diff --git a/cypress/e2e/directediting.spec.js b/cypress/e2e/directediting.spec.js
index b1bc55e258c..d9df954ff5b 100644
--- a/cypress/e2e/directediting.spec.js
+++ b/cypress/e2e/directediting.spec.js
@@ -28,6 +28,12 @@ describe('direct editing', function () {
 		initUserAndFiles(user, 'test.md', 'empty.md', 'empty.txt')
 	})
 
+	beforeEach(function () {
+		// ensure user is enabled if it was disabled before
+		cy.clearCookies()
+		cy.enableUser(user, true)
+	})
+
 	it('Open an existing file, edit it', () => {
 		cy.login(user)
 		cy.createDirectEditingLink('empty.md').then((token) => {
@@ -69,4 +75,30 @@ describe('direct editing', function () {
 			'# This is a headline\nSome text\n',
 		)
 	})
+
+	it('Cannot open as disabled user', () => {
+		cy.login(user)
+		cy.createDirectEditingLink('empty.md').as('token')
+		cy.clearCookies()
+		cy.enableUser(user, false)
+		cy.get('@token')
+			.then((token) => {
+				cy.request({ url: token, failOnStatusCode: false })
+			})
+			.its('status')
+			.should('equal', 404)
+	})
+
+	it('Cannot open as deleted user', () => {
+		cy.login(user)
+		cy.createDirectEditingLink('empty.md').as('token')
+		cy.clearCookies()
+		cy.deleteUser(user)
+		cy.get('@token')
+			.then((token) => {
+				cy.request({ url: token, failOnStatusCode: false })
+			})
+			.its('status')
+			.should('equal', 404)
+	})
 })