@@ -311,15 +311,14 @@ describe('ACL with WebID+OIDC over HTTP', function () {
311311 done ( )
312312 } )
313313 } )
314- it ( 'user1 should not be able to access test directory when origin is invalid' ,
314+ it ( 'user1 should be able to access public test directory even when origin is invalid' ,
315315 function ( done ) {
316316 var options = createOptions ( '/origin/test-folder/' , 'user1' )
317317 options . headers . origin = origin2
318318
319319 request . head ( options , function ( error , response , body ) {
320320 assert . equal ( error , null )
321- assert . equal ( response . statusCode , 403 )
322- assert . equal ( response . statusMessage , 'Forbidden' ) // TODO: Should be Origin Unauthorized
321+ assert . equal ( response . statusCode , 200 )
323322 done ( )
324323 } )
325324 } )
@@ -344,15 +343,14 @@ describe('ACL with WebID+OIDC over HTTP', function () {
344343 done ( )
345344 } )
346345 } )
347- it ( 'agent should not be able to access test directory when origin is invalid' ,
346+ it ( 'agent should be able to access public test directory even when origin is invalid' ,
348347 function ( done ) {
349348 var options = createOptions ( '/origin/test-folder/' )
350349 options . headers . origin = origin2
351350
352351 request . head ( options , function ( error , response , body ) {
353352 assert . equal ( error , null )
354- assert . equal ( response . statusCode , 403 )
355- assert . equal ( response . statusMessage , 'Forbidden' ) // TODO: Should be Origin Unauthorized
353+ assert . equal ( response . statusCode , 200 )
356354 done ( )
357355 } )
358356 } )
0 commit comments