diff --git a/test/src/test/groovy/hudson/cli/CLIActionTest.groovy b/test/src/test/groovy/hudson/cli/CLIActionTest.groovy index e22d79aec215d32711554c991eea2e0eafecf070..fce2f9fe629e37cc63bc20c7f9887e7835573fc8 100644 --- a/test/src/test/groovy/hudson/cli/CLIActionTest.groovy +++ b/test/src/test/groovy/hudson/cli/CLIActionTest.groovy @@ -37,6 +37,7 @@ class CLIActionTest { } } + //TODO: Integrate the tests into existing ones in CLIActionTest2 @Test @PresetData(DataSet.NO_ANONYMOUS_READACCESS) public void serveCliActionToAnonymousUserWithoutPermissions() throws Exception { diff --git a/test/src/test/java/hudson/cli/CLIActionTest2.java b/test/src/test/java/hudson/cli/CLIActionTest2.java index debe5b4ce7e5135b8d1308557ac8f0a7bf4d6a58..14ac8dfe92125740c091c53eb8456b0868b91947 100644 --- a/test/src/test/java/hudson/cli/CLIActionTest2.java +++ b/test/src/test/java/hudson/cli/CLIActionTest2.java @@ -36,6 +36,7 @@ import org.jvnet.hudson.test.recipes.PresetData; import org.jvnet.hudson.test.recipes.PresetData.DataSet; import static org.junit.Assert.*; +import org.jvnet.hudson.test.Issue; /** * Tests for {@link CLIAction}. @@ -49,10 +50,12 @@ public class CLIActionTest2 { @Test @PresetData(DataSet.NO_ANONYMOUS_READACCESS) + @Issue("SECURITY-192") public void serveCliActionToAnonymousUser() throws Exception { JenkinsRule.WebClient wc = j.createWebClient(); - // The behavior changed due to SECURITY-192. index page is no longer accessible to anonymous + // The behavior changed due to SECURITY-192. index page is no longer accessible to anonymous, + // so we check the access by emulating the CLI connection post request WebRequestSettings settings = new WebRequestSettings(new URL(j.getURL(), "cli")); settings.setHttpMethod(HttpMethod.POST); settings.setAdditionalHeader("Session", UUID.randomUUID().toString());