Added test for authorization bypass - updated resource name