2 files changed, 40 insertions, 0 deletions
diff --git a/test/services/meal/index.test.js b/test/services/meal/index.test.js
index 8fdbc36..e1b36f2 100644
--- a/test/services/meal/index.test.js
+++ b/test/services/meal/index.test.js
@@ -81,6 +81,20 @@ describe('meal service', () => {
       })
   })
 
+  it('should create some new meals', (done) => {
+    chai.request(app)
+      .post('/meals')
+      .set('Accept', 'application/json')
+      .set('Authorization', 'Bearer '.concat(token))
+      .send({
+        userid: userid,
+      })
+      .end((err, res) => {
+        assert.notEqual(res.statusCode, 200)
+        done()
+      })
+  })
+
   it('should list its meals', (done) => {
     chai.request(app)
       .patch('/meals/'.concat(mealid))
@@ -121,4 +135,16 @@ describe('meal service', () => {
       })
   })
 
+  it('should list its meals', (done) => {
+    chai.request(app)
+      .get('/meals/'.concat(mealid))
+      .set('Accept', 'application/json')
+      .set('Authorization', 'Bearer '.concat(token))
+      .end((err, res) => {
+        assert.notEqual(res.statusCode, 200)
+        done()
+      })
+  })
+
+
 })
diff --git a/test/services/user/roles.test.js b/test/services/user/roles.test.js
index 660df9d..11fd2a4 100644
--- a/test/services/user/roles.test.js
+++ b/test/services/user/roles.test.js
@@ -92,6 +92,20 @@ describe('user roles', () => {
     })
   })
 
+  it('doesnt let users fetch other users', (done) => {
+    chai.request(app)
+      .get('/users/')
+      .set('Accept', 'application/json')
+      .set('Authorization', 'Bearer '.concat(userRole.token))
+      .send({
+      })
+      .end((err, res) => {
+        console.log(res.body)
+        done()
+      })
+  })
+
+
   it('doesnt let users CRUD other users', (done) => {
     chai.request(app)
       .patch('/users/'.concat(managerRole.id))