Description: Any user can create and get comments for a cooperation they are not involved in
Reproducible: always.
Preconditions:
The user is logged in.
Steps to reproduce:
- Create a comment for a cooperation current user not involved in (niether initiator nor receiver).
Actual result:
The comment is created.
Expected result:
A forbidden error must appear.