diff --git a/tests/acceptance/features/apiActivities/shareActivities.feature b/tests/acceptance/features/apiActivities/shareActivities.feature
index 08e6df6c9cf..00486b26255 100644
--- a/tests/acceptance/features/apiActivities/shareActivities.feature
+++ b/tests/acceptance/features/apiActivities/shareActivities.feature
@@ -1104,3 +1104,9 @@ Feature: check share activity
       | permissionsRole | Viewer       |
     When user "Brian" tries to list the activities of file "anotherTextfile.txt" from space "Personal" owned by user "Alice" using the Graph API
     Then the HTTP status code should be "403"
+
+  @issue-9860
+  Scenario: user tries to check activities of another user's file
+    Given user "Alice" has uploaded file with content "ownCloud test text file" to "textfile.txt"
+    When user "Brian" tries to list the activities of file "textfile.txt" from space "Personal" owned by user "Alice" using the Graph API
+    Then the HTTP status code should be "403"