test index avail only to store owner, show action available to show view, routes show to owner