test: add integration test for upload case

test: add integration test for upload case

Assisted-by: Claude:claude-sonnet-5

Signed-off-by: Salvatore Martire <4652631+salmart-dev@users.noreply.github.com>

[skip ci]

Author: salmart-dev

build/integration/dav_features/webdav-related.feature

@@ -424,6 +424,14 @@ Feature: webdav-related
 		And Downloading file "/myChunkedFile.txt"
 		Then Downloaded content should be "AAAAABBBBBCCCCC"
 
+	Scenario: Cannot create a chunked upload in another user's uploads folder
+		Given using new dav path
+		And user "user0" exists
+		And user "user1" exists
+		And As an "user1"
+		When user "user1" creates a new chunking upload with id "chunking-42" in the uploads folder for "user0"
+		Then the HTTP status code should be "403"
+
 	Scenario: A disabled user cannot use webdav
 		Given user "userToBeDisabled" exists
 		And As an "admin"

build/integration/features/bootstrap/WebDav.php

@@ -879,6 +879,18 @@ public function userCreatesANewChunkingUploadWithId($user, $id) {
 		$this->makeDavRequest($user, 'MKCOL', $destination, [], null, 'uploads');
 	}
 
+	/**
+	 * @When user :user creates a new chunking upload with id :id in the uploads folder for :uidOrToken
+	 */
+	public function userCreatesANewChunkingUploadWithIdInFolderOf($user, $id, $uidOrToken): void {
+		$destination = '/uploads/' . $uidOrToken . '/' . $id;
+		try {
+			$this->response = $this->makeDavRequest($user, 'MKCOL', $destination, [], null, 'uploads');
+		} catch (\GuzzleHttp\Exception\ClientException $e) {
+			$this->response = $e->getResponse();
+		}
+	}
+
 	/**
 	 * @Given user :user uploads new chunk file :num with :data to id :id
 	 */