summaryrefslogtreecommitdiffstats
path: root/test
diff options
context:
space:
mode:
authorJean-Philippe Lang <jp_lang@yahoo.fr>2009-10-29 18:09:40 +0000
committerJean-Philippe Lang <jp_lang@yahoo.fr>2009-10-29 18:09:40 +0000
commitac56d1d5e54334624cfdf584b1b854c26d2dc00e (patch)
treed68714b8276990230d4accff12cab402c650c142 /test
parent72d208cb35820676aa4fe065097516b0fa22bcc3 (diff)
downloadredmine-ac56d1d5e54334624cfdf584b1b854c26d2dc00e.tar.gz
redmine-ac56d1d5e54334624cfdf584b1b854c26d2dc00e.zip
Do not show user profile if no visible project or activity (#4129, #3720).
git-svn-id: svn+ssh://rubyforge.org/var/svn/redmine/trunk@2986 e93f8b46-1217-0410-a6f0-8f06a7374b81
Diffstat (limited to 'test')
-rw-r--r--test/functional/account_controller_test.rb5
1 files changed, 5 insertions, 0 deletions
diff --git a/test/functional/account_controller_test.rb b/test/functional/account_controller_test.rb
index e38ccb543..67c4d8b6c 100644
--- a/test/functional/account_controller_test.rb
+++ b/test/functional/account_controller_test.rb
@@ -56,6 +56,11 @@ class AccountControllerTest < ActionController::TestCase
assert_nil assigns(:user)
end
+ def test_show_should_not_reveal_users_with_no_visible_activity_or_project
+ get :show, :id => 9
+ assert_response 404
+ end
+
def test_login_should_redirect_to_back_url_param
# request.uri is "test.host" in test environment
post :login, :username => 'jsmith', :password => 'jsmith', :back_url => 'http%3A%2F%2Ftest.host%2Fissues%2Fshow%2F1'