Change users resource; add access denied exception