Sutty/trabajo-afectivo
5
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

Merge branch 'private-pull-request-1463' into develop

Browse source
This commit is contained in:
Thorsten Eckel 2017-10-11 10:37:25 +02:00
commit 698ea1737f
2 changed files with 25 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
app/controllers/form_controller.rb
View file

@ -241,7 +241,7 @@ class FormController < ApplicationController
def enabled?
return true if params[:test] && current_user && current_user.permissions?('admin.channel_formular')
return true if Setting.get('form_ticket_create')
return true if Setting.get('form_ticket_create') && Setting.get('customer_ticket_create')
response_access_deny
false
end

24
test/controllers/form_controller_test.rb
View file

@ -244,4 +244,28 @@ class FormControllerTest < ActionDispatch::IntegrationTest
assert(result['error'])
end
test '06 - customer_ticket_create false disables form' do
Setting.set('form_ticket_create', true)
Setting.set('customer_ticket_create', false)
fingerprint = SecureRandom.hex(40)
post '/api/v1/form_config', params: { fingerprint: fingerprint }.to_json, headers: @headers
result = JSON.parse(@response.body)
token = result['token']
params = {
fingerprint: fingerprint,
token: token,
name: 'Bob Smith',
email: 'discard@znuny.com',
title: 'test',
body: 'hello'
}
post '/api/v1/form_submit', params: params.to_json, headers: @headers
assert_response(401)
end
end