The spec to test not_found bahviour should be inside
the "when use is owner" context so it doesn't overlap
with the conditions checking if user is owner. This
makes the test more solid that it is testing for the
right condition.