Rails%203%20In%20Action

Restricting delete access
Expected to see the "Edit" link, but did not.
(RSpec::Expectations::ExpectationNotMetError)
This time, you edit the file app/views/tickets/show.html.erb. Change the Edit link
from this
to this:
With this one small change to use the authorized? helper to check for the permission
to edit tickets for the current project, the Hidden Links feature now passes when you
run bin/cucumber features/editing_tickets.feature:
13 scenarios (13 passed)
97 steps (97 passed)
Great! You’ve got one last link to protect now: the Delete Project link on the tickets
show page. Add another three scenarios to this feature, shown in the following listing.
Listing 8.13 features/deleting_tickets.feature
Scenario: Delete ticket link is shown to a user with permission
Given "user@ticketee.com" can view the "TextMate 2" project
And "user@ticketee.com" can delete tickets in the "TextMate 2" project
And I am signed in as "user@ticketee.com"
When I follow "TextMate 2"
And I follow "Shiny!"
Then I should see "Delete"
Scenario: Delete ticket link is hidden from a user without permission
Given "user@ticketee.com" can view the "TextMate 2" project
And I am signed in as "user@ticketee.com"
When I follow "TextMate 2"
And I follow "Shiny!"
Then I should not see the "Delete" link
Scenario: Delete ticket link is shown to admins
Given I am signed in as "admin@ticketee.com"
When I follow "TextMate 2"
And I follow "Shiny!"
Then I should see the "Delete" link
When you run this feature, the middle scenario fails again:
Then I should not see "Delete"
Expected to not see the "Delete" link, but did.
(RSpec::Expectations::ExpectationNotMetError)
To fix it, open or switch back to app/views/tickets/show.html.erb and wrap the Delete
Ticket link in the warm embrace of the authorized? method, just as you did with the
Edit Ticket link:
197