REST: Add 403 response spec test for all edit routes

Bug: T375067
Change-Id: I5666051757a2f30c253decbf88f65b2f97008c9b

repo/rest-api/tests/mocha/openapi-validation/PermissionDeniedResponseTest.js

@@ -0,0 +1,25 @@
+'use strict';
+
+const { describeWithTestData } = require( '../helpers/describeWithTestData' );
+const {
+	getItemEditRequests,
+	getPropertyEditRequests,
+	getItemCreateRequest
+} = require( '../helpers/happyPathRequestBuilders' );
+const { expect } = require( '../helpers/chaiHelper' );
+describeWithTestData( '403 for all edit routes', ( itemRequestInputs, propertyRequestInputs ) => {
+	[
+		...getItemEditRequests( itemRequestInputs ),
+		...getPropertyEditRequests( propertyRequestInputs ),
+		getItemCreateRequest( itemRequestInputs )
+	].forEach( ( { newRequestBuilder } ) => {
+		it( `${newRequestBuilder().getRouteDescription()} responds with a valid 403 response`, async () => {
+			const response = await newRequestBuilder()
+				.withJsonBodyParam( 'bot', true )
+				.makeRequest();
+
+			expect( response ).to.have.status( 403 );
+			expect( response ).to.satisfyApiSpec;
+		} );
+	} );
+} );