DELETE removes one Customer's Speed Dial entry

Given I am authenticated as customer K0002
and there is a Speed Dial with

id: 100
name: SpeedDial1
destination: *555#1234
code: 1255

When I send /api/customers/K0002/speed-dials/100
Then I should receive HTTP/1.1 204 No Content

Given I am authenticated as customer K0002
When I send /api/customers/K0002/speed-dials/100
Then I should receive HTTP/1.1 404 Not Found
with following body:

{
  "detail": "Speed Dial with ID 100 has not been found",
  "title": "Speed Dial not found",
  "described_by": "http://api.nfon.net/probs/speed-dial-not-found"
}

Cannot delete Speed Dial entry of another Customer by ID

Given I am authenticated as customer K0003
and there is a Speed Dial with

id: 100
name: SpeedDial1
destination: *555#1234
code: 1255

which belongs to Customer K0002
When I send /api/customers/K0003/speed-dials/100
Then I should receive HTTP/1.1 404 Not Found
with following body:

{
  "detail": "Speed Dial with ID 100 has not been found",
  "title": "Speed Dial not found",
  "described_by": "http://api.nfon.net/probs/speed-dial-not-found"
}

Missing Speed Dial

Given I am authenticated as customer K0002
And there is no Speed Dial with ID 404 When I send /api/customers/K0002/speed-dials/404
Then I should receive HTTP/1.1 404 Not Found

{
  "detail": "Speed Dial with ID 404 has not been found",
  "title": "Speed Dial not found",
  "described_by": "http://api.nfon.net/probs/speed-dial-not-found"
}

Missing Customer

Given I am authenticated as Admin
When I send /api/customers/K0404/speed-dials/100
Then I should receive HTTP/1.1 404 Not Found

{
  "detail": "Customer with identifier K0404 has not been found",
  "title": "Customer not found",
  "described_by": "http://api.nfon.net/probs/customer-not-found"
}

System Integrator should not be able to DELETE Speed Dial entry of a Customer that he cannot manage

Given I am authenticated as System Integrator S0002
When I send /api/customers/K0003/targets/speed-dials/100
Then I should receive HTTP/1.1 403 Forbidden

{
  "title": "Access forbidden",
  "detail": "Access denied to [Customer] with id [K0003]",
  "described_by": "http://api.nfon.net/probs/invalid-authorization"
}

Operator should not be able to DELETE Speed Dial entry of a Customer that he cannot manage

Given I am authenticated as Operator C0002
When I send /api/customers/K0003/targets/speed-dials/100
Then I should receive HTTP/1.1 403 Forbidden

{
  "title": "Access forbidden",
  "detail": "Access denied to [Customer] with id [K0003]",
  "described_by": "http://api.nfon.net/probs/invalid-authorization"
}

Service Portal REST API

DELETE /api/customers/{customer-id}/speed-dials/{speed-dial-id}