Merge pull request #557 from owncloud/add-test-for-remove-comments-fr…

…om-whitelists

[tests-only][full-ci] api test for removing comments app form whitelist for guest user

tests/acceptance/features/apiGuests/guests.feature

@@ -415,3 +415,19 @@ Feature: Guests
     And file "/textfile0.txt" should have the following tags for user "Alice"
       | name        | type   |
       | MySecondTag | normal |
+
+  @email
+  Scenario: a guest user cannot delete other users comments on resource when the comments app is whitelisted
+    Given user "Alice" has been created with default attributes and without skeleton files
+    And user "Alice" has uploaded file with content "some content" to "textfile0.txt"
+    And user "Alice" has commented with content "My first comment" on file "/textfile0.txt"
+    And the administrator has created guest user "guest" with email "[email protected]"
+    And user "Alice" has shared file "/textfile0.txt" with user "[email protected]"
+    And guest user "guest" has registered
+    And the administrator has limited the guest access to the default whitelist apps
+    And the administrator has added the app "comments" to the whitelist for the guest user
+    When user "[email protected]" deletes the last created comment using the WebDAV API
+    Then the HTTP status code should be "403"
+    And user "Alice" should have the following comments on file "/textfile0.txt"
+      | user  | comment          |
+      | Alice | My first comment |