# frozen_string_literal: true require 'spec_helper' RSpec.describe Projects::Security::ConfigurationController do let(:project) { create(:project, :public) } let(:user) { create(:user) } before do allow(controller).to receive(:ensure_security_and_compliance_enabled!) sign_in(user) end describe 'GET show' do context 'when user has guest access' do before do project.add_guest(user) end it 'denies access' do get :show, params: { namespace_id: project.namespace, project_id: project } expect(response).to have_gitlab_http_status(:forbidden) end end context 'when user has developer access' do before do project.add_developer(user) end it 'grants access' do get :show, params: { namespace_id: project.namespace, project_id: project } expect(response).to have_gitlab_http_status(:ok) expect(response).to render_template(:show) end end end end