test different user access to form list