# frozen_string_literal: true

#   Copyright 2015 Australian National Botanic Gardens
#
#   This file is part of the NSL Editor.
#
#   Licensed under the Apache License, Version 2.0 (the "License");
#   you may not use this file except in compliance with the License.
#   You may obtain a copy of the License at
#
#   http://www.apache.org/licenses/LICENSE-2.0
#
#   Unless required by applicable law or agreed to in writing, software
#   distributed under the License is distributed on an "AS IS" BASIS,
#   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
#   See the License for the specific language governing permissions and
#   limitations under the License.
#
require "test_helper"

# Single controller test.
class InstancesDeleteForReaderTest < ActionController::TestCase
  tests InstancesController

  test "reader should not be able to delete instance" do
    instance = instances(:triodia_in_brassard)
    @request.headers["Accept"] = "application/javascript"
    # This calls a service (but only if authorized), so in Test,
    # no record is actually deleted, even if authorized!
    delete(:destroy,
           { id: instance.id },
           username: "fred",
           user_full_name: "Fred Jones",
           groups: [])
    assert_response :forbidden
  end
end
