As a system, the endpoint that returns a specific test step result is not validating the TestRun Id

Description
The endpoint

GET api/testrun/{id}/step/{stepResultId}

is not validating if the Test Step result Id belongs to the Test Run Id passed as parameter. More details, here.

How to reproduce

1. Do a request to the Xray endpoint described, and use a random Test Run ID and the same Test Result ID

Actual result/Attachments
Test Run ID 5700

Test Run ID 5200 (random)

Expected result
If the Test Result Id doesn't belong to the Test Run ID passed as parameter, return an error/message.

Version

• 5.0.4