public void Cannot_update_game_without_permissions() { /*** Arrange ***/ var gameDto = CreateGameDto(); var userWithoutPermission = CreateUserWithPermissions(Core.Security.Common.Modules.GameManager, new string[0]); var userWithCreatePermission = CreateUserWithPermissions(Core.Security.Common.Modules.GameManager, new[] { Permissions.Add }); UserService.SignInUser(userWithCreatePermission); _commands.CreateGame(gameDto, userWithCreatePermission.Username); Assert.AreEqual(2, _queries.GetGameEndpoints().Count()); var game = _queries.GetGameEndpoints().First(); /*** Act ***/ UserService.SignInUser(userWithoutPermission); game.Name = "Game updated"; // Check that method UpdateGame throws InsufficientPermissionsException Assert.Throws <InsufficientPermissionsException>( () => _commands.UpdateGame(game, userWithoutPermission.Username)); }