// 4. user is an org editor AND has no permissions for the dashboard
Convey("When user is org admin",func(){
loggedInUserScenarioWithRole("When calling GET on","GET","/api/dashboards/id/1/acl","/api/dashboards/id/:dashboardsId/acl",m.ROLE_ADMIN,func(sc*scenarioContext){
loggedInUserScenarioWithRole("When calling GET on","GET","/api/dashboards/id/1/permissions","/api/dashboards/id/:dashboardsId/permissions",m.ROLE_ADMIN,func(sc*scenarioContext){
loggedInUserScenarioWithRole("When calling GET on","GET","/api/dashboards/id/2/acl","/api/dashboards/id/:dashboardId/acl",m.ROLE_ADMIN,func(sc*scenarioContext){
loggedInUserScenarioWithRole("When calling GET on","GET","/api/dashboards/id/2/permissions","/api/dashboards/id/:dashboardId/permissions",m.ROLE_ADMIN,func(sc*scenarioContext){
postAclScenario("When calling POST on","/api/dashboards/id/1/acl","/api/dashboards/id/:dashboardId/acl",m.ROLE_ADMIN,cmd,func(sc*scenarioContext){
postAclScenario("When calling POST on","/api/dashboards/id/1/permissions","/api/dashboards/id/:dashboardId/permissions",m.ROLE_ADMIN,cmd,func(sc*scenarioContext){
Convey("When user is org editor and has admin permission in the ACL",func(){
loggedInUserScenarioWithRole("When calling GET on","GET","/api/dashboards/id/1/acl","/api/dashboards/id/:dashboardId/acl",m.ROLE_EDITOR,func(sc*scenarioContext){
loggedInUserScenarioWithRole("When calling GET on","GET","/api/dashboards/id/1/permissions","/api/dashboards/id/:dashboardId/permissions",m.ROLE_EDITOR,func(sc*scenarioContext){
postAclScenario("When calling POST on","/api/dashboards/id/1/acl","/api/dashboards/id/:dashboardId/acl",m.ROLE_EDITOR,cmd,func(sc*scenarioContext){
postAclScenario("When calling POST on","/api/dashboards/id/1/permissions","/api/dashboards/id/:dashboardId/permissions",m.ROLE_EDITOR,cmd,func(sc*scenarioContext){
postAclScenario("When calling POST on","/api/dashboards/id/1/acl","/api/dashboards/id/:dashboardId/acl",m.ROLE_EDITOR,cmd,func(sc*scenarioContext){
postAclScenario("When calling POST on","/api/dashboards/id/1/permissions","/api/dashboards/id/:dashboardId/permissions",m.ROLE_EDITOR,cmd,func(sc*scenarioContext){
Convey("When user is org viewer and has edit permission in the ACL",func(){
loggedInUserScenarioWithRole("When calling GET on","GET","/api/dashboards/id/1/acl","/api/dashboards/id/:dashboardId/acl",m.ROLE_VIEWER,func(sc*scenarioContext){
loggedInUserScenarioWithRole("When calling GET on","GET","/api/dashboards/id/1/permissions","/api/dashboards/id/:dashboardId/permissions",m.ROLE_VIEWER,func(sc*scenarioContext){
Convey("When user is org editor and not in the ACL",func(){
loggedInUserScenarioWithRole("When calling GET on","GET","/api/dashboards/id/1/acl","/api/dashboards/id/:dashboardsId/acl",m.ROLE_EDITOR,func(sc*scenarioContext){
loggedInUserScenarioWithRole("When calling GET on","GET","/api/dashboards/id/1/permissions","/api/dashboards/id/:dashboardsId/permissions",m.ROLE_EDITOR,func(sc*scenarioContext){