diff --git a/tests/test_pagure_flask_ui_repo.py b/tests/test_pagure_flask_ui_repo.py
index 6e106e7..87be925 100644
--- a/tests/test_pagure_flask_ui_repo.py
+++ b/tests/test_pagure_flask_ui_repo.py
@@ -2188,6 +2188,10 @@ index 0000000..fb7093d
             output = self.app.post('/foo/delete')
             self.assertEqual(output.status_code, 404)
 
+            # User not allowed
+            output = self.app.post('/test/delete')
+            self.assertEqual(output.status_code, 403)
+
         # User not logged in
         output = self.app.post('/test/delete')
         self.assertEqual(output.status_code, 302)