Upload updates

2026-09-21 09:01:01 -05:00
parent 98025e9e6d
commit 474403ffe2
18 changed files with 2539 additions and 796 deletions
@@ -345,7 +345,13 @@ class PrivacyTests(SecurityTestCase):
        )
        self.assertEqual(self.guest.get(f"/api/uploads/{temp.id}/file/").status_code, 401)
        self.assertNotIn(
-            str(temp.id), self.client_for("sec-uploader").get("/api/uploads/").content.decode()
+            str(temp.id),
+            self.client_for("sec-uploader").get("/api/uploads/").content.decode(),
+        )
+        # The board is per-user: staff only see their own staged uploads.
+        self.assertNotIn(
+            str(temp.id),
+            self.client_for("sec-staff").get("/api/uploads/").content.decode(),
        )

    def test_similarity_checks_are_private(self):