From a59465c9a5fa18be31f5698e07800387d0a8c4ff Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Fr=C3=A9d=C3=A9ric=20Sureau?= <frederic.sureau@gmail.com>
Date: Sat, 28 Jan 2012 01:35:04 +0100
Subject: Changed delete feature to only support POST method. Fix #21.

---
 budget/tests.py | 10 ++++++++++
 1 file changed, 10 insertions(+)

(limited to 'budget/tests.py')

diff --git a/budget/tests.py b/budget/tests.py
index a5022ce..0dcd8a1 100644
--- a/budget/tests.py
+++ b/budget/tests.py
@@ -214,6 +214,16 @@ class BudgetTestCase(TestCase):
         self.assertEqual(
                 len(models.Project.query.get("randomid").active_members), 1)
 
+    def test_member_delete_method(self):
+        self.post_project("raclette")
+        self.login("raclette")
+
+        # adds a member to this project
+        self.app.post("/raclette/members/add", data={'name': 'alexis' })
+        
+        # try to remove the member using GET method
+        response = self.app.get("/raclette/members/1/delete")
+        self.assertEqual(response.status_code, 405)
 
     def test_demo(self):
         # Test that it is possible to connect automatically by going onto /demo
-- 
cgit v1.1