Added test to prevent unauthorized access to another user's resource