Fix spec. Revert update check.

lib/api/jobs.rb

@@ -136,6 +136,7 @@ module API
         authorize_update_builds!
 
         build = find_build!(params[:job_id])
+        authorize!(:update_build, build)
         authorize!(:erase_build, build)
         return forbidden!('Job is not erasable!') unless build.erasable?
 

lib/api/v3/builds.rb

@@ -169,6 +169,7 @@ module API
           authorize_update_builds!
 
           build = get_build!(params[:build_id])
+          authorize!(:update_build, build)
           authorize!(:erase_build, build)
           return forbidden!('Build is not erasable!') unless build.erasable?
 

spec/models/ci/build_spec.rb

@@ -270,6 +270,23 @@ describe Ci::Build do
     end
   end
 
+  describe '#owned_by?' do
+    subject { build.owned_by?(user) }
+
+    context 'when user is owner' do
+      let(:build) { create(:ci_build, pipeline: pipeline, user: user) }
+
+      it { is_expected.to be_truthy }
+    end
+
+    context 'when user is not owner' do
+      let(:another_user) { create(:user) }
+      let(:build) { create(:ci_build, pipeline: pipeline, user: another_user) }
+
+      it { is_expected.to be_falsy }
+    end
+  end
+
   describe '#detailed_status' do
     it 'returns a detailed status' do
       expect(build.detailed_status(user))

spec/policies/ci/build_policy_spec.rb

@@ -151,10 +151,9 @@ describe Ci::BuildPolicy do
       end
     end
 
-    # TODO: Finish spec
     describe 'rules for erase build' do
       let(:project) { create(:project, :repository) }
-      let(:another_user) { create(:user) }
+      let(:build) { create(:ci_build, pipeline: pipeline, user: owner) }
 
       context 'when developer created a build' do
         before do
@@ -162,13 +161,13 @@ describe Ci::BuildPolicy do
         end
 
         context 'when the build was created by the user' do
-          let(:build) { create(:ci_build, user: user) }
+          let(:owner) { user }
 
           it { expect(policy).to be_allowed :erase_build }
         end
 
         context 'when the build was created by others' do
-          let(:build) { create(:ci_build, user: another_user) }
+          let(:owner) { create(:user) }
 
           it { expect(policy).to be_disallowed :erase_build }
         end
@@ -180,13 +179,13 @@ describe Ci::BuildPolicy do
         end
 
         context 'when the build was created by the user' do
-          let(:build) { create(:ci_build, user: user) }
+          let(:owner) { user }
 
           it { expect(policy).to be_allowed :erase_build }
         end
 
         context 'when the build was created by others' do
-          let(:build) { create(:ci_build, user: another_user) }
+          let(:owner) { create(:user) }
 
           it { expect(policy).to be_allowed :erase_build }
         end