diff --git a/src/plone/restapi/tests/test_services_users.py b/src/plone/restapi/tests/test_services_users.py index fce04b276c..2db6701e3e 100644 --- a/src/plone/restapi/tests/test_services_users.py +++ b/src/plone/restapi/tests/test_services_users.py @@ -1363,3 +1363,18 @@ def test_siteadm_not_delete_manager(self): transaction.commit() self.assertIsNotNone(api.user.get(userid="noam")) + + def test_siteadm_not_add_manager(self): + self.set_siteadm() + self.api_session.post( + "/@users", + json={ + "username": "howard", + "email": "howard.zinn2@example.com", + "password": "peopleshistory", + "roles": ["Manager"], + }, + ) + transaction.commit() + + self.assertIsNone(api.user.get(userid="howard"))