diff options
author | Markus Koller <markus-koller@gmx.ch> | 2016-11-29 22:25:41 +0300 |
---|---|---|
committer | Markus Koller <markus-koller@gmx.ch> | 2016-12-21 18:36:53 +0300 |
commit | d05dd81b99b897bcf41bfa4055d1f42bb9669af9 (patch) | |
tree | 3f75313f3037d8ef9378e5ba71aa57c6d3ce3912 /spec/requests/api/projects_spec.rb | |
parent | 845e2d3667ed697fea49123c9251226b1f7126ac (diff) |
Don't expose all namespace fields in API
Diffstat (limited to 'spec/requests/api/projects_spec.rb')
-rw-r--r-- | spec/requests/api/projects_spec.rb | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/spec/requests/api/projects_spec.rb b/spec/requests/api/projects_spec.rb index 8304c408064..a626b41845f 100644 --- a/spec/requests/api/projects_spec.rb +++ b/spec/requests/api/projects_spec.rb @@ -630,6 +630,18 @@ describe API::Projects, api: true do expect(json_response['name']).to eq(project.name) end + it 'exposes namespace fields' do + get api("/projects/#{project.id}", user) + + expect(response).to have_http_status(200) + expect(json_response['namespace']).to eq({ + 'id' => user.namespace.id, + 'name' => user.namespace.name, + 'path' => user.namespace.path, + 'kind' => user.namespace.kind, + }) + end + describe 'permissions' do context 'all projects' do before { project.team << [user, :master] } |