Notice on scenario title, that I don't mention the anonymous user or not logged (set), simply say that it's a not authorized user since this is directed to developers.