Customer Should GET a queue service's destination on rejection

Given I am authenticated as customer K0002
And there is a queue service with service number 345
When I send /api/customers/K0002/targets/queue-services/345/destination-on-rejection
Then I should receive HTTP/1.1 200 OK
And Content-Type header should be
with following body:

{
  "href": "/api/customers/K0002/targets/queue-services/345/destination-on-rejection",
  "links": [{
    "rel": "destinationOnRejection",
    "href": "/api/customers/K0002/targets/NO_ACTION"
  }, {
    "rel": "availableDestinations",
    "href": "/api/customers/K0002/targets/queue-services/available-destinations-on-rejection"
  }],
  "data": [{
    "name": "joinEmpty",
    "value": true
  }]
}

Shouldn't get a queue service's destination on rejection for OUTBOUND Queue

Given I am authenticated as customer K0002
And there is OUTBOUND queue service with service number 345
When I send /api/customers/K0002/targets/queue-services/345/destination-on-rejection
Then I should receive HTTP/1.1 400 Bad Request
with following body:

{
  "errors": [{
    "message": "Operation not allowed for OUTBOUND direction"
  }]
}

Missing Queue

Given I am authenticated as customer K0002
and there is no queue service with 404 identifier
When I send /api/customers/K0002/targets/queue-services/404/destination-on-rejection
Then I should receive HTTP/1.1 404 Not Found
with following body:

{
  "title": "Queue not found",
  "detail": "Queue with serviceNumber 404 not found",
  "described_by": "http://api.nfon.net/probs/queue-not-found"
}

Missing Customer

Given I am authenticated as Admin
When I send /api/customers/K404/targets/queue-services/345/destination-on-rejection
Then I should receive HTTP/1.1 404 Not Found
with following body:

{
  "title": "Customer not found",
  "detail": "Customer with identifier K404 has not been found",
  "described_by": "http://api.nfon.net/probs/customer-not-found"
}

Customer should not be able to GET another Customer's Queue's Destination On Rejection

Given there is a queue service with service number 345
and I am authenticated as Customer K0003
When I send /api/customers/K0002/targets/queue-services/345/destination-on-rejection
Then I should receive HTTP/1.1 403 Forbidden
with following body:

{
  "title": "Access forbidden",
  "detail": "Access denied to [Customer] with id [K0002]",
  "described_by": "http://api.nfon.net/probs/invalid-authorization"
}

System Integrator should not be able to GET data of a Customer that he cannot manage

Given there is a queue service with service number 345
and I am authenticated as System Integrator S0002
When I send /api/customers/K0003/targets/queue-services/345/destination-on-rejection
Then I should receive HTTP/1.1 403 Forbidden
with following body:

{
  "title": "Access forbidden",
  "detail": "Access denied to [Customer] with id [K0003]",
  "described_by": "http://api.nfon.net/probs/invalid-authorization"
}

Operator should not be able to GET data of a Customer that he cannot manage

Given there is a queue service with service number 345
and I am authenticated as Operator C0002
When I send /api/customers/K0003/targets/queue-services/345/destination-on-rejection
Then I should receive HTTP/1.1 403 Forbidden
with following body:

{
  "title": "Access forbidden",
  "detail": "Access denied to [Customer] with id [K0003]",
  "described_by": "http://api.nfon.net/probs/invalid-authorization"
}

Service Portal REST API

GET /api/customers/{customer-id}/targets/queue-services/{service-number}/destination-on-rejection