Test security injection on findAll() method