Environment: Windows 7, Google Chrome v.103.0.5060.134, Postman for Web v. 9.28.1-220808-1444.
Reproducible: always.
Description
The user as a member of cooperation A (e.g. Затишок) can see and modify data that relates to cooperation B (e.g. Крила ночііі).
Preconditions
Choose the user as a member of cooperation A (e.g. Затишок).
Steps to reproduce
- Go to Postman.
- Paste some URL that related to cooperation B (e.g. (https://home-project-academy.herokuapp.com/api/0/cooperations/1/houses), (https://home-project-academy.herokuapp.com/api/0/cooperations/1/houses).
- Choose the method (e.g. GET, POST).
- Insert to the Authorization proper Bearer Token.
- If it's GET method go to the next step, if it's a POST method write json to the Body:
{
"quantity_flat": 90,
"house_area": 450,
"adjoining_area": 300,
"address": {
"region": "Dnipropetrovsk region",
"city": "Dnipro",
"district": "Zavodskoy",
"street": "Kirova",
"house_block": "7/B",
"house_number": "10",
"zip_code": "52988"
}
}
- Click on the button Send.
Actual result
Getting HTTP 2xx status code.


Expected result
Should be 403 Forbidden error (You do not have permission to perform this action.)
User story and test case links
"Task #477"
Labels to be added
"Bug", Priority ("pri: critical"), Severity ("severity: major"), Type ("Functional"), "API" (for back-end bugs).
Environment: Windows 7, Google Chrome v.103.0.5060.134, Postman for Web v. 9.28.1-220808-1444.
Reproducible: always.
Description
The user as a member of cooperation A (e.g. Затишок) can see and modify data that relates to cooperation B (e.g. Крила ночііі).
Preconditions
Choose the user as a member of cooperation A (e.g. Затишок).
Steps to reproduce
Actual result


Getting HTTP 2xx status code.
Expected result
Should be 403 Forbidden error (You do not have permission to perform this action.)
User story and test case links
"Task #477"
Labels to be added
"Bug", Priority ("pri: critical"), Severity ("severity: major"), Type ("Functional"), "API" (for back-end bugs).