From e4e93f9a9dd761793f04fa0d06792d3086d07ea1 Mon Sep 17 00:00:00 2001
From: stumpylog <797416+stumpylog@users.noreply.github.com>
Date: Tue, 28 Jul 2026 11:07:55 -0700
Subject: [PATCH] test: use HTTPStatus enum instead of bare integers in
 security test assertions

---
 src/documents/tests/test_permission_filtering_security.py | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/src/documents/tests/test_permission_filtering_security.py b/src/documents/tests/test_permission_filtering_security.py
index 305566f97..2d701090b 100644
--- a/src/documents/tests/test_permission_filtering_security.py
+++ b/src/documents/tests/test_permission_filtering_security.py
@@ -189,7 +189,7 @@ class TestAiChatAllDocumentsPermissionBoundary:
             format="json",
         )
 
-        assert response.status_code == 200
+        assert response.status_code == HTTPStatus.OK
         mock_stream_chat.assert_called_once()
         _, kwargs = mock_stream_chat.call_args
         visible_ids = {doc.pk for doc in kwargs["documents"]}
@@ -280,7 +280,7 @@ class TestEmailDocumentPermissionBoundary:
             },
             format="json",
         )
-        assert response.status_code == 403
+        assert response.status_code == HTTPStatus.FORBIDDEN
 
 
 @pytest.mark.django_db
@@ -314,7 +314,7 @@ class TestBulkEditChangePermissionBoundary:
             },
             format="json",
         )
-        assert response.status_code == 403
+        assert response.status_code == HTTPStatus.FORBIDDEN
 
 
 @pytest.mark.django_db