Add test cases for getting restricted user info.

Replaces the unauthorized test case, since instead of being unauthorize,
users just get a limited amount of info.