From d77ec8a5caff0471f6515a6d95e60405d5e2f22e Mon Sep 17 00:00:00 2001
From: Pea Tyczynska <CrystalPea@users.noreply.github.com>
Date: Tue, 20 Apr 2021 17:24:26 +0100
Subject: [PATCH] Test that user without permission cannot reject broadcast

---
 tests/app/main/views/test_broadcast.py | 23 +++++++++++++++++++++++
 1 file changed, 23 insertions(+)

diff --git a/tests/app/main/views/test_broadcast.py b/tests/app/main/views/test_broadcast.py
index c2d8b6825..cdddbe1fc 100644
--- a/tests/app/main/views/test_broadcast.py
+++ b/tests/app/main/views/test_broadcast.py
@@ -186,6 +186,29 @@ def test_user_cannot_accept_broadcast_without_permission(
     )
 
 
+@pytest.mark.parametrize('user_is_platform_admin', [True, False])
+def test_user_cannot_reject_broadcast_without_permission(
+    mocker,
+    client_request,
+    service_one,
+    active_user_view_permissions,
+    platform_admin_user_no_service_permissions,
+    user_is_platform_admin
+):
+    service_one['permissions'] += ['broadcast']
+    if user_is_platform_admin:
+        client_request.login(platform_admin_user_no_service_permissions)
+    else:
+        client_request.login(active_user_view_permissions)
+
+    client_request.get(
+        '.reject_broadcast_message',
+        service_id=SERVICE_ONE_ID,
+        broadcast_message_id=sample_uuid,
+        _expected_status=403,
+    )
+
+
 def test_cancel_broadcast_page_403_for_user_without_permission(
     mocker,
     client_request,