Proves that a user with read-only access to a project can delete its background image. The test expects a 403 Forbidden but the operation proceeds because RemoveProjectBackground only checks CanRead. Adds fixture entry giving user 15 read-only access to project 35 (which has a background_file_id). Ref: GHSA-564f-wx8x-878h |
||
|---|---|---|
| .. | ||
| fixtures | ||
| db.go | ||
| db_path_test.go | ||
| dump.go | ||
| helpers.go | ||
| helpers_test.go | ||
| test.go | ||
| test_fixtures.go | ||