Skip to content

Commit a6c9881

Browse files
flovilmartArthur Cinader
authored andcommitted
Adds tests that shows issue #3194 is ok (#3200)
1 parent e069b20 commit a6c9881

File tree

1 file changed

+34
-0
lines changed

1 file changed

+34
-0
lines changed

spec/ParseACL.spec.js

Lines changed: 34 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -733,6 +733,40 @@ describe('Parse.ACL', () => {
733733
});
734734
});
735735

736+
it("acl making an object privately writable (#3194)", (done) => {
737+
// Create an object owned by Alice.
738+
var object;
739+
var user2;
740+
var user = new Parse.User();
741+
user.set("username", "alice");
742+
user.set("password", "wonderland");
743+
user.signUp().then(() => {
744+
object = new TestObject();
745+
var acl = new Parse.ACL(user);
746+
acl.setPublicWriteAccess(false);
747+
acl.setPublicReadAccess(true);
748+
object.setACL(acl);
749+
return object.save().then(() => {
750+
return Parse.User.logOut();
751+
})
752+
}).then(() => {
753+
user2 = new Parse.User();
754+
user2.set("username", "bob");
755+
user2.set("password", "burger");
756+
return user2.signUp();
757+
}).then(() => {
758+
console.log(user2.getSessionToken());
759+
return object.destroy({sessionToken: user2.getSessionToken() });
760+
}).then((res) => {
761+
console.log(res);
762+
fail('should not be able to destroy the object');
763+
done();
764+
}, (err) => {
765+
console.error(err);
766+
done();
767+
});
768+
});
769+
736770
it("acl sharing with another user and get", (done) => {
737771
// Sign in as Bob.
738772
Parse.User.signUp("bob", "pass", null, {

0 commit comments

Comments
 (0)