mirror of
https://github.com/go-vikunja/vikunja.git
synced 2026-05-03 18:37:18 +00:00
f60f3af70b
Proves that a user with read-only access to a project can delete its background image. The test expects a 403 Forbidden but the operation proceeds because RemoveProjectBackground only checks CanRead. Adds fixture entry giving user 15 read-only access to project 35 (which has a background_file_id). Ref: GHSA-564f-wx8x-878h
121 lines
2.3 KiB
YAML
121 lines
2.3 KiB
YAML
- id: 1
|
|
user_id: 1
|
|
project_id: 3
|
|
permission: 0
|
|
updated: 2018-12-02 15:13:12
|
|
created: 2018-12-01 15:13:12
|
|
- id: 2
|
|
user_id: 2
|
|
project_id: 3
|
|
permission: 0
|
|
updated: 2018-12-02 15:13:12
|
|
created: 2018-12-01 15:13:12
|
|
- id: 3
|
|
user_id: 1
|
|
project_id: 9
|
|
permission: 0
|
|
updated: 2018-12-02 15:13:12
|
|
created: 2018-12-01 15:13:12
|
|
- id: 4
|
|
user_id: 1
|
|
project_id: 10
|
|
permission: 1
|
|
updated: 2018-12-02 15:13:12
|
|
created: 2018-12-01 15:13:12
|
|
- id: 5
|
|
user_id: 1
|
|
project_id: 11
|
|
permission: 2
|
|
updated: 2018-12-02 15:13:12
|
|
created: 2018-12-01 15:13:12
|
|
- id: 6
|
|
user_id: 4
|
|
project_id: 19
|
|
permission: 0
|
|
updated: 2018-12-02 15:13:12
|
|
created: 2018-12-01 15:13:12
|
|
- id: 7
|
|
user_id: 5
|
|
project_id: 19
|
|
permission: 1
|
|
updated: 2018-12-02 15:13:12
|
|
created: 2018-12-01 15:13:12
|
|
- id: 8
|
|
user_id: 6
|
|
project_id: 19
|
|
permission: 2
|
|
updated: 2018-12-02 15:13:12
|
|
created: 2018-12-01 15:13:12
|
|
- id: 9
|
|
user_id: 1
|
|
project_id: 27
|
|
permission: 0
|
|
updated: 2018-12-02 15:13:12
|
|
created: 2018-12-01 15:13:12
|
|
- id: 10
|
|
user_id: 11
|
|
project_id: 29
|
|
permission: 0
|
|
updated: 2018-12-02 15:13:12
|
|
created: 2018-12-01 15:13:12
|
|
- id: 11
|
|
user_id: 12
|
|
project_id: 29
|
|
permission: 1
|
|
updated: 2018-12-02 15:13:12
|
|
created: 2018-12-01 15:13:12
|
|
- id: 12
|
|
user_id: 13
|
|
project_id: 29
|
|
permission: 2
|
|
updated: 2018-12-02 15:13:12
|
|
created: 2018-12-01 15:13:12
|
|
- id: 13
|
|
user_id: 1
|
|
project_id: 30
|
|
permission: 1
|
|
updated: 2018-12-02 15:13:12
|
|
created: 2018-12-01 15:13:12
|
|
- id: 14
|
|
user_id: 1
|
|
project_id: 31
|
|
permission: 2
|
|
updated: 2018-12-02 15:13:12
|
|
created: 2018-12-01 15:13:12
|
|
- id: 15
|
|
user_id: 1
|
|
project_id: 28
|
|
permission: 1
|
|
updated: 2018-12-02 15:13:12
|
|
created: 2018-12-01 15:13:12
|
|
- id: 16
|
|
user_id: 1
|
|
project_id: 29
|
|
permission: 2
|
|
updated: 2018-12-02 15:13:12
|
|
created: 2018-12-01 15:13:12
|
|
- id: 17
|
|
user_id: 15
|
|
project_id: 26
|
|
permission: 0
|
|
updated: 2018-12-02 15:13:12
|
|
created: 2018-12-01 15:13:12
|
|
- id: 18
|
|
user_id: 15
|
|
project_id: 36
|
|
permission: 0
|
|
updated: 2018-12-02 15:13:12
|
|
created: 2018-12-01 15:13:12
|
|
- id: 19
|
|
user_id: 15
|
|
project_id: 38
|
|
permission: 0
|
|
updated: 2018-12-02 15:13:12
|
|
created: 2018-12-01 15:13:12
|
|
- id: 20
|
|
user_id: 15
|
|
project_id: 35
|
|
permission: 0
|
|
updated: 2018-12-02 15:13:12
|
|
created: 2018-12-01 15:13:12
|