test user authority