Updated test cases to assert forbidden responses instead of successful ones for employee site settings.