add tests for logged in user without rights