[Api][Address] Add missing behats scenario

config/packages/security.yaml

@@ -147,6 +147,6 @@ security:
 
         - { path: "%sylius.security.new_api_admin_regex%/.*", role: ROLE_API_ACCESS }
         - { path: "%sylius.security.new_api_route%/admin/authentication-token", role: IS_AUTHENTICATED_ANONYMOUSLY }
-        - { path: "%sylius.security.new_api_shop_regex%/.*", role: IS_AUTHENTICATED_ANONYMOUSLY }
-        - { path: "%sylius.security.new_api_route%/shop/authentication-token", role: IS_AUTHENTICATED_ANONYMOUSLY }
         - { path: "%sylius.security.new_api_user_account_regex%/.*", role: ROLE_USER }
+        - { path: "%sylius.security.new_api_route%/shop/authentication-token", role: IS_AUTHENTICATED_ANONYMOUSLY }
+        - { path: "%sylius.security.new_api_shop_regex%/.*", role: IS_AUTHENTICATED_ANONYMOUSLY }

features/account/customer_account/address_book/preventing_not_logged_user_from_operations_on_address_book.feature

@@ -0,0 +1,27 @@
+@address_book
+Feature: Preventing not logged user from operations on the address book
+    In order to protect address book from unauthorised operation
+    As a Visitor
+    I want to not be able to operate on address book
+
+    Background:
+        Given the store operates on a single channel in "United States"
+        And there is a customer "John Doe" identified by an email "doe@example.com" and a password "banana"
+        And this customer has an address "John Doe", "Banana Street", "90232", "New York", "United States", "Kansas" in their address book
+
+    @api
+    Scenario: Trying to add new address as a Visitor
+        When I want to add a new address to my address book
+        And I specify the address as "Lucifer Morningstar", "Seaside Fwy", "90802", "Los Angeles", "United States", "Arkansas"
+        And I try to add it
+        Then I should not be able to add it
+
+    @api
+    Scenario: Trying to view address as a Visitor
+        When I try to view details of address belongs to "John Doe"
+        Then I should not see any details of address
+
+    @api
+    Scenario: Trying to delete address as a Visitor
+        When I try to delete address belongs to "John Doe"
+        Then I should not be able to delete it

features/account/customer_account/address_book/viewing_addresses.feature

@@ -22,8 +22,3 @@ Feature: Viewing my address book
         Then I should have a single address in my address book
         And this address should be assigned to "Lucifer Morningstar"
         And I should not see the address assigned to "John Doe"
-
-    @api
-    Scenario: Inability to view details of an address belonging to other customer
-        When I try to view details of address belonging to "John Doe"
-        Then I should not see any details of address

src/Sylius/Behat/Context/Api/Shop/AddressContext.php

@@ -92,6 +92,7 @@ public function iSpecifyTheAddressAs(AddressInterface $address): void
 
     /**
      * @When I add it
+     * @When I try to add it
      */
     public function iAddIt(): void
     {
@@ -157,6 +158,14 @@ public function iDeleteTheAddress(string $fullName): void
         $this->addressClient->delete($id);
     }
 
+    /**
+     * @When /^I try to delete (address belongs to "([^"]+)")$/
+     */
+    public function iDeleteTheAddressBelongsTo(AddressInterface $address): void
+    {
+        $this->addressClient->delete($this->iriConverter->getIriFromItem($address));
+    }
+
     /**
      * @When I set the address of :fullName as default
      */
@@ -170,11 +179,11 @@ public function iSetTheAddressOfAsDefault(string $fullName): void
     }
 
     /**
-     * @When /^I try to view details of (address belonging to "([^"]+)")$/
+     * @When /^I try to view details of (address belongs to "([^"]+)")$/
      */
     public function iTryToViewDetailsOfAddressBelongingTo(AddressInterface $address): void
     {
-        $this->client->showByIri($this->iriConverter->getIriFromItem($address));
+        $this->addressClient->showByIri($this->iriConverter->getIriFromItem($address));
     }
 
     /**
@@ -325,7 +334,23 @@ public function iShouldBeNotifiedThatAddressHasBeenSetAsDefault(): void
      */
     public function iShouldNotSeeAnyDetailsOfAddress(): void
     {
-        Assert::same($this->responseChecker->getError($this->client->getLastResponse()), 'Not Found');
+        Assert::same($this->responseChecker->getError($this->addressClient->getLastResponse()), 'JWT Token not found');
+    }
+
+    /**
+     * @Then I should not be able to add it
+     */
+    public function iShouldNotBeAbleToDoIt(): void
+    {
+        Assert::false($this->responseChecker->isCreationSuccessful($this->addressClient->getLastResponse()));
+    }
+
+    /**
+     * @Then I should not be able to delete it
+     */
+    public function iShouldNotBeAbleToDeleteIt(): void
+    {
+        Assert::false($this->responseChecker->isDeletionSuccessful($this->addressClient->getLastResponse()));
     }
 
     private function addressBookHasAddress(array $addressBook, AddressInterface $addressToCompare): bool

src/Sylius/Behat/Context/Transform/AddressContext.php

@@ -150,7 +150,7 @@ public function getByStreet($street)
 
     /**
      * @Transform /^address of "([^"]+)"$/
-     * @Transform /^address belonging to "([^"]+)"$/
+     * @Transform /^address belongs to "([^"]+)"$/
      */
     public function getByFullName(string $fullName): AddressInterface
     {