|
0 commit comments