diff --git a/spec/policies/exercise_policy_spec.rb b/spec/policies/exercise_policy_spec.rb index c9762f9e..dcb835c6 100644 --- a/spec/policies/exercise_policy_spec.rb +++ b/spec/policies/exercise_policy_spec.rb @@ -30,7 +30,7 @@ describe ExercisePolicy do end end - [:clone?, :destroy?, :edit?, :show?, :statistics?, :update?].each do |action| + [:clone?, :destroy?, :edit?, :statistics?, :update?].each do |action| permissions(action) do it 'grants access to admins' do expect(subject).to permit(FactoryGirl.build(:admin), exercise) @@ -52,6 +52,14 @@ describe ExercisePolicy do end end + [:show?].each do |action| + permissions(action) do + it 'not grants access to external users' do + expect(subject).not_to permit(FactoryGirl.build(:external_user), exercise) + end + end + end + [:implement?, :submit?].each do |action| permissions(action) do it 'grants access to anyone' do