diff --git a/server/test/user_test.gleam b/server/test/user_test.gleam
index dc3196b..59c074d 100644
--- a/server/test/user_test.gleam
+++ b/server/test/user_test.gleam
@@ -42,3 +42,21 @@ pub fn find_by_id_test() {
 
   assert got == expected
 }
+
+pub fn find_by_id_non_existent_test() {
+  use ctx <- testing.with_context()
+  let path = "/api/user"
+
+  let url = path <> "/" <> uuid.v7_string()
+
+  let req = simulate.browser_request(http.Get, url)
+  let resp = router.handle_request(req, ctx)
+  assert resp.status == 401
+
+  let with_auth =
+    simulate.browser_request(http.Get, url)
+    |> testing.with_permissions(ctx, with: role.Admin)
+
+  let resp = router.handle_request(with_auth, ctx)
+  assert resp.status == 404
+}