ticket:5 Tests for changing data with and without authorization.