diff --git a/spec/services/filtering_service_spec.rb b/spec/services/filtering_service_spec.rb
index 5966012..92971d0 100644
--- a/spec/services/filtering_service_spec.rb
+++ b/spec/services/filtering_service_spec.rb
@@ -15,6 +15,7 @@ describe FilteringService do
   before do
     project1.team << [user, :master]
     project2.team << [user, :developer]
+    project2.team << [user2, :developer]
   end
 
   describe 'merge requests' do
@@ -61,5 +62,20 @@ describe FilteringService do
       issues = FilteringService.new.execute(Issue, user, params)
       issues.size.should == 1
     end
+
+    it 'should be empty for unauthorized user' do
+      params = { scope: "all", state: 'opened' }
+      issues = FilteringService.new.execute(Issue, nil, params)
+      issues.size.should be_zero
+    end
+
+    it 'should not include unauthorized issues' do
+      params = { scope: "all", state: 'opened' }
+      issues = FilteringService.new.execute(Issue, user2, params)
+      issues.size.should == 2
+      issues.should_not include(issue1)
+      issues.should include(issue2)
+      issues.should include(issue3)
+    end
   end
 end
--
libgit2 0.21.2