Skip to content

[stable32] test: Add integration test to confirm a user can not add themselves t… #59603

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
nickvergessen merged 1 commit into from
Apr 13, 2026
Merged

[stable32] test: Add integration test to confirm a user can not add themselves t… #59603

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
23 changes: 19 additions & 4 deletions build/integration/features/provisioning-v1.feature
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -484,11 +484,26 @@ Feature: provisioning
Given As an "admin"
And user "brand-new-user" exists
And group "new-group" exists
And group "other-group" exists
When sending "POST" to "/cloud/users/brand-new-user/subadmins" with
| groupid | new-group |
Then the OCS status code should be "100"
And the HTTP status code should be "200"

# Ensure self promotion is not possible
Given As an "brand-new-user"
When sending "POST" to "/cloud/users/brand-new-user/groups" with
| groupid | admin |
Then the OCS status code should be "104"
And the HTTP status code should be "200"

# Ensure self adding to other groups is not possible
Given As an "brand-new-user"
When sending "POST" to "/cloud/users/brand-new-user/groups" with
| groupid | other-group |
Then the OCS status code should be "104"
And the HTTP status code should be "200"

Scenario: get users using a subadmin
Given As an "admin"
And user "brand-new-user" exists
Expand Down Expand Up @@ -790,7 +805,7 @@ Feature: provisioning
Then the HTTP status code should be "200"
And user "subadmin" is disabled

Scenario: Admin user cannot disable himself
Scenario: Admin user cannot disable themself
Given As an "admin"
And user "another-admin" exists
And user "another-admin" belongs to group "admin"
Expand All @@ -801,7 +816,7 @@ Feature: provisioning
And As an "admin"
And user "another-admin" is enabled

Scenario:Admin user cannot enable himself
Scenario: Admin user cannot enable themself
Given As an "admin"
And user "another-admin" exists
And user "another-admin" belongs to group "admin"
Expand Down Expand Up @@ -834,7 +849,7 @@ Feature: provisioning
And As an "admin"
And user "user2" is disabled

Scenario: Subadmin should not be able to disable himself
Scenario: Subadmin should not be able to disable themself
Given As an "admin"
And user "subadmin" exists
And group "new-group" exists
Expand All @@ -847,7 +862,7 @@ Feature: provisioning
And As an "admin"
And user "subadmin" is enabled

Scenario: Subadmin should not be able to enable himself
Scenario: Subadmin should not be able to enable themself
Given As an "admin"
And user "subadmin" exists
And group "new-group" exists
Expand Down
Loading