diff --git a/ee/api/rbac/test/test_access_control.py b/ee/api/rbac/test/test_access_control.py index 7195337818688..cd5455533d802 100644 --- a/ee/api/rbac/test/test_access_control.py +++ b/ee/api/rbac/test/test_access_control.py @@ -223,3 +223,8 @@ def test_rejects_edit_access_with_resource_control(self): assert self._get_notebook(self.other_user_notebook.short_id).status_code == status.HTTP_200_OK assert self._patch_notebook(id=self.other_user_notebook.short_id).status_code == status.HTTP_403_FORBIDDEN assert self._post_notebook().status_code == status.HTTP_201_CREATED + + +# TODO: Add tests to check only project admins can edit the project +# TODO: Add tests to check that a dashboard can't be edited if the user doesn't have access +# TODO: Add tests for the role based access side of things