WIP

spec/requests/article_controller_spec.rb

@@ -48,6 +48,15 @@
     let(:action_path) { article_delete_path(article_id: article.id, collection_id: collection.id) }
     let(:subject) { delete action_path }
 
+    context 'not authorized' do
+      it 'redirects' do
+        subject
+
+        expect(response).to have_http_status(:redirect)
+        expect(response).to redirect_to(dashboard_path)
+      end
+    end
+
     context 'success' do
       it 'redirects' do
         login_as owner
@@ -78,6 +87,15 @@
     let(:action_path) { collection_article_update_path(owner, collection, article) }
     let(:subject) { patch action_path, params: params }
 
+    context 'not authorized' do
+      it 'redirects' do
+        subject
+
+        expect(response).to have_http_status(:redirect)
+        expect(response).to redirect_to(dashboard_path)
+      end
+    end
+
     it 'redirects' do
       login_as owner
       subject
@@ -154,6 +172,15 @@
     let(:action_path) { article_article_category_path(article_id: article.id) }
     let(:subject) { post action_path, params: params }
 
+    context 'not authorized' do
+      it 'redirects' do
+        subject
+
+        expect(response).to have_http_status(:redirect)
+        expect(response).to redirect_to(dashboard_path)
+      end
+    end
+
     it 'renders status' do
       login_as owner
       subject
@@ -185,6 +212,15 @@
     let(:action_path) { article_combine_duplicate_path(article_id: to_article.id) }
     let(:subject) { post action_path, params: params }
 
+    context 'not authorized' do
+      it 'redirects' do
+        subject
+
+        expect(response).to have_http_status(:redirect)
+        expect(response).to redirect_to(dashboard_path)
+      end
+    end
+
     it 'redirects' do
       login_as owner
       subject