diff --git a/spec/models/user/attack_vectors_spec.rb b/spec/models/user/attack_vectors_spec.rb index db5c613a214a27f0e21426464e3f0cfaf9430f4b..f4ba9a1040f9e8a56da924c83237423c74750406 100644 --- a/spec/models/user/attack_vectors_spec.rb +++ b/spec/models/user/attack_vectors_spec.rb @@ -79,5 +79,21 @@ describe "attack vectors" do user2.reload user2.profile.first_name.should == first_name end + + it 'can send retractions on post you do not own' do + pending + original_message = user2.post :status_message, :message => 'store this!', :to => aspect2.id + user.receive_salmon(user2.salmon(original_message).xml_for(user.person)) + user.raw_visible_posts.count.should be 1 + + ret = Retraction.new + ret.post_id = original_message.id + ret.person_id = user3.person.id + ret.type = original_message.class.to_s + + user.receive_salmon(user3.salmon(ret).xml_for(user.person)) + StatusMessage.count.should be 1 + user.reload.raw_visible_posts.count.should be 1 + end end end