Add a test for view CampaignId

Ensure a user cannot view a campaign they do not have the rights to view.