Access control prototype #2 + tests