Franz Liedke 86d890d043 Restore beta.9 behavior of assertCan() ... In flarum/core#1854, I changed the implementation of `assertCan()` to be more aware of the user's log-in status. I came across this when unifying our API's response status code when actors are not authenticated or not authorized to do something. @luceos rightfully had to tweak this again in ea84fc4, because the behavior changed for one of the few API endpoints that checked for a permission that even guests can have. It turns out having this complex behavior in `assertCan()` is quite misleading, because the name suggests a simple permission check and nothing more. Where we actually want to differ between HTTP 401 and 403, we can do this using two method calls, and enforce it with our tests. If this turns out to be problematic or extremely common, we can revisit this and introduce a method with a different, better name in the future. This commit restores the method's behavior in the last release, so we also avoid another breaking change for extensions.		2020-02-04 22:59:02 +01:00
..
api	Restore beta.9 behavior of assertCan()	2020-02-04 22:59:02 +01:00
tmp	fixed tests on master, missing views directory and suppressing notices from tempnam when storing files in tmp	2019-06-24 13:00:36 +02:00
RetrievesAuthorizedUsers.php	Apply fixes from StyleCI	2020-02-04 21:11:08 +00:00
setup.php	Apply fixes from StyleCI	2020-02-04 21:11:08 +00:00
TestCase.php	Apply fixes from StyleCI	2020-02-04 21:11:08 +00:00