Add test to verify User admin attribute is not accessible