Add integration test for resource evaluation

scripts/storage-emulator-integration/storage.rules

@@ -3,7 +3,7 @@ service firebase.storage {
   match /b/{bucket}/o {
     match /{allPaths=**} {
       allow read, create, update: if request.auth != null;
-      allow delete: if request.auth != null && resource.name != null;
+      allow delete: if request.auth != null && resource.metadata.contentType != 'text/plain';
     }
 
     match /public/{allPaths=**} {

scripts/storage-emulator-integration/tests.ts

@@ -1212,6 +1212,32 @@ describe("Storage emulator", () => {
 
         expect(error).to.contain("does not exist.");
       });
+
+      it("delete prevented by security rule", async () => {
+        const downloadUrl = await page.evaluate((filename) => {
+          return firebase.storage().ref(filename).getDownloadURL();
+        }, filename);
+
+        expect(downloadUrl).to.be.not.null;
+
+        await page.evaluate((filename) => {
+          firebase.storage().ref(filename).updateMetadata({ contentType: "text/plain" });
+        }, filename);
+
+        const error = await page.evaluate((filename) => {
+          return new Promise((resolve) => {
+            firebase
+              .storage()
+              .ref(filename)
+              .delete()
+              .catch((err) => {
+                resolve(err.message);
+              });
+          });
+        }, filename);
+
+        expect(error).to.contain("does not have permission to access");
+      });
     });
 
     emulatorSpecificDescribe("Non-SDK Endpoints", () => {