Grant/Revoke facilities, unit-tests