Topic: Given I try to edit some contect that i dont have access

I am trying to write a test to make sure that some one cant change some-else profile info bu just changing the id in the address bar.

When /^I force the profile id to one that is not mine$/ do
   ??????
   pending # express the regexp above with the code you wish you had
end

Re: Given I try to edit some contect that i dont have access

You shouldn't be sending sensitive user information like profile id through the URL.

Re: Given I try to edit some contect that i dont have access

Thanks i will keep that in mind