add tests for sharing files the users doesn't have access to