testing access rights