Add TODO for replacing authorization in API v3 query endpoint
Test that user with sufficient rights can publicize query
Test user with sufficient rights can depublicize query
Consider difference between update/(de-)publicize
Fix TODO syntax
Use ActiveRecord::Dirty to get changes on query
Extract 'update' handling
Test that many policies are followed
Test that 'update' policy is ignored
Recognize filter changes correctly
State action explicitly
Use 'changed' variable for if statement
Improve implementation
Add comments to explain implementation in detail
Ensure each action is called once
Improve context description
Improve spec readability
Merge pull request #2008 from opf/fix/16650_impossible_to_unpublicize_query_by_other_user_even_when_permission_is_assigned

16650 impossible to unpublicize query by other user even when permission is assigned