add tests for any user trying to check api activities

Signed-off-by: prashant-gurung899 <[email protected]>

tests/acceptance/features/apiActivities/activities.feature

@@ -4,7 +4,10 @@ Feature: check activities
   So that I can track modifications
 
   Background:
-    Given user "Alice" has been created with default attributes and without skeleton files
+    Given these users have been created with default attributes and without skeleton files:
+      | username |
+      | Alice    |
+      | Brian    |
 
   @issue-9712
   Scenario: check activities after uploading a file and a folder
@@ -2028,3 +2031,10 @@ Feature: check activities
         }
       }
       """
+
+  @issue-9860
+  Scenario: user tries to check activities of another user's file
+    Given user "Alice" has uploaded file with content "ownCloud test text file" to "textfile.txt"
+    And user "Alice" has uploaded file with content "updated ownCloud test text file" to "textfile.txt"
+    When user "Brian" tries to list the activities of file "textfile.txt" from space "Personal" owned by user "Alice" using the Graph API
+    Then the HTTP status code should be "403"