Spec tests for authorization