Follow-up from "Enable Guest+ users to execute custom agents in the WebUI"
The following discussion from !214918 (merged) should be addressed:
-
@.luke started a discussion:
Suggestion
How about we keep a test that anonymous users cannot request the field, just to keep the intention of this test, to assert that a certain low-access level you can't get the data, around?
context 'when user is a guest' do let(:current_user) { nil } it_behaves_like 'when request fails' end
Edited by 🤖 GitLab Bot 🤖