+ assert js["changeset"]["comments"][2]["visible"]
+
+ # one hidden comment not included because not asked for
+ comment1.update(:visible => false)
+
+ get changeset_show_path(changeset), :params => { :format => "json", :include_discussion => true }
+ assert_response :success, "cannot get closed changeset with comments"
+
+ js = ActiveSupport::JSON.decode(@response.body)
+ assert_not_nil js
+ assert_equal Settings.api_version, js["version"]
+ assert_equal Settings.generator, js["generator"]
+ assert_single_changeset_json changeset, js
+ assert_equal 2, js["changeset"]["comments"].count
+ assert_equal comment0.id, js["changeset"]["comments"][0]["id"]
+ assert js["changeset"]["comments"][0]["visible"]
+ assert_equal comment2.id, js["changeset"]["comments"][1]["id"]
+ assert js["changeset"]["comments"][1]["visible"]
+
+ # one hidden comment not included because no permissions
+ get changeset_show_path(changeset), :params => { :format => "json", :include_discussion => true, :show_hidden_comments => true }
+ assert_response :success, "cannot get closed changeset with comments"
+
+ js = ActiveSupport::JSON.decode(@response.body)
+ assert_not_nil js
+ assert_equal Settings.api_version, js["version"]
+ assert_equal Settings.generator, js["generator"]
+ assert_single_changeset_json changeset, js
+ assert_equal 2, js["changeset"]["comments"].count
+ assert_equal comment0.id, js["changeset"]["comments"][0]["id"]
+ assert js["changeset"]["comments"][0]["visible"]
+ # maybe will show an empty comment element with visible=false in the future
+ assert_equal comment2.id, js["changeset"]["comments"][1]["id"]
+ assert js["changeset"]["comments"][1]["visible"]
+
+ # one hidden comment shown to moderators
+ moderator_user = create(:moderator_user)
+ auth_header = basic_authorization_header moderator_user.email, "test"
+ get changeset_show_path(changeset), :params => { :format => "json", :include_discussion => true, :show_hidden_comments => true },
+ :headers => auth_header
+ assert_response :success, "cannot get closed changeset with comments"
+
+ js = ActiveSupport::JSON.decode(@response.body)
+ assert_not_nil js
+ assert_equal Settings.api_version, js["version"]
+ assert_equal Settings.generator, js["generator"]
+ assert_single_changeset_json changeset, js
+ assert_equal 3, js["changeset"]["comments"].count
+ assert_equal comment0.id, js["changeset"]["comments"][0]["id"]
+ assert js["changeset"]["comments"][0]["visible"]
+ assert_equal comment1.id, js["changeset"]["comments"][1]["id"]
+ assert_not js["changeset"]["comments"][1]["visible"]
+ assert_equal comment2.id, js["changeset"]["comments"][2]["id"]
+ assert js["changeset"]["comments"][2]["visible"]