Merge pull request #10132 from owncloud/tests-any-user-api-activities

[tests-only][full-ci] add tests to check api activities of a user's file by any user
owncloud · Oct 2, 2024 · 0cf56be · 0cf56be
2 parents 0dc9811 + 9082a51
commit 0cf56be
Showing 1 changed file with 8 additions and 0 deletions.
diff --git a/tests/acceptance/features/apiActivities/activities.feature b/tests/acceptance/features/apiActivities/activities.feature
@@ -2028,3 +2028,11 @@ Feature: check activities
         }
       }
       """
+
+  @issue-9860
+  Scenario: user tries to check activities of another user's file
+    Given user "Brian" has been created with default attributes and without skeleton files
+    And user "Alice" has uploaded file with content "ownCloud test text file" to "textfile.txt"
+    And user "Alice" has uploaded file with content "updated ownCloud test text file" to "textfile.txt"
+    When user "Brian" tries to list the activities of file "textfile.txt" from space "Personal" owned by user "Alice" using the Graph API
+    Then the HTTP status code should be "403"