Merge pull request #10985 from owncloud/create-auth-app-norm-user-imp

[tests-only][full-ci] adding test for trying to impersonation and create auth app-token

tests/acceptance/features/apiAuthApp/token.feature

@@ -157,4 +157,11 @@ Feature: create auth-app token
     And the content in the response should include the following content:
       """
       error parsing expiry. Use e.g. 30m or 72h
-      """
+      """
+
+  @env-config
+  Scenario: try to create an auth-app token for a user by a non-admin user
+    Given user "Brian" has been created with default attributes
+    And the config "AUTH_APP_ENABLE_IMPERSONATION" has been set to "true"
+    When user "Alice" tries to create auth-app token for user "Brian" with expiration time "72h" using the auth-app API
+    Then the HTTP status code should be "403"