[ARVADOS] updated: 1.3.0-2390-g5cffccdf3

[Git user]

Summary of changes:
 services/api/test/integration/users_test.rb | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)

       via  5cffccdf363c48752c33b675130575ccb773d1c9 (commit)
      from  6859f5de975cce5238c70d7dd628f69fc692e26a (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.


commit 5cffccdf363c48752c33b675130575ccb773d1c9
Author: Peter Amstutz <peter.amstutz at curii.com>
Date:   Tue Mar 31 17:42:03 2020 -0400

    16263: Add bypass_federation test
    
    Arvados-DCO-1.1-Signed-off-by: Peter Amstutz <peter.amstutz at curii.com>

diff --git a/services/api/test/integration/users_test.rb b/services/api/test/integration/users_test.rb
index 4be89a245..b24ddc5a5 100644
--- a/services/api/test/integration/users_test.rb
+++ b/services/api/test/integration/users_test.rb
@@ -448,5 +448,22 @@ class UsersTest < ActionDispatch::IntegrationTest
     assert_match(/Cannot activate without being invited/, json_response['errors'][0])
   end
 
+  test "bypass_federation only accepted for admins" do
+    get "/arvados/v1/users",
+      params: {
+        bypass_federation: true
+      },
+      headers: auth(:admin)
+
+    assert_response :success
+
+    get "/arvados/v1/users",
+      params: {
+        bypass_federation: true
+      },
+      headers: auth(:active)
+
+    assert_response 403
+  end
 
 end

-----------------------------------------------------------------------


hooks/post-receive
--