admin delete copy, anon form assertion

This commit is contained in:
2026-10-26 03:03:18 +01:00
parent 9fd1eadc95
commit 3861d99e1f
2 changed files with 3 additions and 1 deletions

View File

@@ -285,6 +285,8 @@ async fn delete_forms_render_only_where_they_apply() {
// A non-admin viewing someone else, and anonymous viewers, see no form.
let bob_page = format!("/users/{}", bob.user_id);
let (_, _, body) = send(&router, get(&bob_page, None)).await;
assert!(!body.contains(&user_delete(&bob.user_id)), "anonymous");
let (_, _, body) = send(&router, get(&bob_page, Some(&alice.cookie))).await;
assert!(!body.contains(&user_delete(&bob.user_id)), "non-admin");