gabriel / musehub public
test minor feat/security-forbidden-tests #1 / 1
gabriel · 71 days ago · Apr 10, 2026 · Diff

test: add forbidden (403) regression tests for proposal merge and comment endpoints

- test_merge_proposal_forbidden_for_non_owner: POST /proposals/{id}/merge as non-owner of a private repo returns 403 (covers _guard_repo_owner in merge_proposal route) - test_create_proposal_comment_forbidden_for_non_owner: POST /proposals/{id}/comments as non-owner of a private repo returns 403 (covers _guard_write_access in create_proposal_comment route)

sha256:a4fa1ae5239b2857334e47bae25dc38150e52094467b8fca8543b8093fd2b650 sha
sha256:5400c96de003de73b11154bc2d666428075e314a06b520882fd6e1b9caa84e8c snapshot
← Older Oldest on feat/security-forbidden-tests
All commits
Newer → Latest on feat/security-forbidden-tests

0 comments

No comments yet. Be the first to start the discussion.

To add a comment, use the Muse CLI: muse hub commit comment sha256:a4fa1ae5239b2857334e47bae25dc38150e52094467b8fca8543b8093fd2b650 --body "your comment"