public GetReturnHandlerTests()
{
populatedReturn = A.Fake <IGetPopulatedReturn>();
handler = new GetReturnHandler(new AuthorizationBuilder()
.AllowExternalAreaAccess()
.AllowOrganisationAccess().Build(),
populatedReturn);
}
public async Task HandleAsync_NoExternalAccess_ThrowsSecurityException()
{
var authorization = new AuthorizationBuilder().DenyExternalAreaAccess().Build();
handler = new GetReturnHandler(authorization,
A.Dummy <IGetPopulatedReturn>());
Func <Task> action = async() => await handler.HandleAsync(A.Dummy <GetReturn>());
await action.Should().ThrowAsync <SecurityException>();
}
