I'm not clear what is being tested here. Isn't this test exactly the same as the one above? Don't we want a test for which we deny access?