- fetching all user details and update user route not protected - Expected :- not all users should have access to update others details and un-authorised users should not be able to fetch all all users data