From 8650e6c236428e0761aefae9d2adade13dae0a2b Mon Sep 17 00:00:00 2001
From: Rimian Perkins <hello@rimian.com.au>
Date: Thu, 24 Oct 2019 11:52:31 +1100
Subject: [PATCH] user cannot be added to admins

---
 spec/requests/subscriptions_controller_spec.rb | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/spec/requests/subscriptions_controller_spec.rb b/spec/requests/subscriptions_controller_spec.rb
index b885cc8..24e9aeb 100644
--- a/spec/requests/subscriptions_controller_spec.rb
+++ b/spec/requests/subscriptions_controller_spec.rb
@@ -26,12 +26,21 @@ module DiscoursePatrons
         let(:group_name) { 'group-123' }
         let(:group) { Fabricate(:group, name: group_name) }
 
+        context "unauthorized group" do
+          it "does not add the user to the admins group" do
+            ::Stripe::Plan.expects(:retrieve).returns(metadata: { group_name: 'admins' })
+            ::Stripe::Subscription.expects(:create).returns(status: 'active')
+            post "/patrons/subscriptions.json", params: { plan: 'plan_1234', customer: 'cus_1234' }
+            expect(user.admin).to eq false
+          end
+        end
+
         context "plan has group in metadata" do
           before do
             ::Stripe::Plan.expects(:retrieve).returns(metadata: { group_name: group_name })
           end
 
-          it "does not add the user to the group" do
+          it "does not add the user to the group when subscription fails" do
             ::Stripe::Subscription.expects(:create).returns(status: 'failed')
 
             expect {