Add bug demonstration test for sending PUT request to other user's we…

…bdav endpoint
owncloud · Dec 15, 2021 · 8f0575d · 8f0575d
1 parent af71506
commit 8f0575d
Showing 1 changed file with 17 additions and 2 deletions.
diff --git a/tests/acceptance/features/apiAuthWebDav/webDavPUTAuth.feature b/tests/acceptance/features/apiAuthWebDav/webDavPUTAuth.feature
@@ -36,8 +36,9 @@ Feature: get file info using PUT
       | /remote.php/dav/files/%username%/PARENT/parent.txt |
     Then the HTTP status code of responses on all endpoints should be "401"
 
-  @issue-ocis-reva-9 @issue-ocis-reva-197 @skipOnOcV10.3 @skipOnOcV10.4 @skipOnOcV10.5
-  Scenario: send PUT requests to another user's webDav endpoints as normal user
+  @issue-39597 @skipOnOcV10.3 @skipOnOcV10.4 @skipOnOcV10.5 @skipOnOcis
+    #Atfer the issue-39597 is fixed use the scenario below
+  Scenario: send PUT requests to another user's webDav endpoints as normal user (bug demostration)
     When user "Brian" requests these endpoints with "PUT" including body "doesnotmatter" about user "Alice"
       | endpoint                                       |
       | /remote.php/dav/files/%username%/textfile1.txt |
@@ -48,6 +49,19 @@ Feature: get file info using PUT
       | /remote.php/dav/files/%username%/PARENT/parent.txt |
     Then the HTTP status code of responses on all endpoints should be "409"
 
+  @skipOnOcV10
+  Scenario: send PUT requests to another user's webDav endpoints as normal user
+    When user "Brian" requests these endpoints with "PUT" including body "doesnotmatter" about user "Alice"
+      | endpoint                                       |
+      | /remote.php/dav/files/%username%/textfile1.txt |
+      | /remote.php/dav/files/%username%/PARENT        |
+    Then the HTTP status code of responses on all endpoints should be "403"
+    When user "Brian" requests these endpoints with "PUT" including body "doesnotmatter" about user "Alice"
+      | endpoint                                           |
+      | /remote.php/dav/files/%username%/PARENT/parent.txt |
+    Then the HTTP status code of responses on all endpoints should be "403"
+
+
   Scenario: send PUT requests to webDav endpoints using invalid username but correct password
     When user "usero" requests these endpoints with "PUT" including body "doesnotmatter" using the password of user "Alice"
       | endpoint                                           |
@@ -58,6 +72,7 @@ Feature: get file info using PUT
       | /remote.php/dav/files/%username%/PARENT/parent.txt |
     Then the HTTP status code of responses on all endpoints should be "401"
 
+
   Scenario: send PUT requests to webDav endpoints using valid password and username of different user
     When user "Brian" requests these endpoints with "PUT" including body "doesnotmatter" using the password of user "Alice"
       | endpoint                                           |