Add spec that checks unauthorized user behavior

1 files changed, 8 insertions, 0 deletions

diff --git a/spec/controllers/projects/artifacts_controller_spec.rb b/spec/controllers/projects/artifacts_controller_spec.rb
index f1886232380..e813ce3906c 100644
--- a/spec/controllers/projects/artifacts_controller_spec.rb
+++ b/spec/controllers/projects/artifacts_controller_spec.rb
@@ -81,6 +81,14 @@ describe Projects::ArtifactsController do
         expect(flash[:notice]).to eq('Artifact could not be deleted.')
       end
     end
+
+    context 'when user is not authorized' do
+      let(:user) { create(:user) }
+
+      it 'does not delete the artifact' do
+        expect { subject }.not_to change { Ci::JobArtifact.count }
+      end
+    end
   end
 
   describe 'GET download' do