public GetContactHandlerTests()
{
authorization = AuthorizationBuilder.CreateUserAllowedToAccessOrganisation();
dataAccess = A.Fake <IGenericDataAccess>();
mapper = A.Fake <IMap <Contact, ContactData> >();
handler = new GetContactHandler(authorization, dataAccess, mapper);
}
public async Task HandleAsync_GivenNotOrganisationUser_ThrowsSecurityException()
{
var localAuthorization = AuthorizationBuilder.CreateUserDeniedFromAccessingOrganisation();
var localHandler = new GetContactHandler(localAuthorization, dataAccess, mapper);
Func <Task <ContactData> > action = async() => await localHandler.HandleAsync(A.Dummy <GetContact>());
await action.Should().ThrowAsync <SecurityException>();
}
