Check for access in /repositories/:id (#2227)

* Check for access in /repositories/:id * Integration test
2017-07-29 18:13:33 -07:00
parent a9cc538ab5
commit 49df677c47
2 changed files with 12 additions and 1 deletions
--- a/integrations/api_repo_test.go
+++ b/integrations/api_repo_test.go
@ -84,3 +84,11 @@ func TestAPIOrgRepos(t *testing.T) {
 		assert.False(t, repo.Private)
 	}
 }
+
+func TestAPIGetRepoByIDUnauthorized(t *testing.T) {
+	prepareTestEnv(t)
+	user := models.AssertExistsAndLoadBean(t, &models.User{ID: 4}).(*models.User)
+	sess := loginUser(t, user.Name)
+	req := NewRequestf(t, "GET", "/api/v1/repositories/2")
+	sess.MakeRequest(t, req, http.StatusNotFound)
+}