From 38b425531b5b3abb92aa45670d4046cc3b902171 Mon Sep 17 00:00:00 2001 From: prashant-gurung899 Date: Mon, 23 Sep 2024 14:31:45 +0545 Subject: [PATCH] add tests for any user trying to check api activities Signed-off-by: prashant-gurung899 --- .../features/apiActivities/shareActivities.feature | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/tests/acceptance/features/apiActivities/shareActivities.feature b/tests/acceptance/features/apiActivities/shareActivities.feature index 08e6df6c9cf..00486b26255 100644 --- a/tests/acceptance/features/apiActivities/shareActivities.feature +++ b/tests/acceptance/features/apiActivities/shareActivities.feature @@ -1104,3 +1104,9 @@ Feature: check share activity | permissionsRole | Viewer | When user "Brian" tries to list the activities of file "anotherTextfile.txt" from space "Personal" owned by user "Alice" using the Graph API Then the HTTP status code should be "403" + + @issue-9860 + Scenario: user tries to check activities of another user's file + Given user "Alice" has uploaded file with content "ownCloud test text file" to "textfile.txt" + When user "Brian" tries to list the activities of file "textfile.txt" from space "Personal" owned by user "Alice" using the Graph API + Then the HTTP status code should be "403"