@@ -733,6 +733,40 @@ describe('Parse.ACL', () => {
733
733
} ) ;
734
734
} ) ;
735
735
736
+ it ( "acl making an object privately writable (#3194)" , ( done ) => {
737
+ // Create an object owned by Alice.
738
+ var object ;
739
+ var user2 ;
740
+ var user = new Parse . User ( ) ;
741
+ user . set ( "username" , "alice" ) ;
742
+ user . set ( "password" , "wonderland" ) ;
743
+ user . signUp ( ) . then ( ( ) => {
744
+ object = new TestObject ( ) ;
745
+ var acl = new Parse . ACL ( user ) ;
746
+ acl . setPublicWriteAccess ( false ) ;
747
+ acl . setPublicReadAccess ( true ) ;
748
+ object . setACL ( acl ) ;
749
+ return object . save ( ) . then ( ( ) => {
750
+ return Parse . User . logOut ( ) ;
751
+ } )
752
+ } ) . then ( ( ) => {
753
+ user2 = new Parse . User ( ) ;
754
+ user2 . set ( "username" , "bob" ) ;
755
+ user2 . set ( "password" , "burger" ) ;
756
+ return user2 . signUp ( ) ;
757
+ } ) . then ( ( ) => {
758
+ console . log ( user2 . getSessionToken ( ) ) ;
759
+ return object . destroy ( { sessionToken : user2 . getSessionToken ( ) } ) ;
760
+ } ) . then ( ( res ) => {
761
+ console . log ( res ) ;
762
+ fail ( 'should not be able to destroy the object' ) ;
763
+ done ( ) ;
764
+ } , ( err ) => {
765
+ console . error ( err ) ;
766
+ done ( ) ;
767
+ } ) ;
768
+ } ) ;
769
+
736
770
it ( "acl sharing with another user and get" , ( done ) => {
737
771
// Sign in as Bob.
738
772
Parse . User . signUp ( "bob" , "pass" , null , {
0 commit comments