Follow-up from "Enable Guest+ users to execute custom agents in the WebUI"

The following discussion from !214918 (merged) should be addressed:

  • @.luke started a discussion:

    Suggestion

    How about we keep a test that anonymous users cannot request the field, just to keep the intention of this test, to assert that a certain low-access level you can't get the data, around?

      context 'when user is a guest' do
        let(:current_user) { nil }
    
        it_behaves_like 'when request fails'
      end
Edited by 🤖 GitLab Bot 🤖