signed_get "/api/0.6/gpx/2", :oauth => { :token => token }
assert_response :forbidden
+ token.user.suspend!
+ signed_get "/api/0.6/user/preferences", :oauth => { :token => token }
+ assert_response :forbidden
+
+ token.user.hide!
+ signed_get "/api/0.6/user/preferences", :oauth => { :token => token }
+ assert_response :forbidden
+
+ token.user.unhide!
+ signed_get "/api/0.6/user/preferences", :oauth => { :token => token }
+ assert_response :success
+
session_for(token.user)
post "/oauth/revoke", :params => { :token => token.token }
signed_get "/api/0.6/user/details", :oauth => { :token => token }
assert_response :forbidden
+ token.user.suspend!
+ signed_get "/api/0.6/gpx/#{trace.id}", :oauth => { :token => token }
+ assert_response :forbidden
+
+ token.user.hide!
+ signed_get "/api/0.6/gpx/#{trace.id}", :oauth => { :token => token }
+ assert_response :forbidden
+
+ token.user.unhide!
+ signed_get "/api/0.6/gpx/#{trace.id}", :oauth => { :token => token }
+ assert_response :success
+
session_for(token.user)
post "/oauth/revoke", :params => { :token => token.token }
signed_get "/api/0.6/gpx/#{trace.id}", :oauth => { :token => token }
assert_response :forbidden
+ token.user.suspend!
+ signed_get "/api/0.6/user/preferences", :oauth => { :token => token }
+ assert_response :forbidden
+
+ token.user.hide!
+ signed_get "/api/0.6/user/preferences", :oauth => { :token => token }
+ assert_response :forbidden
+
+ token.user.unhide!
+ signed_get "/api/0.6/user/preferences", :oauth => { :token => token }
+ assert_response :success
+
session_for(token.user)
post "/oauth/revoke", :params => { :token => token.token }
signed_get "/api/0.6/user/details", :oauth => { :token => token }
assert_response :forbidden
+ token.user.suspend!
+ signed_get "/api/0.6/gpx/#{trace.id}", :oauth => { :token => token }
+ assert_response :forbidden
+
+ token.user.hide!
+ signed_get "/api/0.6/gpx/#{trace.id}", :oauth => { :token => token }
+ assert_response :forbidden
+
+ token.user.unhide!
+ signed_get "/api/0.6/gpx/#{trace.id}", :oauth => { :token => token }
+ assert_response :success
+
session_for(token.user)
post "/oauth/revoke", :params => { :token => token.token }