Add test to check that a teacher cannot batch-delete students.

Author: fspeirs

spec/features/school_student/batch_deleting_school_students_spec.rb

@@ -47,6 +47,16 @@
       expect(Project.where(id: project_2.id)).not_to exist
     end
 
+    it 'responds 403 Forbidden when the user is a school-teacher' do
+      authenticated_in_hydra_as(teacher)
+
+      delete "/api/schools/#{school.id}/students/batch",
+             params: { student_ids: [student_1.id, student_2.id] },
+             headers: headers
+
+      expect(response).to have_http_status(:forbidden)
+    end
+
     it 'returns error when no student IDs provided' do
       delete "/api/schools/#{school.id}/students/batch",
              headers: headers