maybe write also a test if `AccessDenied` is raised